Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: JjcnWgt4SQ0BPzcYPbEdAKSc0qnbVIp4+bADoxf6PwE=
Subject key identifier: 08:96:0A:D0:46:77:41:AB:1C:CF:6D:70:7A:13:B9:01:2B:6E:E0:E1
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019CAD2250CAFFA7F3190E7D0874344E8771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 06D3
Signing time: Mon 02 Mar 2026 06:00:33 +0000
Manifest this update: Mon 02 Mar 2026 06:00:33 +0000
Manifest next update: Tue 03 Mar 2026 06:00:33 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: IZ+qgq82k4Yl77dGWq4zQT9pyLZ/48yURSkhigTz1g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:50:ca:ff:a7:f3:19:0e:7d:08:74:34:4e:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Mar 2 06:00:33 2026 GMT
Not After : Mar 3 06:00:33 2026 GMT
Subject: CN=08960ad0467741ab1ccf6d707a13b9012b6ee0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:c8:b3:69:fa:8b:08:ac:27:e1:d3:a9:23:
8c:f8:d2:50:48:a5:dd:44:c6:36:12:28:3a:ff:a9:
4a:4d:dd:48:84:74:14:7b:32:80:8d:7d:c1:2f:9a:
0b:3f:60:38:63:75:b3:89:85:af:96:9b:d3:1f:b7:
84:e2:99:52:c6:cf:91:1b:ba:73:bd:7b:f0:61:8e:
72:8b:54:e4:ee:d8:03:61:4e:1a:e4:b6:0f:f1:00:
b8:83:e4:67:17:68:f5:8c:a9:0e:8c:ee:c2:93:99:
0a:1c:fe:a6:80:b0:33:36:1e:78:66:96:aa:8b:9a:
dc:e6:6d:6d:2a:a9:9b:22:40:07:a8:c8:b7:21:a4:
a8:dc:5d:8c:c1:75:50:ae:3f:7a:ee:c0:12:cc:76:
51:35:30:0c:9c:5d:db:2f:5d:23:84:2c:62:37:2b:
7d:31:aa:ca:78:62:8f:39:c1:fc:8d:ce:08:b3:9d:
cb:65:5d:d8:d3:7d:9e:9d:b5:1c:c1:fe:65:7d:9f:
52:79:16:64:38:db:2b:d9:c8:77:f6:5f:47:f1:1f:
ee:e0:98:4a:8a:e9:99:39:69:ed:f2:cb:78:82:33:
62:77:5d:6a:ae:14:4e:31:d7:41:b1:b7:38:af:31:
f4:0e:2b:5b:28:0d:70:cd:1f:61:6e:e1:a9:01:44:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:0A:D0:46:77:41:AB:1C:CF:6D:70:7A:13:B9:01:2B:6E:E0:E1
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f0:e9:5b:43:e7:26:19:cb:0d:fe:6a:6e:ee:9b:d2:8c:64:
87:00:b1:30:80:07:4d:0f:c5:03:59:8c:9f:64:bb:7f:61:be:
b4:3b:06:01:a1:ef:5e:c5:73:46:fa:e4:f3:6a:be:9e:9f:3d:
da:03:58:a4:3c:8f:3c:35:8c:4e:a8:bd:a6:6e:7e:d8:23:0e:
94:b4:b9:b3:11:d8:c4:19:af:82:8d:81:fb:de:4d:64:ae:0d:
4c:bb:7e:2b:36:32:00:3c:7d:dc:7e:d4:b6:62:f4:db:2e:67:
a1:43:91:eb:40:d9:8f:80:f0:78:6d:05:78:16:2d:f9:cb:92:
ed:e5:3f:1e:7c:31:80:a7:74:93:bc:91:5b:18:d9:6b:a5:1d:
fd:91:66:4a:a7:72:47:94:ad:84:ac:8f:70:4b:41:4f:1b:b8:
1e:de:21:30:3b:82:e1:41:24:3f:9e:ae:6e:75:b1:55:bf:b5:
f5:ff:e5:8f:1f:dd:d0:28:df:dd:76:59:42:9b:44:2b:c2:3a:
27:a3:54:62:25:68:50:aa:65:cc:ab:d3:53:72:cf:dd:57:73:
ce:fe:f2:6e:e6:50:82:ca:e8:78:60:ec:4f:a3:e4:06:7d:f6:
5d:f4:e7:eb:bf:4e:5f:4a:7b:79:11:92:a7:00:5e:d6:d4:8a:
5a:b4:e0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlDK/6fzGQ59CHQ0TodxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjYwMzAyMDYwMDMzWhcNMjYwMzAzMDYwMDMzWjAzMTEwLwYDVQQD
EygwODk2MGFkMDQ2Nzc0MWFiMWNjZjZkNzA3YTEzYjkwMTJiNmVlMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z/Is2n6iwisJ+HTqSOM+NJQSKXd
RMY2Eig6/6lKTd1IhHQUezKAjX3BL5oLP2A4Y3WziYWvlpvTH7eE4plSxs+RG7pz
vXvwYY5yi1Tk7tgDYU4a5LYP8QC4g+RnF2j1jKkOjO7Ck5kKHP6mgLAzNh54Zpaq
i5rc5m1tKqmbIkAHqMi3IaSo3F2MwXVQrj967sASzHZRNTAMnF3bL10jhCxiNyt9
MarKeGKPOcH8jc4Is53LZV3Y032enbUcwf5lfZ9SeRZkONsr2ch39l9H8R/u4JhK
iumZOWnt8st4gjNid11qrhROMddBsbc4rzH0DitbKA1wzR9hbuGpAURmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiWCtBGd0GrHM9tcHoTuQErbuDhMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvDpW0Pn
JhnLDf5qbu6b0oxkhwCxMIAHTQ/FA1mMn2S7f2G+tDsGAaHvXsVzRvrk82q+np89
2gNYpDyPPDWMTqi9pm5+2CMOlLS5sxHYxBmvgo2B+95NZK4NTLt+KzYyADx93H7U
tmL02y5noUOR60DZj4DweG0FeBYt+cuS7eU/HnwxgKd0k7yRWxjZa6Ud/ZFmSqdy
R5SthKyPcEtBTxu4Ht4hMDuC4UEkP56ubnWxVb+19f/ljx/d0Cjf3XZZQptEK8I6
J6NUYiVoUKplzKvTU3LP3Vdzzv7ybuZQgsroeGDsT6PkBn32XfTn679OX0p7eRGS
pwBe1tSKWrTguw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:24 2026 by rpki-client