Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: B0x2l+5adt5bHLNksHvE5HmPKE+xt5cxcrR4D4nTRuA=
Subject key identifier: 63:CE:37:2F:F0:F1:4D:33:33:B1:49:BF:BC:EC:90:6C:7C:A4:ED:D5
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019D985017FEE7CF45881E18944216AB0FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 0B49
Signing time: Thu 16 Apr 2026 22:01:18 +0000
Manifest this update: Thu 16 Apr 2026 22:01:18 +0000
Manifest next update: Fri 17 Apr 2026 22:01:18 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: jsMB6mMbzFEoLYS46LJ13t3TuRUW4VwBLTQw6zSCU5s=)
2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:17:fe:e7:cf:45:88:1e:18:94:42:16:ab:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Apr 16 22:01:18 2026 GMT
Not After : Apr 17 22:01:18 2026 GMT
Subject: CN=63ce372ff0f14d3333b149bfbcec906c7ca4edd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:cc:d3:9a:45:ae:aa:1e:11:52:72:8c:36:
ba:f9:0d:02:a2:e2:2e:d0:e6:2a:1c:54:97:bc:f5:
b7:61:9c:6a:5a:3d:63:11:44:bb:c7:c8:d7:68:57:
71:53:91:29:f7:9a:79:3c:6c:3e:b9:9a:44:b0:f3:
21:ce:fa:70:c8:ee:ec:a4:d9:16:4a:2b:f5:27:3b:
0d:30:6c:f2:1d:52:db:7b:42:77:cf:12:0c:47:23:
9f:ca:12:d6:9b:48:3e:b5:02:2d:28:89:5d:aa:b0:
bc:af:7e:79:db:90:05:eb:e2:ef:8b:a6:df:b8:00:
6f:19:1b:59:d8:a0:a6:6f:80:e1:94:05:f3:98:b0:
a4:93:c0:85:81:eb:85:c5:36:54:bd:b0:41:e1:41:
00:b0:39:40:7c:79:77:8b:d7:c1:bb:0a:db:be:c1:
16:80:f6:0b:b1:f5:24:0c:1e:07:00:c0:45:b0:19:
26:8b:ba:de:a5:e6:cc:4c:f0:2c:81:e2:74:04:1a:
a8:72:29:aa:80:f7:ef:ff:56:9d:fb:48:dd:7f:23:
db:fb:95:3c:39:da:56:43:f3:df:6d:71:3d:d5:49:
4c:d6:b9:4b:c8:94:f4:4f:f9:89:7f:27:5d:85:47:
14:66:57:05:b7:6a:0d:27:e4:49:bb:a8:cb:d6:5e:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:37:2F:F0:F1:4D:33:33:B1:49:BF:BC:EC:90:6C:7C:A4:ED:D5
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3b:e8:3d:a8:3a:80:71:af:e7:76:95:35:ff:77:7a:89:97:
c2:28:70:9e:b4:7d:41:2f:e1:26:08:36:99:7e:45:5b:8f:58:
77:ff:23:9b:45:c2:37:cb:24:4f:8e:9b:10:c7:35:7c:86:c1:
91:c5:70:d8:50:55:33:bf:af:0e:32:f1:07:55:b6:b8:ff:be:
3c:4e:eb:e0:8e:a7:91:f5:83:c3:62:d2:5c:69:37:d7:a8:1b:
9b:49:c4:b4:39:fc:66:42:3c:9a:b2:98:f3:f0:42:db:07:34:
3c:cc:e6:7f:4f:55:de:44:5a:7e:70:c9:be:80:a6:2b:ce:91:
fb:c1:61:64:16:b8:76:b1:19:50:04:75:62:fa:66:cf:40:18:
d4:7a:d1:52:92:d4:59:c7:75:8c:b7:15:f9:a5:8d:1a:6e:99:
02:fd:6e:e7:56:bb:c6:0e:b7:4d:97:ec:b0:b3:e7:79:06:f9:
5e:b5:14:60:45:bd:ae:a4:0f:8d:ce:4a:a3:ac:82:a5:eb:50:
34:72:4a:26:c0:7c:17:46:96:73:a1:90:ca:e9:37:a3:6b:73:
f2:51:9e:76:60:bd:5d:1f:a0:c8:f9:05:f5:43:69:11:15:d3:
e2:e2:5e:6f:24:d2:76:0d:81:83:8b:ae:9c:a9:af:ab:b2:31:
aa:76:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:39 2026 by rpki-client