Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: wB/tXLQ06DXZ+V+1CPUYzeH+Q1n7VluuWOh4RF6tgIk=
Subject key identifier: 8F:F2:4D:8F:80:02:8D:13:C9:0F:FF:3A:8A:14:BA:15:E8:E4:9B:D7
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 019CAA58CBF16FACBE4519278A411EED15E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 0724
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: QBJzdfr3P0G9USmn28I5bX0ZmVYtULPAhdzGKkM9xu0=)
2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cb:f1:6f:ac:be:45:19:27:8a:41:1e:ed:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=8ff24d8f80028d13c90fff3a8a14ba15e8e49bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:1f:ce:ee:e3:30:43:55:6a:5a:03:08:6b:
4b:bb:7f:43:c8:82:f1:af:83:da:b8:25:80:85:af:
5b:18:68:8a:1a:b9:8d:d1:99:9d:11:d1:a5:a1:0b:
72:40:67:4c:5c:42:45:a8:08:c2:bb:cc:ca:f5:64:
f5:08:9b:c2:fe:23:ad:fc:e9:79:5e:69:07:a6:f3:
d4:30:91:22:54:50:e9:d7:67:76:84:a4:c4:b9:04:
0c:16:d5:f9:20:c6:a3:04:ac:29:92:e0:62:0b:a5:
52:5c:e7:a2:79:ce:0d:94:5b:da:4c:dd:ea:26:d6:
34:79:90:f0:1c:3b:39:09:93:a3:80:05:ca:76:97:
cd:16:0b:80:4b:0c:d0:99:cb:10:de:17:cc:0d:48:
48:05:6d:d5:e4:57:e6:2f:4d:12:0f:d6:58:c5:9d:
d0:05:d9:74:db:96:43:20:f0:f4:c6:1a:56:40:92:
53:11:d1:46:86:b7:4e:03:4a:c6:49:00:e4:2a:91:
60:d0:49:19:e3:97:00:c4:b9:c0:8e:12:cc:c5:71:
af:a0:b1:58:35:17:89:bf:ff:72:fd:07:a8:c1:a5:
d4:e1:74:46:01:f7:aa:5b:c0:e7:20:e8:5c:f4:e6:
1e:27:c0:72:fc:e4:0c:02:af:00:1b:01:6f:45:61:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:4D:8F:80:02:8D:13:C9:0F:FF:3A:8A:14:BA:15:E8:E4:9B:D7
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:47:06:e1:16:23:4b:b8:7a:24:19:91:5a:c9:b4:e9:b3:
de:ca:57:4f:a5:2d:b8:03:0e:9d:ce:67:3f:f2:f7:0c:38:1e:
27:db:06:b7:62:68:66:cc:9c:22:a4:16:16:e5:ac:ac:5a:5f:
7a:09:ca:74:47:4f:88:32:34:9f:a6:cf:63:d3:43:cf:f5:d5:
40:15:80:87:6c:82:81:e9:25:af:dd:86:c5:3e:73:f4:a2:c5:
7b:32:cc:69:85:ed:21:4f:ca:11:c9:9b:1e:64:bc:33:75:bb:
2c:a9:8d:f6:3f:07:67:af:69:ed:be:68:a9:0c:be:f1:46:92:
d1:a4:7b:78:1b:d4:68:97:3c:8e:fd:fe:b1:09:f4:a5:b7:0a:
87:29:57:d0:1c:3d:e5:25:04:84:b8:fc:24:c1:94:7c:89:2e:
ba:97:1f:55:fe:10:68:62:25:69:f4:43:c7:ce:38:cf:61:90:
69:c0:34:34:e4:03:30:b1:b3:d9:65:ed:03:9d:27:53:75:e4:
54:42:10:0d:0a:4b:a1:b1:21:c5:dd:63:fd:4f:21:63:34:bc:
9c:7e:d1:a1:6e:a1:51:e5:f5:6e:0e:7f:ef:ae:13:9f:0a:2b:
1a:65:65:7e:6b:d8:c9:f8:bf:46:33:0d:22:d2:b1:c3:3e:e8:
5b:39:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:26 2026 by rpki-client