Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: jtiLJbhloknPtqKv3CjHrjnCztL1pcY2ICjLmLPZiyg=
Subject key identifier: 33:40:3D:67:63:1F:C7:10:03:02:EC:5D:9B:5A:0B:73:62:5B:F2:1F
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019E1DC74C3B28B345519EB5DBE859E361D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 16AB
Signing time: Tue 12 May 2026 20:01:00 +0000
Manifest this update: Tue 12 May 2026 20:01:00 +0000
Manifest next update: Wed 13 May 2026 20:01:00 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: hFPssmV9Ol9KLJoA5aSj1qDCWO68FG1b2IR6bIa8hNs=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:4c:3b:28:b3:45:51:9e:b5:db:e8:59:e3:61:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: May 12 20:01:00 2026 GMT
Not After : May 13 20:01:00 2026 GMT
Subject: CN=33403d67631fc7100302ec5d9b5a0b73625bf21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:7d:26:3e:6a:78:af:9b:c0:82:97:b3:1c:
7c:95:99:44:96:98:e5:78:9b:3e:e0:89:8c:c2:53:
9c:7a:ad:63:8e:3b:1a:59:ba:84:9a:51:a0:63:55:
78:f5:5b:44:ea:01:ca:bc:fc:5b:1e:b8:85:66:17:
ae:13:e3:31:bd:b2:94:ca:1f:43:7b:2f:53:24:ca:
b4:75:2a:59:f9:e0:d5:1c:0c:38:62:26:08:e4:a3:
5a:bd:76:76:85:bb:d5:55:e1:80:b1:37:40:93:0c:
5b:93:3a:ae:5b:9a:e9:1a:f7:5d:19:9f:6c:4b:a6:
14:48:b0:0c:f9:c0:f5:8b:5d:c5:28:7e:7e:eb:96:
b0:c3:0e:22:6c:47:92:f3:7c:b0:92:12:73:7c:ed:
94:ff:14:05:c5:79:cb:be:91:73:dd:6a:1e:1c:0c:
85:88:f6:3c:3a:65:b8:12:da:f2:67:d8:5c:d0:c4:
71:38:3c:3f:5c:8d:24:dc:51:7f:66:5e:9b:97:b9:
de:93:7d:c2:21:64:5c:07:60:41:86:d8:50:f8:94:
e9:52:1c:ce:2a:eb:74:9c:86:3f:4b:2b:67:69:6e:
5c:d4:70:e2:f1:19:63:f4:92:14:21:d4:02:cd:a4:
1c:d7:9f:a1:36:c1:84:4a:8a:61:6b:19:2f:d1:c9:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:3D:67:63:1F:C7:10:03:02:EC:5D:9B:5A:0B:73:62:5B:F2:1F
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:30:5f:a5:80:90:4a:8f:b7:7f:4f:4e:63:72:01:5e:9e:18:
6f:b0:6a:12:aa:60:fb:ed:14:94:06:b3:94:11:61:e4:f2:18:
9d:ba:cb:73:3a:6a:94:d8:25:f6:e4:4b:c5:71:29:1d:c4:9e:
da:cd:b8:83:9b:15:2d:6c:ac:0b:52:57:96:71:04:2e:e7:ad:
ba:83:38:5a:cd:b5:64:19:c9:f7:3a:03:96:e2:2d:26:ce:73:
81:ff:e9:d9:82:60:db:2a:10:67:e0:23:7c:46:0b:36:38:27:
d4:23:c5:64:28:fe:db:85:48:b5:85:a9:37:90:95:74:24:5f:
cf:32:32:61:28:8b:50:38:ed:8a:e7:e0:84:21:d4:8d:fa:18:
b4:9d:ce:68:8e:34:1d:dc:4b:01:d2:b0:db:f9:85:bb:53:76:
59:25:3d:24:7e:eb:f6:d5:d6:c3:4f:aa:05:a9:6f:89:ce:07:
6d:79:6e:44:99:79:2d:90:77:3b:3c:c9:b9:e4:22:ba:b7:b9:
06:00:16:ac:2e:6f:62:56:1c:4d:ab:7b:8b:76:43:c4:ed:67:
54:7d:40:cf:46:62:85:76:c3:b3:1c:79:cb:86:81:7e:54:f3:
78:24:6b:c4:4f:ef:fb:37:fa:92:53:15:fb:e6:d4:04:7a:e5:
ed:4b:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:58 2026 by rpki-client