Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: jGATnjBpHjSY4dloXLieaC5LiMjqsDs9JXVaj2AqilM=
Subject key identifier: 2E:E6:F9:A7:97:D8:67:3C:0D:4D:C2:2F:2C:C4:5F:05:75:0D:D7:2A
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019D26CCA4C96A2FF440731C09834AF12788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 1136
Signing time: Wed 25 Mar 2026 21:00:38 +0000
Manifest this update: Wed 25 Mar 2026 21:00:38 +0000
Manifest next update: Thu 26 Mar 2026 21:00:38 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: Zc+f+QbOadyLRd2THLJb2DYqvlhVv1aA0xxfYK6QwJc=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a4:c9:6a:2f:f4:40:73:1c:09:83:4a:f1:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Mar 25 21:00:38 2026 GMT
Not After : Mar 26 21:00:38 2026 GMT
Subject: CN=2ee6f9a797d8673c0d4dc22f2cc45f05750dd72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:61:bf:ca:e3:d8:c7:77:d4:59:99:63:5d:
52:39:74:38:72:eb:87:30:b4:39:cb:b6:d0:18:3e:
8d:f3:87:64:cd:64:2e:83:1d:78:5f:ad:cf:4c:7e:
f1:ea:6a:61:50:82:77:ad:d5:c0:55:f1:95:b7:5d:
e1:f5:79:d0:7d:6b:2d:37:31:f6:43:8c:6e:65:c4:
84:2d:bf:ff:34:5d:ba:2c:33:fc:22:3a:94:8c:af:
a7:f3:ad:10:2d:a5:f9:fd:53:5a:db:87:b0:2c:30:
a4:5e:08:4f:e3:3c:63:bc:a8:fd:86:f0:0b:a1:61:
80:fe:10:f5:1b:f4:cc:55:74:31:f2:26:ab:aa:f3:
1a:0d:90:72:a5:cf:a4:17:4a:8d:b1:22:f3:c4:c9:
e0:41:a9:ae:0a:81:f6:a4:36:00:67:f0:c4:69:27:
5f:26:fd:c2:8d:13:b8:c8:60:98:89:49:51:7d:b7:
6e:3a:9d:dd:f6:71:a8:a3:08:e4:31:54:ef:37:03:
cc:1c:28:64:56:ac:04:df:fe:39:4e:39:88:eb:c5:
48:96:32:61:62:52:49:4f:b2:db:68:bd:f2:f8:b7:
6b:6c:e4:06:2d:97:ba:da:89:26:05:68:ca:11:1d:
54:bf:22:0e:65:5a:2a:03:36:7a:72:ec:47:af:97:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E6:F9:A7:97:D8:67:3C:0D:4D:C2:2F:2C:C4:5F:05:75:0D:D7:2A
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:28:04:d7:40:76:da:49:48:9a:17:03:c1:27:9b:af:86:
b4:8c:09:ab:cf:18:b6:19:ee:ef:4e:d2:c3:5d:5a:b5:93:1c:
03:5f:dd:b0:7c:55:1e:a1:51:54:3e:54:a0:86:48:85:07:4f:
d9:c9:4a:43:1e:0a:22:f4:70:fe:68:fd:43:31:42:2a:a4:7e:
b2:b1:f5:1c:bf:36:7e:30:f2:9b:f6:cb:31:77:cf:6e:fc:8a:
60:e2:ae:da:c2:2f:1b:fa:72:a0:37:1e:34:ca:b4:8d:16:e4:
99:56:ff:06:c9:99:fa:03:a7:64:6d:64:40:7e:c6:05:0b:bd:
d2:41:e0:25:d0:cd:6b:46:1e:72:d3:75:90:82:2b:f7:fd:0a:
55:e3:65:70:ed:a5:48:ab:0e:5c:38:35:8c:42:93:3d:66:ce:
67:78:6a:22:a3:1f:c7:3c:33:af:91:d3:5b:eb:eb:b7:10:42:
15:76:9c:71:c7:ac:28:02:ac:64:6e:63:5c:0c:b4:8d:e8:8d:
be:bf:4e:b7:20:c8:5e:09:cc:d9:23:b1:2d:24:ad:69:bb:37:
7c:90:d0:87:47:b7:8d:36:f7:19:01:27:83:f6:0f:70:d5:d5:
84:e3:63:28:fc:90:0e:ba:5c:68:fb:3b:e0:e6:84:41:2a:ab:
44:fe:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:31 2026 by rpki-client