
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: FScvBgwnx+MIuHW4Vq6Z2380XrCfx4dzxTjYfopUOKw=
Subject key identifier: 81:98:52:10:96:C6:AC:E3:0B:47:42:AB:FD:2C:BC:3B:12:8E:C9:AC
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 019CAB33E7BA51E4A1CC5103E5301D0E53DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0D82
Signing time: Sun 01 Mar 2026 21:00:31 +0000
Manifest this update: Sun 01 Mar 2026 21:00:31 +0000
Manifest next update: Mon 02 Mar 2026 21:00:31 +0000
Files and hashes: 1: efh4js39DAepdcGf-XgcFtA9I2A.roa (hash: Wr//dqxMLdlf0wzZxtHqzTDoNgxS29rM1ry+hkHHkYc=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: EkvsrGSQs+F/qg1wdbSD3TsgpL1KnopUjkvYAVxcZ0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e7:ba:51:e4:a1:cc:51:03:e5:30:1d:0e:53:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Mar 1 21:00:31 2026 GMT
Not After : Mar 2 21:00:31 2026 GMT
Subject: CN=8198521096c6ace30b4742abfd2cbc3b128ec9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:ab:24:f2:b6:31:81:7e:9e:53:1b:ec:18:
22:03:b8:81:f8:8c:6a:79:24:cc:f5:08:2b:f0:22:
2b:8b:fb:ce:05:d8:4c:bb:f4:f6:92:37:90:53:db:
2a:66:6f:86:4c:67:e2:8e:76:6a:26:98:c7:42:b1:
38:86:b2:1c:f0:b3:d2:a7:61:b8:1c:70:77:df:3e:
9f:40:e8:14:4d:27:dd:7b:23:46:75:ba:98:5c:97:
d8:79:8e:14:f1:cd:36:5c:b5:6c:c2:58:e2:6f:70:
a0:a5:22:3d:07:a0:38:d3:5d:0b:3f:d0:40:36:3e:
69:25:46:4d:83:56:11:fa:f4:51:c0:dd:97:38:07:
80:bc:92:d3:43:86:7c:4c:62:92:1f:a1:d6:31:3e:
30:25:0e:1a:41:e6:96:c2:a7:62:e5:4d:4a:68:3a:
f1:34:b7:b0:54:5e:2d:7c:d3:b0:fc:bb:dc:45:fc:
b5:c4:dc:0e:03:d2:49:77:ea:81:17:05:03:65:6d:
f7:24:8f:f8:09:57:12:28:60:31:9b:94:74:44:88:
33:a9:ef:9a:38:a3:01:e9:6d:88:42:e0:76:32:2d:
e4:46:78:d2:f3:6d:7b:3c:9a:cb:7f:4e:b0:6d:07:
a2:5c:9b:ec:9e:1f:a2:4f:3f:b5:60:a4:ff:c6:88:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:52:10:96:C6:AC:E3:0B:47:42:AB:FD:2C:BC:3B:12:8E:C9:AC
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:0b:cd:68:9e:b1:92:34:e2:ef:b1:8f:f5:b4:16:b2:79:
7d:19:bf:96:8f:43:e3:cc:a3:8d:ba:bd:fe:58:4a:cc:d4:ba:
47:98:70:ce:92:b9:9f:40:e9:d0:59:d8:7a:ff:e1:5b:35:e0:
a2:99:ee:23:71:57:bc:a0:da:a7:0d:fa:0e:92:a0:f3:a3:0d:
1c:d6:f4:ab:18:b9:ca:98:f0:12:9f:58:73:fb:35:16:10:8d:
09:ec:aa:c9:38:6f:89:a3:46:1a:2d:f1:e1:0d:e2:f0:71:52:
f6:e6:ca:ee:4c:68:e3:9b:c3:72:76:7e:29:8e:e3:16:3a:5f:
05:02:81:bd:31:db:b2:f2:33:21:b3:e7:c9:4c:75:ca:aa:8a:
de:f8:33:ae:b5:47:73:42:e0:29:5a:2b:87:42:42:e0:30:57:
0f:5e:7f:52:5f:33:30:13:1a:5c:f6:dc:54:a7:e6:62:38:3e:
07:e2:ee:c1:4e:10:35:dd:24:68:d8:bd:13:91:2f:b7:f0:31:
6b:28:d2:c6:fd:5c:60:8c:9e:e9:b2:d2:44:cc:e6:4f:1e:4c:
2a:f3:1a:1c:9f:e9:82:f0:39:30:8d:fc:29:2b:f7:33:b4:94:
d5:40:09:91:12:7d:69:ca:ad:71:0b:9d:55:23:61:2b:8c:38:
e3:87:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:39 2026 by rpki-client