Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: PkiVFp2T4CdX4ziKuuWwVaz79CJ5DlS0YVhAcC/mw3o=
Subject key identifier: 9F:FA:99:42:1B:91:F3:DB:7C:5F:67:01:72:5E:E3:39:56:B6:DD:CD
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019D28BBB6191D13EE32DB7DF6C4A0540AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 025A
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: 3NFCqs1+iweW7ckDxAY2FNll8sNmWdUICg/hsr/mz+Y=)
4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b6:19:1d:13:ee:32:db:7d:f6:c4:a0:54:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=9ffa99421b91f3db7c5f6701725ee33956b6ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:6d:61:3b:35:cd:2e:df:93:5a:e3:7b:2e:
a9:3f:61:cc:b2:bb:b0:4f:88:b0:dc:f1:62:18:52:
cf:a0:c2:99:e1:d2:08:e8:e0:14:9d:03:08:67:7a:
7b:4e:79:a0:ba:28:c5:5e:a1:1a:c7:57:88:21:96:
00:0a:5f:d0:a8:d1:2c:f2:9e:45:64:46:2a:11:d6:
d5:4c:f6:a4:b3:e1:c5:5e:79:47:3c:bc:af:58:86:
50:59:f7:ff:5e:eb:28:52:d3:19:eb:a4:f4:f9:b4:
5f:48:79:fb:4e:15:29:c0:0c:78:52:6a:48:7d:53:
0d:0e:4d:71:96:7a:7e:20:7e:b8:65:fa:ab:64:e7:
23:6f:1d:1e:e1:87:2d:2b:e3:bf:3c:eb:2b:dc:73:
e3:35:8d:0a:2c:ea:99:2d:b8:2e:dc:8b:08:cf:6c:
3b:dd:93:e4:09:c9:f8:9d:bb:ea:36:5e:c3:e7:22:
a7:7e:6c:ca:23:3d:2b:bc:26:11:90:1f:7d:01:ce:
2f:04:0f:c4:3a:6c:4b:90:7d:bc:61:eb:ca:bb:26:
f1:d1:eb:f2:39:a7:1c:b9:b8:26:44:43:90:db:7d:
7d:93:91:01:cc:fd:e2:55:a5:91:96:2b:e1:f6:75:
d4:c5:9c:72:de:2f:56:34:a2:36:9f:1b:44:dd:e3:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:99:42:1B:91:F3:DB:7C:5F:67:01:72:5E:E3:39:56:B6:DD:CD
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:0a:ed:b3:48:50:ea:04:79:f0:4a:3e:3f:a6:5f:89:de:
2f:c7:85:64:d7:3d:64:d8:99:7e:7a:bf:a6:20:cb:65:3a:da:
37:a6:ea:b6:5f:61:e2:17:75:70:bb:e7:15:8b:3a:2a:af:f5:
f5:fa:63:d7:25:19:b6:80:18:2f:53:cd:0b:5a:0d:23:d1:dc:
27:2d:07:ff:4c:9c:cc:1f:cc:b3:b9:9e:00:c7:09:5c:c9:7b:
57:37:62:8b:84:8e:a2:7f:c1:cb:87:a8:6f:aa:f7:e2:da:54:
57:32:08:ed:7b:18:78:09:63:3b:b8:48:97:a7:7c:34:0f:d0:
4a:61:ba:c5:e4:a8:20:7b:1c:16:b5:66:4b:2a:ad:1c:8b:67:
b5:1c:26:8b:9a:6c:93:27:ce:58:78:7d:1e:0a:68:5a:b4:be:
c2:6f:f8:75:1b:70:97:79:e5:12:d3:e2:24:35:ae:c8:58:59:
75:04:0b:83:0b:d4:a0:f5:86:96:c8:a7:00:7f:cc:3f:da:72:
59:79:58:6a:e4:4e:d5:aa:b4:93:04:7c:94:36:58:e6:22:a7:
d4:0b:ce:52:07:8a:d8:ae:bb:6c:44:40:47:32:da:0a:42:ad:
43:a7:07:f8:98:3b:54:4d:57:f2:c3:8d:dd:19:1b:a9:b8:f7:
6f:36:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:32 2026 by rpki-client