Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: tXxfOGpU6cTf0Qm70cFUbO3i/3ZUquxiZKCQukJlLq8=
Subject key identifier: 65:C9:26:4E:1C:0A:6A:FA:21:CB:25:5A:BA:C3:E5:28:6F:96:8A:59
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019D9AAC34AB66673244498D74CD4C33567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 074E
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: O2p4VE7RgtUoEV5AYmBcmN3DjtgmGqeUqJENYSaQkFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:34:ab:66:67:32:44:49:8d:74:cd:4c:33:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=65c9264e1c0a6afa21cb255abac3e5286f968a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:2f:3f:b4:d3:82:8f:83:a6:0b:3d:dc:82:
4c:50:5f:8c:6d:cf:f4:fb:66:5c:28:88:80:e7:cd:
2b:93:21:8e:bc:5b:0c:6f:a9:eb:24:1b:fa:e4:de:
4d:5d:b2:51:06:cd:e0:a6:a1:cf:df:b9:bf:4e:f6:
d5:43:80:72:2d:ed:6a:1f:8f:57:82:e4:42:bf:ab:
f9:1c:e8:f0:8d:1a:8f:3f:9d:96:db:b7:d9:9d:95:
4e:37:5d:58:0f:b3:9c:02:90:80:92:96:a5:5e:45:
17:1f:89:9e:71:d5:29:03:58:29:44:25:11:3c:ab:
91:70:96:4f:2f:df:9f:ba:17:45:2f:26:90:67:1d:
6d:bf:8d:b1:b1:81:46:00:f5:d5:12:a0:20:71:90:
61:af:e2:1c:7f:e1:18:54:bc:6d:fa:32:29:85:32:
22:78:7c:0d:ac:4b:de:52:a1:f0:7f:40:c1:9a:19:
b6:ac:8c:24:8a:c5:a2:03:5e:55:ab:92:33:c6:4b:
f0:ea:c9:01:a6:16:c4:7f:b4:08:77:48:b8:47:05:
87:6b:a0:08:d5:1f:76:9f:4c:e1:ca:ff:01:6f:8e:
4b:61:9e:bd:47:e4:86:8e:ae:a4:99:62:e8:56:ad:
fe:e1:75:c9:0e:d1:ce:90:82:d0:45:84:12:9f:4f:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:26:4E:1C:0A:6A:FA:21:CB:25:5A:BA:C3:E5:28:6F:96:8A:59
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:ad:c8:76:27:62:88:24:74:a2:60:2b:f2:35:55:2a:66:
ef:d5:be:ec:cc:b1:b9:02:5f:39:db:d3:be:53:58:58:2b:c1:
fd:3d:41:3b:ad:8d:dc:ee:c1:c8:13:92:58:d9:a0:db:b5:4b:
6f:6c:d0:08:c2:91:3e:43:da:0e:3c:9b:d9:ee:88:99:23:e1:
06:0e:9c:c1:b6:f4:23:60:2e:46:cb:88:61:3b:da:77:db:15:
ee:64:ed:12:d7:8a:ba:80:c5:00:73:19:14:d7:62:7a:d1:9b:
15:9f:66:af:ff:8e:53:97:20:cd:6c:aa:1b:18:18:b9:30:b4:
af:35:2d:b0:ff:57:15:9f:10:29:93:77:81:3b:a0:3d:35:0b:
4e:f3:44:8c:dc:70:b6:70:4f:92:c5:1d:d6:ec:76:49:22:2a:
36:4a:d5:4d:3d:5e:62:e8:73:e2:ca:69:29:ad:bc:9f:32:ec:
6f:d3:6f:32:0c:9f:10:32:ba:6b:58:2d:69:21:45:98:4d:0d:
6f:c3:75:88:50:84:7a:8d:c6:a0:12:c8:e5:98:29:ed:4d:9d:
7d:97:1b:29:68:60:9a:67:15:c4:dd:8e:d9:ac:b2:96:51:66:
a9:ba:1f:c0:12:1d:d3:71:2d:76:d1:e2:2c:0d:b5:47:83:e4:
b7:43:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:01 2026 by rpki-client