Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: eHNKrnqn/Z5pHA49P3EMSOg4jzcLNEYhlUHoW8duIOI=
Subject key identifier: 40:D2:A3:8E:BC:16:1C:CA:8C:1E:87:78:00:55:60:D0:61:F6:AF:67
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019CAAC683C40BFBC782624617B20AD2D4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 0ACE
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: Hfv5q9LuB938GXMYsJxMtdWtNH8Yp1Rx7228IUY9tuk=)
2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:83:c4:0b:fb:c7:82:62:46:17:b2:0a:d2:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=40d2a38ebc161cca8c1e8778005560d061f6af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:2c:9e:f4:c1:ae:6a:7d:21:ce:7f:70:bf:
5d:67:69:9e:e4:73:ff:1d:c1:a2:b9:c8:27:34:f7:
f4:57:6e:55:0b:11:7a:1a:35:f0:e5:0d:51:03:20:
d5:14:d8:8c:cb:29:06:59:52:76:e2:e1:06:17:84:
85:6c:8d:6f:f5:dd:73:55:af:67:83:38:f4:de:f8:
10:b0:db:97:59:aa:7a:96:f6:1d:73:94:e4:93:ab:
e9:0d:4e:b9:9f:7d:9d:d7:40:ff:dc:96:8d:39:22:
91:e3:d4:45:75:71:7b:dc:fd:db:1e:e6:db:d2:fd:
1f:88:9f:95:31:08:14:e6:49:28:00:23:65:a5:9f:
4a:9f:3d:c0:d0:f4:53:43:95:79:76:1a:dd:0e:57:
f7:3a:54:ba:99:f6:f0:44:3f:12:1e:91:8f:83:81:
7e:60:c9:ac:75:f9:25:3f:e9:66:2a:d5:3c:9f:9c:
72:ca:18:e7:c0:fc:a5:03:7b:5a:7f:e8:29:78:de:
dd:fd:3c:aa:02:34:a4:8b:44:e3:f3:07:5a:e3:50:
9f:47:47:05:27:97:01:41:7b:4a:81:f2:82:7a:bb:
07:72:59:82:2d:c7:3d:60:69:4e:92:9d:39:ed:61:
9a:da:6f:95:37:da:95:18:16:66:5b:2f:83:45:d1:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:A3:8E:BC:16:1C:CA:8C:1E:87:78:00:55:60:D0:61:F6:AF:67
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:74:49:7b:f1:42:1b:36:f2:b8:3e:c1:ef:ad:74:af:b9:b8:
45:98:98:5d:84:9c:df:92:c2:f4:9a:be:8f:b9:e4:51:7d:08:
62:ba:3a:27:68:c7:5b:cd:35:07:d1:77:99:ac:6a:e5:f9:29:
d7:bc:e4:05:81:bf:bf:cd:a0:4f:f5:69:d5:b3:0c:2f:5e:36:
9f:db:2c:f0:e8:20:bc:fa:2b:19:9b:99:27:9e:dc:01:95:ce:
15:65:83:6c:2d:97:3b:31:8a:43:63:22:53:9a:48:76:06:c3:
01:b1:28:5b:9d:b2:42:1d:71:41:d0:9b:0d:8b:6f:14:0d:90:
9b:8b:24:84:48:c1:a7:be:70:71:69:0e:62:b0:90:bc:91:68:
43:b6:be:55:b2:71:9d:77:de:4a:47:9e:3c:97:93:b1:e2:fd:
a8:4d:d4:a6:42:c7:53:61:37:2e:af:2f:8f:87:e2:28:8b:2a:
69:ba:e2:3f:c9:bb:ad:7c:c1:7d:c2:55:8f:c0:68:37:f1:e8:
ad:57:87:65:5e:2c:6f:b0:78:08:b4:3c:b5:bf:ef:61:3b:69:
74:30:cf:d0:dd:5d:ed:a8:a9:a6:bd:48:d8:9e:31:de:b9:3a:
47:59:82:0e:99:7f:97:31:5d:c1:07:fd:ea:96:5e:d1:28:0a:
d2:ea:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:57 2026 by rpki-client