Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: 8PpMyhBEYq1E1BOrppolmPBjTQTNIkJAbEzYQFbA9+Q=
Subject key identifier: 24:94:4C:7C:A8:C1:DE:CF:95:53:80:ED:10:CB:85:57:88:CE:FB:B7
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019D9A74C96290C44D35D5705E33886E03B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: 014B
Signing time: Fri 17 Apr 2026 08:00:38 +0000
Manifest this update: Fri 17 Apr 2026 08:00:38 +0000
Manifest next update: Sat 18 Apr 2026 08:00:38 +0000
Files and hashes: 1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: CEK7XXBzesLa2X1te8E8r7c38LvHoX7VX3zZ3Tabqfo=)
2: awyvWAqkdKKe1MSCW67ZrBnto1c.asa (hash: MhEQCgR2RzYNC5LUogd8NLM9UfmL+SUF0AkiuDL0GhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c9:62:90:c4:4d:35:d5:70:5e:33:88:6e:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Apr 17 08:00:38 2026 GMT
Not After : Apr 18 08:00:38 2026 GMT
Subject: CN=24944c7ca8c1decf955380ed10cb855788cefbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:61:43:90:29:c4:51:1e:34:fd:99:40:f4:
22:bc:8d:74:5e:54:41:74:40:94:0a:46:56:15:60:
0e:60:b1:de:2f:bd:5d:16:44:d6:b9:d4:36:00:e3:
1a:14:5d:6a:af:d8:26:9f:d6:26:04:57:d9:9c:60:
fe:e6:37:1e:ff:74:62:b2:a4:b7:f6:3a:b4:60:71:
93:41:f5:aa:2c:83:be:3a:0c:4f:c9:8b:f9:c9:7c:
ef:2a:93:b6:8c:7b:8a:7a:bc:79:e0:fc:49:3e:16:
8f:2f:91:75:df:83:4a:f4:6d:27:51:aa:51:3c:2e:
ef:00:72:3c:f4:d2:26:81:01:93:5f:ae:c6:1b:55:
66:ae:56:08:65:ba:c3:e8:c7:4d:ee:a1:9d:dc:20:
47:94:a1:0f:58:e6:46:7f:0f:e2:9d:b8:b2:94:b4:
45:58:57:1e:3b:79:52:ab:0c:95:8f:e7:fe:5b:a5:
42:e4:83:81:24:0e:c8:2b:dd:61:e4:0d:94:31:75:
39:49:f4:a8:55:e9:8a:ac:af:d6:81:08:47:e2:ed:
28:87:52:d5:a3:bc:35:d8:ff:86:45:fe:c9:bc:0e:
e9:3a:28:2b:a6:8d:8f:6c:bb:9c:fe:b7:6e:ad:43:
98:52:54:b1:7b:55:ff:d4:3d:bc:15:fe:56:cd:bc:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:4C:7C:A8:C1:DE:CF:95:53:80:ED:10:CB:85:57:88:CE:FB:B7
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:02:9c:d2:73:cb:2b:3d:d8:3a:90:de:d5:60:ce:bd:a3:
30:a1:1e:05:01:6c:d3:20:31:73:fc:cc:db:7a:c6:73:c9:61:
de:e0:89:85:15:a6:9c:c4:7b:1a:1b:a7:f0:c1:01:da:80:1a:
d7:b3:1c:7d:3e:70:32:8d:6e:be:83:5c:48:21:9a:7b:00:30:
fd:c1:e2:1e:e8:d2:82:1a:4e:5c:49:64:ba:7d:db:30:a6:53:
c3:07:af:79:30:91:16:41:d8:e1:29:71:55:83:23:b2:a1:27:
c0:36:86:ec:00:5f:b9:d4:63:48:af:54:20:27:a4:1c:0a:bb:
2c:a7:68:5d:1a:42:39:5b:c1:d0:68:12:a0:21:26:62:0c:5a:
c8:a6:8a:92:a7:ae:0d:3f:62:b9:7c:71:28:93:c2:f2:3b:6e:
78:05:21:0b:39:96:38:f0:af:72:0b:21:cb:e5:4c:04:0c:58:
e5:8a:b6:6c:33:7f:5b:4b:30:5e:db:12:d2:f4:68:16:fe:92:
12:9b:82:27:58:38:49:69:b4:5c:96:57:56:50:15:b9:11:0a:
cd:0a:94:71:c8:1c:54:fd:d5:d7:56:e5:60:9b:ef:b8:dc:e5:
48:f9:c2:a7:eb:0c:0e:70:e4:20:8e:a5:13:13:71:7c:22:8c:
1a:f6:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:31 2026 by rpki-client