Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: AARWx1C18QfAd2ZkwetypZB83sI1ACpOwlYAPLArTQg=
Subject key identifier: 35:8E:41:9E:7F:FE:AB:89:24:31:E8:BD:5E:DE:6F:D7:9F:45:F4:CB
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019CAC0FAF9193DD1BBDAA789FB04458EB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1625
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
2: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: O3aH/HTU67NrKdgA/XGAIdhFERAEdcdAQ1gAhgBRyQA=)
3: r0DjM6D3Jrww-wRyKsk5TEQhi7U.roa (hash: Y5j/00qY/cneeICs86FfUfsywSMy7I5D1C1wtJI7Cuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:af:91:93:dd:1b:bd:aa:78:9f:b0:44:58:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=358e419e7ffeab892431e8bd5ede6fd79f45f4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:99:e3:9c:5b:1e:01:ad:13:1d:cf:dc:aa:
d0:66:8a:65:e8:cc:70:6f:73:82:f5:33:c7:5d:ae:
b6:ee:b9:9d:63:6c:a5:11:a2:23:f9:fc:52:3b:fd:
ef:6f:3c:69:7d:4e:2a:0a:41:e8:8e:7d:92:5a:a4:
c6:d7:3f:50:6a:c6:7e:1c:70:40:fb:7d:69:f9:d6:
ef:80:6d:85:bb:21:08:4b:6f:88:78:5a:23:f3:5f:
fb:df:17:d2:5e:45:d2:91:93:d3:63:2f:21:53:18:
ca:22:73:9f:f6:34:f1:c0:80:a7:b2:c5:37:38:92:
97:5d:23:d3:77:bb:05:75:74:d9:57:bc:08:9e:08:
46:71:e7:3b:8c:a2:62:a0:da:a8:fd:92:7d:5d:ec:
50:75:64:29:91:82:e8:30:26:f8:16:0f:81:a8:a0:
4a:ab:e4:de:cc:42:2e:d5:bb:a7:92:37:a8:a9:0f:
c3:8c:4e:c6:fa:4c:da:96:74:88:de:09:11:ff:d4:
9a:43:ed:a9:18:01:5f:0f:e9:d4:59:b7:31:1d:bd:
f7:bb:88:d7:4a:15:e7:a8:65:fe:dd:55:01:cb:a7:
cc:b0:cc:5e:cc:94:60:e1:32:e5:58:7d:20:1d:64:
bc:fa:9d:2d:a6:aa:7b:33:a5:fc:1c:1a:54:99:8f:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:41:9E:7F:FE:AB:89:24:31:E8:BD:5E:DE:6F:D7:9F:45:F4:CB
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:b4:a1:35:88:cc:e0:f4:d4:26:3d:cd:f0:86:00:49:b9:
24:00:f8:e7:60:30:31:84:c4:ee:3c:60:5a:25:35:b6:76:5d:
85:c6:83:51:5a:da:65:b0:41:0b:86:f9:02:4a:88:e4:98:f0:
04:59:b7:c6:06:5c:7c:79:8f:43:27:1b:0b:d7:9c:77:f9:aa:
6d:44:c1:89:9e:57:5f:ed:4c:d1:b0:09:17:15:0d:22:4b:8c:
55:34:c8:f9:c3:e3:6e:27:ab:b6:0b:2d:9d:73:d8:d2:61:f5:
8e:2e:44:ab:5f:a9:fa:c8:fa:ea:0c:e3:0f:31:eb:ec:48:60:
ff:10:b2:b4:6f:bc:16:55:4e:2a:5e:48:71:be:a8:3c:1c:6a:
81:eb:df:e9:db:d2:60:7d:c7:1b:df:c9:e1:c9:ec:de:d8:b6:
8c:60:25:9b:52:bf:c0:af:41:21:7a:3d:06:00:9c:4e:cb:69:
30:fa:9f:ed:f3:33:ea:13:f6:65:62:4d:ed:4e:7b:6b:b7:22:
17:46:c3:48:15:e5:98:d3:a9:9b:e8:36:ec:84:62:5e:11:f7:
33:03:3e:e1:a8:23:5b:13:86:b3:ac:cb:6e:18:20:d5:cf:1a:
fb:45:e5:63:59:4b:46:81:49:99:ca:00:f1:63:f9:03:65:cc:
84:de:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:31 2026 by rpki-client