Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: K64n8mwTuG+UoHSSDfdXLhuIR2z47wMhh9MQ2xi9Y6A=
Subject key identifier: 85:FB:14:0C:27:50:85:1F:96:D6:00:3C:06:B1:46:56:2F:91:C8:1C
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019D27A8E1DC82BDB15E5105158170855940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: eEtV8Fqn0Dp2RxLzEeNKZzBbSt0SJwwnupmo8Cn0PNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:dc:82:bd:b1:5e:51:05:15:81:70:85:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=85fb140c2750851f96d6003c06b146562f91c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:18:a3:02:3a:57:c4:63:b8:4b:41:5e:28:
9a:87:8b:ec:b1:d1:72:3e:82:22:e7:a2:cf:90:47:
80:79:6e:8c:c6:e2:00:89:03:25:78:46:8f:16:c7:
95:2a:c4:ae:b4:5c:de:ba:38:15:a0:7c:b7:34:f7:
bd:b1:35:49:df:42:a0:c7:28:b9:9a:3e:39:b8:3b:
cb:79:bd:89:07:ad:22:49:1b:7e:7b:75:2c:81:1c:
41:33:cd:96:5e:3b:6d:64:1b:6c:f3:ab:25:b4:0d:
2f:cb:23:35:b5:b0:48:69:bf:85:6a:9d:44:ee:32:
90:b8:09:1b:37:22:86:e8:8f:1e:2a:82:46:bf:51:
03:54:cb:ce:39:51:9e:40:6f:b8:ba:f1:1c:78:f4:
c7:14:4e:a4:74:46:8a:ea:c8:b6:3f:b1:20:23:f0:
ea:6c:fe:4b:44:af:69:86:60:8e:48:c2:a9:d7:a5:
d0:ed:16:b9:3f:3f:18:42:54:0e:bc:91:f6:19:20:
54:1e:c4:6e:e7:e4:ea:c0:cd:90:36:42:35:8c:03:
31:af:f2:bc:2b:d8:d2:91:6f:87:9d:0a:5b:f9:48:
e0:89:80:be:6a:41:dd:e5:fa:b2:20:f7:4b:b9:4f:
0c:c1:8b:27:72:70:c6:18:af:d0:0c:8e:6d:13:8b:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:14:0C:27:50:85:1F:96:D6:00:3C:06:B1:46:56:2F:91:C8:1C
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:4a:91:a6:52:6e:9e:a3:9e:83:78:61:9e:e6:df:00:2f:
01:8c:1e:28:32:d3:e9:e2:47:80:93:03:43:a1:67:5d:e4:19:
58:cf:21:e4:31:36:ef:2d:1f:d9:7b:75:3b:55:5f:2d:a3:77:
99:51:19:ab:df:c4:84:10:46:99:c3:44:a5:15:1d:ca:55:6c:
83:d6:6d:77:99:80:ff:99:4f:c5:0c:f4:40:30:4c:52:d7:d8:
9f:98:ca:4b:fe:83:af:6f:56:6e:3b:61:b2:22:87:1c:50:43:
0f:bb:2e:f1:bc:2a:80:fe:b7:35:69:9a:86:7a:18:94:65:4f:
20:9b:db:5c:46:f2:23:60:15:2e:52:63:95:03:ab:a8:e9:11:
c9:56:34:9f:75:9b:da:18:b9:4c:f3:53:eb:20:77:83:58:94:
f6:04:03:9b:d5:3e:cd:7e:1e:07:79:41:65:49:96:b2:b6:0e:
7e:0a:a4:f1:7f:63:30:13:95:5f:14:f4:37:47:8c:33:37:10:
e9:d3:a8:32:2d:12:09:2e:f7:07:fb:37:e8:73:32:2a:06:c8:
74:31:a5:60:4d:ab:60:66:c9:03:90:86:6a:cb:76:8b:3b:16:
f1:57:42:61:7f:51:29:bf:af:e7:5e:62:08:6b:9d:cf:c9:f3:
60:78:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:41 2026 by rpki-client