Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: e9H3X2lNZUD0QziN2g9rPKnNkfyjUCRLcyFwLIIvE90=
Subject key identifier: 9D:D7:CE:FE:62:BD:90:A7:50:98:9B:B0:ED:3A:09:CD:07:74:AC:35
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 019CAE6C165237D1B6C2C069733EF8DBCA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 06C2
Signing time: Mon 02 Mar 2026 12:00:44 +0000
Manifest this update: Mon 02 Mar 2026 12:00:44 +0000
Manifest next update: Tue 03 Mar 2026 12:00:44 +0000
Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: 4Sg9X3j4fiVrCRzGuip9DsfGAN+4ljrrAaDWG0o6E9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:16:52:37:d1:b6:c2:c0:69:73:3e:f8:db:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Mar 2 12:00:44 2026 GMT
Not After : Mar 3 12:00:44 2026 GMT
Subject: CN=9dd7cefe62bd90a750989bb0ed3a09cd0774ac35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:5f:1f:44:ef:78:34:55:ca:a8:04:d1:cd:
51:98:03:1a:58:a4:cb:9e:7c:29:52:5d:18:d7:57:
02:97:34:c0:19:c9:9a:4b:8d:a8:67:49:17:82:da:
01:91:f3:40:6a:94:1f:b6:3e:c6:86:1d:ca:40:9f:
f2:68:39:42:92:1d:dc:25:d7:4b:4f:7b:7b:e2:a9:
ef:a1:00:ae:b0:2d:13:74:7e:94:2b:3d:07:89:3b:
f3:3b:d5:8a:1d:68:4e:e4:4b:86:3e:cb:a8:7f:10:
83:c9:d1:16:70:3b:9e:7c:94:fc:f9:58:02:10:e3:
d6:dd:27:d8:fa:05:dc:c9:e3:25:29:58:fe:89:29:
f1:8f:77:56:85:d4:2c:61:70:6e:22:3d:72:fa:e9:
7a:3a:14:e7:f5:73:45:4a:2d:fc:43:eb:f5:2b:c5:
7e:31:e5:74:65:79:1a:27:bc:18:e4:ef:b3:23:d0:
10:50:29:48:48:d7:80:95:69:01:ee:d3:f2:1a:84:
1d:fa:0a:17:f1:e1:86:9e:12:43:00:63:21:b6:23:
87:1d:5e:b1:f6:e9:26:e6:08:14:5f:72:44:41:77:
2a:b5:d8:ba:6c:d7:9c:4f:24:33:16:13:68:6d:be:
1e:a7:40:ea:1d:7a:ce:67:c8:6d:26:0b:bd:9e:a1:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:CE:FE:62:BD:90:A7:50:98:9B:B0:ED:3A:09:CD:07:74:AC:35
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:aa:0d:a6:a5:03:42:ae:05:ef:ca:64:45:4a:21:1d:0a:
20:87:54:a6:31:74:60:20:91:fc:9a:91:7b:f6:16:ae:47:73:
4b:20:ad:5d:d9:35:01:a0:9c:78:79:1b:06:76:a7:41:94:8a:
4c:66:bd:50:09:3b:a7:99:90:be:ca:bf:c0:14:79:14:c2:4a:
20:32:81:01:84:c7:c2:96:53:2d:db:7e:57:06:90:63:11:76:
d2:07:0a:0e:9b:93:8d:c4:49:8b:81:e8:36:a4:0c:44:43:d5:
7f:29:10:ef:e7:c7:89:4c:27:a7:d4:e7:f7:60:d9:d9:5d:ee:
80:2b:d9:1e:b2:80:4b:77:16:09:89:87:9e:04:eb:09:5c:97:
f9:2a:81:2b:c3:ea:ab:a5:50:6d:d1:05:8a:2b:67:e6:f9:89:
78:bd:ea:1c:71:4b:7e:98:28:d6:1c:b7:a8:90:7e:66:80:a4:
d5:c1:87:cf:45:5b:60:46:58:95:a2:37:c1:9b:0d:bc:f4:ce:
51:84:3d:50:04:5f:50:bc:e5:0f:98:c5:c0:cc:e5:22:3d:53:
bf:f4:f3:6b:93:c3:31:ee:14:ab:4e:73:b8:b7:0c:e4:d6:3a:
69:4d:c4:e7:06:79:91:41:e3:06:1c:22:2c:6a:c8:b1:87:17:
29:8a:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:04 2026 by rpki-client