Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: GhfWjvdqOBRmmMaeBjCl3KR+CnoyEPlZ/KlxdxYsyIw=
Subject key identifier: 59:BE:92:A7:2B:F5:06:A8:8C:E4:03:FA:89:71:2F:26:03:51:DD:D1
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019CAAC687ED5E5376DECBCE09F7DE0D9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: /xzZcHeRPU1rwFjmpH2zFaU0JhKb/S1NDGokJ0+4+dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:87:ed:5e:53:76:de:cb:ce:09:f7:de:0d:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=59be92a72bf506a88ce403fa89712f260351ddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:ec:99:76:90:04:ef:b7:63:29:bd:67:d7:
3c:c5:5f:dd:5e:21:23:77:00:76:0e:86:cc:40:c5:
70:44:e6:62:8d:8c:30:8f:f8:c7:00:48:0b:69:98:
9f:ec:d5:4f:88:ca:02:4c:cf:31:aa:c5:eb:d6:50:
09:fd:a6:c2:9e:03:4b:cd:0a:d5:d8:d1:56:7c:34:
89:89:c6:45:76:f1:cd:fe:d9:da:9d:0a:42:f0:db:
f2:74:01:e4:c4:79:d8:94:2d:95:7c:99:54:12:99:
12:fc:42:57:66:57:3c:ad:ce:a9:ec:ad:c9:94:b2:
bc:17:de:63:e2:82:9f:c4:f0:11:ef:52:27:e1:14:
9d:50:21:b0:6b:97:2f:82:32:74:ad:f5:7b:be:56:
ae:2b:b0:98:a8:e4:be:f3:6b:3a:0a:2f:74:02:0c:
c8:5c:3e:b2:e2:96:0c:3b:de:17:d0:35:09:d4:7e:
b7:91:55:4b:30:69:51:f8:8d:55:b1:ae:14:dd:56:
53:0c:d9:c6:fd:b3:d6:d5:6b:2e:a6:2f:c6:61:06:
29:cd:6c:d9:d7:29:72:8c:88:bc:80:09:c6:7a:6a:
cf:bc:bc:8d:0c:72:21:6b:85:fc:3a:96:3b:04:6d:
c9:f0:eb:cb:7d:0d:b1:39:90:25:36:38:15:6c:2f:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:92:A7:2B:F5:06:A8:8C:E4:03:FA:89:71:2F:26:03:51:DD:D1
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:3f:26:b3:79:51:60:4f:bf:a0:a1:4e:77:7d:95:e9:f1:
06:d6:40:68:65:79:83:11:97:d1:4e:c7:57:84:ac:89:26:e7:
d1:f0:b5:98:41:ff:e0:10:fa:10:05:18:82:d2:fa:d5:0f:80:
d3:6c:93:f7:f1:eb:f4:ef:29:cd:3f:e2:37:91:8a:c0:50:49:
f1:b9:44:32:43:ab:e4:cf:50:33:3a:b6:38:26:d4:a4:7e:7f:
6d:6a:39:3c:3f:b1:93:98:de:f5:05:9e:31:9f:25:97:d1:ef:
c7:dd:8b:12:9a:13:24:18:b0:da:34:76:ae:3e:7b:ff:5f:7b:
cb:22:aa:44:bf:ca:1d:c1:ae:d4:ca:12:2c:f0:34:3d:47:59:
16:94:35:07:75:83:65:51:2f:93:6f:d6:ea:16:41:0d:4e:ae:
83:47:65:98:37:35:28:ee:f1:4d:22:38:c8:cb:c9:14:66:2e:
25:41:b3:54:21:d0:18:59:18:ca:a3:95:70:60:93:4e:2c:ee:
4a:07:74:42:ce:89:91:d5:38:34:cc:a5:10:58:62:6d:df:89:
56:f4:f3:bc:36:62:af:c7:38:f5:19:6e:1a:0d:cb:78:5c:99:
eb:b9:1a:93:3c:d4:79:95:e7:f1:33:bd:fb:d8:3e:be:3b:d4:
fd:74:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:44 2026 by rpki-client