Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: pZfb04fvVn2/p6F26ZjtDSftNtYSnLK3MvQqQfAEFb8=
Subject key identifier: 55:A6:BC:2C:E4:5F:C8:99:0D:1C:F9:D5:86:A4:79:70:C1:3E:F4:4F
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019CA8D7A3CE9492831F4F68E94717850278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: CD
Signing time: Sun 01 Mar 2026 10:00:30 +0000
Manifest this update: Sun 01 Mar 2026 10:00:30 +0000
Manifest next update: Mon 02 Mar 2026 10:00:30 +0000
Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=)
2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: j1K06gfuhh1aEnT7zUXEtlK2sitG7R67p2Ke0xaVyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:a3:ce:94:92:83:1f:4f:68:e9:47:17:85:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Mar 1 10:00:30 2026 GMT
Not After : Mar 2 10:00:30 2026 GMT
Subject: CN=55a6bc2ce45fc8990d1cf9d586a47970c13ef44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:d5:cf:78:dc:02:6d:97:1e:0f:52:8b:96:
40:18:a9:77:ea:b0:19:19:f7:8b:18:73:ed:4b:78:
a7:a5:ca:28:1e:e7:82:ea:3f:20:c1:f9:33:04:b8:
72:d5:4f:31:f5:14:92:69:a6:1f:e1:ce:b6:64:8e:
94:06:1f:ab:b1:16:e8:b4:bd:06:38:62:26:6f:0f:
27:53:91:c9:e3:22:13:cb:0b:06:cb:e8:4b:cb:f4:
fe:30:79:2d:c4:6f:ce:45:8f:82:e9:85:ad:9a:b4:
51:72:64:7f:ea:45:3b:f5:ed:e9:c9:84:38:12:87:
34:77:96:a4:42:06:59:08:b4:d9:db:0c:13:70:6c:
26:53:fe:53:ef:6d:53:f7:2b:10:6e:95:ea:b4:69:
a3:67:c7:2c:f3:12:cf:f4:29:68:c6:f5:50:d2:ef:
fa:61:16:48:82:69:02:90:33:54:af:d4:87:1c:72:
1b:08:9c:5b:09:75:8e:87:eb:32:aa:ac:93:a6:78:
e6:6c:02:12:fc:62:a8:bc:b7:ca:d9:a9:55:84:97:
a7:07:52:fa:f0:0b:39:d7:b6:e3:10:3b:3d:b2:27:
1c:b3:1b:7a:0b:cd:97:65:d1:a1:54:19:20:15:cd:
3a:a0:c1:e6:3b:0a:e5:6f:a8:a9:b2:97:11:64:cd:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:BC:2C:E4:5F:C8:99:0D:1C:F9:D5:86:A4:79:70:C1:3E:F4:4F
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:01:61:16:53:92:5d:ff:3f:d6:eb:20:52:e3:64:3c:df:
47:63:dc:2a:18:4c:eb:1a:70:c3:d6:a0:62:bd:99:33:a8:c5:
3c:3d:49:6e:e5:4a:74:91:5c:ec:96:6f:c7:1f:89:01:56:8a:
71:cd:db:c8:61:b5:85:28:a9:45:83:60:50:cb:33:4c:cf:bb:
8a:42:2b:5b:cc:15:91:6e:45:cf:c2:79:3d:ff:f0:05:41:03:
90:1c:8e:53:ab:9f:f6:54:67:91:df:94:86:6b:b8:08:95:85:
2b:7c:23:3d:fb:67:53:59:95:dc:2f:ea:a7:ac:ff:fd:31:20:
8e:76:e6:b1:7a:00:0b:01:a8:d9:46:63:d4:95:e6:21:68:09:
a6:31:03:1d:c7:71:08:c3:b5:50:6a:26:52:9f:57:5f:35:96:
fc:47:94:1a:b1:31:85:8a:cf:b2:e7:dc:76:63:a3:50:90:cd:
36:c8:43:b2:9d:66:c0:be:28:33:5d:f6:2d:27:72:d8:40:18:
ff:db:7f:80:9b:26:10:15:97:3a:24:cf:3b:87:1f:f5:d6:fe:
70:4b:97:98:9f:76:2d:f5:89:9b:e7:43:c2:a3:3a:00:52:bc:
53:d2:2d:b5:6a:b6:82:cb:87:8e:78:8e:a2:0a:8a:08:5f:75:
23:b7:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo16POlJKDH09o6UcXhQJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2VlMThkMDk3NDhmNDZkYzUzYWQ5NGI3MjlmMzExMTBh
Y2FjMzQwHhcNMjYwMzAxMTAwMDMwWhcNMjYwMzAyMTAwMDMwWjAzMTEwLwYDVQQD
Eyg1NWE2YmMyY2U0NWZjODk5MGQxY2Y5ZDU4NmE0Nzk3MGMxM2VmNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1DVz3jcAm2XHg9Si5ZAGKl36rAZ
GfeLGHPtS3inpcooHueC6j8gwfkzBLhy1U8x9RSSaaYf4c62ZI6UBh+rsRbotL0G
OGImbw8nU5HJ4yITywsGy+hLy/T+MHktxG/ORY+C6YWtmrRRcmR/6kU79e3pyYQ4
Eoc0d5akQgZZCLTZ2wwTcGwmU/5T721T9ysQbpXqtGmjZ8cs8xLP9CloxvVQ0u/6
YRZIgmkCkDNUr9SHHHIbCJxbCXWOh+syqqyTpnjmbAIS/GKovLfK2alVhJenB1L6
8As517bjEDs9siccsxt6C82XZdGhVBkgFc06oMHmOwrlb6ipspcRZM3KxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWmvCzkX8iZDRz51YakeXDBPvRPMB8GA1UdIwQY
MBaAFC4+4Y0JdI9G3FOtlLcp8xEQrKw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTkt
ZDg0ODY5ZmY5NTYxLzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTktZDg0ODY5ZmY5NTYx
LzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPcBYRZT
kl3/P9brIFLjZDzfR2PcKhhM6xpww9agYr2ZM6jFPD1JbuVKdJFc7JZvxx+JAVaK
cc3byGG1hSipRYNgUMszTM+7ikIrW8wVkW5Fz8J5Pf/wBUEDkByOU6uf9lRnkd+U
hmu4CJWFK3wjPftnU1mV3C/qp6z//TEgjnbmsXoACwGo2UZj1JXmIWgJpjEDHcdx
CMO1UGomUp9XXzWW/EeUGrExhYrPsufcdmOjUJDNNshDsp1mwL4oM132LSdy2EAY
/9t/gJsmEBWXOiTPO4cf9db+cEuXmJ92LfWJm+dDwqM6AFK8U9IttWq2gsuHjniO
ogqKCF91I7fhWg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:04 2026 by rpki-client