Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: 8eiS50ZzMdoqkA+QFbferBGG7McrYNTOeWcFVS9Efec=
Subject key identifier: 08:72:B7:B7:69:3B:86:17:24:A9:E2:3E:12:CE:72:67:E3:36:15:B6
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019CAC477D8865F4A898A54E6847B18E3CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 17D3
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: VTlRcNnwp5gbAntgQ6nLMgU1MSA.roa (hash: ngugrS9FOqnMnHH73cGn9uhwoCPbokxFByaxLpb4tLY=)
2: WMqtzsECKWwXCJIg2DonPUbpFnw.roa (hash: 5GfXNj8pVFfA55H0iZRmskGZ4d2ccQFECebszaJAMv4=)
3: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: OSv4zdZR/8lcdCHLgVT+qeVrZH0irpx1Cw+NRvaz5+o=)
4: moNBxLDkr7hyNWiWsQQXFSA8f68.roa (hash: Xbv2BjhxEJT++H7rJ3ZuNWYMKN46NfqnW7okEukq0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7d:88:65:f4:a8:98:a5:4e:68:47:b1:8e:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=0872b7b7693b861724a9e23e12ce7267e33615b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:3f:3d:a4:e8:81:6f:56:88:90:61:cb:97:
14:ce:40:65:84:5f:0a:81:19:aa:fd:98:d5:ed:26:
1b:59:b4:7a:93:4e:4d:46:4f:c0:f6:25:14:4c:bf:
75:a8:22:81:17:3d:0e:c0:9e:00:30:b5:7f:4d:d7:
ad:96:4f:32:7d:68:85:45:37:7b:10:ac:2a:59:02:
09:8f:e3:26:ab:67:62:2d:19:c5:f9:cd:99:73:d0:
54:a0:58:1a:6e:4a:fa:2e:ae:c8:18:a2:55:5d:a1:
22:81:c3:57:74:3b:ff:37:74:0a:b8:a3:75:0a:d8:
99:44:63:a0:f6:cb:ce:ee:9e:a9:3f:2c:59:be:63:
43:9e:4c:54:25:d7:74:bf:31:3e:16:13:71:a5:09:
1f:27:bf:91:64:b2:74:9d:db:1b:30:30:2f:85:34:
c7:04:eb:5e:3a:73:ef:c3:f0:01:f1:64:70:5c:25:
67:4f:d2:c8:ea:ca:e2:08:2a:b0:0d:57:3d:09:9b:
e1:dd:98:1c:d8:67:d2:23:d3:e6:bb:4c:33:d1:83:
59:28:49:2b:6a:61:5e:01:1f:34:97:55:b5:d7:c7:
02:b0:18:cb:81:05:eb:f0:61:7e:52:3c:09:fd:7b:
4e:35:e7:fa:e1:cc:75:f0:52:12:5f:c7:c1:38:4e:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:B7:B7:69:3B:86:17:24:A9:E2:3E:12:CE:72:67:E3:36:15:B6
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:e4:97:ec:83:0f:0d:8a:92:61:fe:fa:90:d3:ae:e5:e7:
70:16:bb:bc:d0:d1:66:93:f8:ac:7f:74:89:a0:28:3f:c8:be:
21:f4:7f:13:1a:9c:68:97:7b:f7:c5:eb:87:a9:8d:2f:12:84:
d7:1f:79:af:c5:42:9a:b0:dc:d9:3a:25:2f:9d:64:3d:25:32:
7e:6d:4b:da:8b:25:de:1e:4c:b4:83:87:c3:48:29:b5:ff:8b:
60:d2:e8:ea:44:07:3f:56:24:49:b4:c9:0e:4e:30:0f:3d:fe:
e6:0a:4d:a1:1a:81:c3:f8:31:49:a2:31:05:13:3c:56:26:94:
59:ec:ce:9d:c6:2f:4e:50:55:82:07:59:08:4e:fe:1c:58:d2:
24:f2:23:ea:a5:97:cc:35:5d:d2:d8:40:3c:5f:bf:57:45:8e:
7a:76:bb:4e:ee:fe:d0:7e:77:43:35:41:de:f7:26:42:95:36:
ad:61:2a:c9:41:76:ad:69:85:23:a5:1d:f1:af:4d:90:3d:a3:
53:3a:19:9e:a6:2d:2b:c8:a8:5b:68:fc:66:15:09:e3:91:68:
58:c0:6d:24:12:9c:dd:e3:66:02:df:f1:38:f3:b8:2a:87:9a:
cf:1d:26:e6:83:84:da:b2:18:78:3b:fc:73:d8:af:18:48:41:
59:0b:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:26 2026 by rpki-client