Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: 6sdknaBh7xNhR9JG3JL9qkNcyiJiOrBWoCrvXNTw40s=
Subject key identifier: E6:11:B8:66:96:B6:9F:F1:2B:32:35:7D:23:9F:7D:AF:B1:AE:10:2E
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 019D28F29E8848026BBA92FA5FF534623C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: Q8kNtG/iGpFI0/O9mJ/fRnmi6hWyLlm+3Vcc6Gek+EE=)
2: w73J2wKuabz6xF5h7oZy0LH-4cE.roa (hash: Rf9ykuk+l/JPt0H5ZkccxWBMK9ULnk1SQbpqnOL7oFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9e:88:48:02:6b:ba:92:fa:5f:f5:34:62:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=e611b86696b69ff12b32357d239f7dafb1ae102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:bd:f1:8e:e0:12:53:f2:41:8a:fe:93:75:
0e:cd:e5:c1:69:bf:39:e7:f6:e9:62:15:b8:69:a5:
8b:3a:27:2f:ad:f7:68:cd:99:05:78:85:2a:ce:18:
6d:4d:81:f2:20:df:45:42:3e:3a:b5:15:a2:cd:7c:
c2:80:43:09:92:16:6f:91:cc:7a:8d:cd:a0:be:ca:
e5:74:a6:4f:54:5b:67:73:2a:d7:0d:ba:77:ce:be:
13:13:28:e7:da:4b:76:95:5f:eb:7a:3c:92:44:33:
91:4c:fe:94:98:68:18:09:6e:66:a1:a3:e5:2b:9e:
11:98:ba:2f:03:7c:f2:90:9d:f3:8e:5a:86:0b:d3:
6d:f8:01:3f:0a:09:db:a1:cc:24:a6:65:09:ea:94:
3b:af:d4:46:e1:43:5c:66:50:63:f3:55:c9:63:2e:
32:af:10:48:81:2c:73:f1:f8:ea:1f:9b:d5:3a:30:
8d:c5:39:75:1a:94:d2:12:70:20:4a:78:50:e2:7d:
93:12:78:d4:d2:2c:fc:cf:02:dc:52:ee:e2:56:13:
40:1a:ed:d5:d4:cb:1e:11:a3:b3:31:c9:95:6a:9b:
38:98:f7:32:18:8d:83:5f:61:d4:11:c5:7e:8e:fe:
51:5e:f5:6e:5d:40:70:2a:72:4f:ca:51:db:c4:91:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:B8:66:96:B6:9F:F1:2B:32:35:7D:23:9F:7D:AF:B1:AE:10:2E
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:73:45:27:71:af:a7:cc:aa:d2:9a:f9:39:bd:ce:10:59:
8a:df:45:e0:b2:57:16:40:6c:e3:c2:c8:22:62:0a:79:a9:b9:
dd:bb:1d:b5:c1:63:d1:53:2c:56:7b:a8:66:e4:19:d5:48:ed:
9c:5c:86:64:dd:90:da:cb:f7:f9:20:33:6a:12:74:23:93:fb:
d1:60:97:e8:8c:7c:22:a9:e1:c0:41:79:a7:40:42:cb:b8:02:
7b:88:c6:17:0d:0e:48:82:2c:18:3a:ea:88:26:d0:58:f1:68:
1c:df:51:f8:ee:71:1d:25:c1:80:3d:e6:4a:a8:68:44:b2:7f:
a1:e5:a9:54:b1:a0:b5:7a:5f:88:02:53:ad:31:e6:b0:7c:bd:
5d:b8:a1:28:10:4d:42:e6:70:0c:9c:44:69:dc:6b:6f:f9:4a:
27:4c:0d:0f:f9:2e:43:20:31:27:bc:25:75:95:f9:67:ab:c0:
51:f9:24:79:18:11:3e:88:d5:54:aa:ec:47:04:4d:0e:a8:79:
b1:5f:18:94:cf:e8:d8:25:a3:c6:df:b6:40:b0:f2:9c:fe:88:
97:70:12:57:2a:c5:2f:23:fb:08:89:54:17:c0:9f:c5:12:99:
5a:62:89:76:4c:32:43:c9:65:0c:ce:f6:15:a8:6c:e1:0b:c4:
4a:37:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:45 2026 by rpki-client