Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: qIWhR6z+SZDVqso/63L6g5q+degRtHfkOtXJFcO1pZM=
Subject key identifier: D4:D9:75:BE:A8:C7:7A:D1:A4:1E:DD:2D:8E:3E:BF:11:A0:C4:CF:7E
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01A1DB02163D2CA0356D64AA74DB4857BD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1B0C
Signing time: Sat 14 Nov 2026 17:01:49 +0000
Manifest this update: Sat 14 Nov 2026 17:01:49 +0000
Manifest next update: Sun 15 Nov 2026 17:01:49 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: epqOLsUeip70cgG882sj95rROqLQJ9Yg8FBJckr2+uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:16:3d:2c:a0:35:6d:64:aa:74:db:48:57:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Nov 14 17:01:49 2026 GMT
Not After : Nov 15 17:01:49 2026 GMT
Subject: CN=d4d975bea8c77ad1a41edd2d8e3ebf11a0c4cf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:bb:e2:80:19:c1:1b:46:c8:7e:49:ec:cc:
d7:6e:10:96:33:cd:19:06:57:79:cb:16:f6:c5:c2:
d2:f4:06:aa:4f:bc:b5:6b:5e:de:03:14:45:7b:04:
be:ed:e2:9a:87:81:2d:4d:98:4b:f4:c4:e1:cc:1b:
ed:03:55:9a:3d:60:f9:3f:fd:9a:ca:97:96:66:61:
9d:f1:c9:71:cc:22:27:25:ad:b3:53:a7:05:74:f9:
8d:90:85:ed:a2:dd:b6:53:84:52:b6:85:8e:c4:90:
16:f1:18:d1:15:dd:bd:5a:ce:f7:8b:53:76:40:a1:
b6:bd:78:46:20:ec:29:32:02:4c:96:92:63:7b:92:
2f:da:4a:90:91:d9:ff:94:21:fa:7d:8c:f5:8f:f5:
6e:64:80:26:b0:46:af:32:21:24:1d:60:4e:7c:d7:
dc:9c:87:09:6e:9f:f8:64:99:c9:ec:c8:59:7a:ec:
e9:0d:2b:1b:4c:36:20:9e:2b:21:43:eb:81:88:38:
f6:d0:47:b1:af:cf:70:a9:dd:00:20:65:9e:dc:12:
97:e0:5f:fe:10:c6:5e:cb:0e:01:5a:34:4b:60:2d:
d8:b8:4d:7e:d5:09:90:a3:8a:a8:48:dc:fc:60:dc:
87:49:fb:ed:fa:76:a6:44:52:19:33:72:f6:83:76:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D9:75:BE:A8:C7:7A:D1:A4:1E:DD:2D:8E:3E:BF:11:A0:C4:CF:7E
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:eb:fc:17:f0:e2:f5:e3:21:0a:62:75:ab:e6:16:16:fc:86:
0d:f9:9e:30:c8:5e:77:9f:04:8d:1d:83:b5:4d:0f:01:e5:c0:
35:05:66:da:78:2c:d4:e3:80:d7:57:56:12:31:45:55:94:8f:
8e:23:2f:19:8d:69:70:95:ef:7a:8d:35:ad:e1:25:b9:c6:74:
cd:bc:52:19:0c:74:0e:77:c6:1d:eb:c4:32:d6:c0:6c:81:dd:
fb:a1:c1:aa:c8:10:4f:73:84:ba:e8:29:55:cb:50:6a:21:c3:
4e:6b:ba:12:05:6e:53:1d:29:57:1b:91:50:e3:1a:03:05:27:
03:23:1e:3b:3a:ea:34:46:50:fe:88:71:ce:5c:11:26:ae:0d:
fa:f0:25:a1:0a:86:c2:66:e4:50:91:a3:c8:7a:c9:d1:99:e6:
6d:4f:e5:45:b3:4a:0e:d8:8d:6c:a2:bb:b7:4f:94:33:dc:53:
dd:d5:d9:54:e2:a5:12:92:42:e3:10:d8:c5:c8:3e:c4:e7:aa:
24:e9:95:ca:76:d8:12:b0:3d:c0:b4:20:d5:0b:e2:45:a7:b1:
2d:b5:0c:ad:d8:37:36:4d:25:c1:fb:97:e5:df:66:58:55:ff:
93:6d:e1:26:73:3b:c6:aa:b5:1d:c2:1b:c1:81:3c:54:df:76:
5b:47:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:22:39 2026 by rpki-client