Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: iIt8Zlw79Xn8kpMWw96WnEWWHV9QyJaw7HbyExEQZWk=
Subject key identifier: 01:31:F2:EC:5C:CC:74:9B:19:1E:25:90:00:60:A8:26:67:48:82:8A
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 01A0C4E9D340B7175617A656E17A5DEF6F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 0944
Signing time: Mon 21 Sep 2026 17:00:53 +0000
Manifest this update: Mon 21 Sep 2026 17:00:53 +0000
Manifest next update: Tue 22 Sep 2026 17:00:53 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: UYDkSQmaNBoRWwbBPEXJpPAHWSIp1yagOZfJyZHKiGI=)
2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:d3:40:b7:17:56:17:a6:56:e1:7a:5d:ef:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Sep 21 17:00:53 2026 GMT
Not After : Sep 22 17:00:53 2026 GMT
Subject: CN=0131f2ec5ccc749b191e25900060a8266748828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:82:58:7b:51:4f:9e:3f:f2:ef:19:c1:c7:
e6:31:c3:3a:aa:3c:e5:85:3a:a6:37:8f:c6:ea:a5:
4d:c5:80:83:78:3c:ce:e2:cd:df:7a:8a:0e:9f:ba:
d2:b0:82:b5:01:03:24:c5:e2:f7:09:bd:69:cd:69:
ce:80:de:57:97:3e:16:52:d1:46:26:66:e4:0f:e0:
c1:e6:d1:8f:c8:ba:81:87:8f:11:8c:20:5a:2c:ab:
56:8f:02:e7:ca:fc:8e:a0:f7:63:5c:39:49:ff:43:
f9:97:ad:79:54:2a:83:43:b1:45:16:96:58:41:62:
93:e5:ee:be:eb:43:04:9f:b0:e8:cf:e1:ad:28:1f:
e3:07:af:62:36:8d:7a:cd:bb:75:d2:1c:29:61:05:
d0:ab:e2:bb:a3:11:43:ee:ad:8a:07:c1:f2:2a:a3:
22:c8:80:94:33:d0:5b:37:1b:ac:d0:06:4c:ee:95:
8e:3d:f1:3f:16:a1:7f:30:1c:63:aa:d6:32:7a:7c:
65:6b:86:dc:01:56:09:f1:38:24:b5:49:f8:c3:67:
f8:b4:2e:74:c1:c1:bf:fb:74:4c:d0:6f:0f:d6:f7:
68:80:36:1c:c8:2b:d1:0f:1d:0c:5b:b5:43:9a:0d:
7d:3a:22:4d:b4:f6:d9:f3:65:00:39:fa:13:06:fd:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:F2:EC:5C:CC:74:9B:19:1E:25:90:00:60:A8:26:67:48:82:8A
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3a:5e:25:44:95:a0:2e:a8:1a:36:6f:ab:f7:bf:ee:58:b3:
01:4f:c6:20:7b:3a:60:ac:ae:54:c0:ed:1e:c7:86:1b:70:6e:
7f:e3:4e:07:08:6c:4a:1e:ca:31:61:9c:43:98:0c:f6:3f:45:
f1:88:2e:d4:57:63:e6:b0:1f:7d:d1:55:75:6e:71:66:34:d8:
1f:44:f0:05:54:51:ca:01:09:b9:1d:38:49:3f:f7:be:19:07:
7e:cc:e6:ae:6f:61:c9:6c:7e:b8:d2:cf:0e:a5:0d:53:d7:07:
b3:79:5e:bc:0c:c0:3e:c1:f5:15:1a:c5:75:1a:de:80:9c:67:
a0:ec:f3:d0:55:df:83:07:75:ad:43:38:94:cb:75:0a:b6:f9:
fc:7e:ee:e2:7b:8c:15:f2:3d:25:81:22:16:46:05:05:aa:6d:
60:ea:f5:30:f7:3e:10:84:9c:cf:56:f3:a8:6d:89:c7:9b:db:
9b:3b:15:e9:d2:ac:8c:f8:9f:cc:a8:8d:ce:90:fa:02:68:e0:
16:be:d4:74:81:2c:c7:12:2b:60:63:f4:49:3f:56:bc:72:70:
e9:1b:db:7d:58:94:e3:f7:10:6f:46:65:53:04:cc:5e:72:b9:
e7:7d:1e:bb:40:88:a2:3e:94:d4:e7:16:a9:48:92:20:9e:22:
26:20:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:37:24 2026 by rpki-client