Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: aYvUUyM5iH7Pr3nH8DkV9bmRX2qMr9Qxmsn66cF61Y0=
Subject key identifier: 54:76:19:9A:A7:1F:EF:F9:A2:90:0F:67:41:A4:6A:BD:50:21:2B:F9
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A1AB5E5EFB9F1CECFB244F140D3355DA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1882
Signing time: Thu 05 Nov 2026 11:00:50 +0000
Manifest this update: Thu 05 Nov 2026 11:00:50 +0000
Manifest next update: Fri 06 Nov 2026 11:00:50 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: LDXnMNTnLUHzyRKIE8z0ERUlbt5bkeTnlPPcjKXgSm0=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:5e:fb:9f:1c:ec:fb:24:4f:14:0d:33:55:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Nov 5 11:00:50 2026 GMT
Not After : Nov 6 11:00:50 2026 GMT
Subject: CN=5476199aa71feff9a2900f6741a46abd50212bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:36:16:12:cb:45:b3:76:f1:98:1f:fa:39:
6a:b4:1b:cf:fa:ab:bc:bd:03:31:2f:d9:d8:7d:b0:
8b:88:64:68:4f:24:1a:5c:ba:c0:69:22:39:db:f0:
5d:71:7d:7a:e2:a0:5c:a8:06:75:03:1a:7d:2f:59:
b3:fa:3a:0a:3e:3b:8b:73:83:c2:9e:a9:dd:0c:8a:
07:ce:50:9e:70:a8:e4:8f:e8:b8:b2:e3:68:cc:e5:
ff:9b:df:22:6c:05:30:bd:bc:37:29:60:98:8d:e6:
98:3e:19:b5:85:1a:71:02:93:47:41:13:42:a5:fc:
55:3b:c1:dd:24:b4:d2:74:1c:b5:1d:d9:57:5f:fc:
48:98:ac:bc:b9:43:3f:98:34:88:42:e1:32:df:84:
b0:ba:b2:46:b5:31:28:4f:48:25:9f:ba:49:45:28:
82:f8:a8:94:a7:17:9e:77:66:c1:7f:07:09:0d:c3:
16:b7:35:cd:f1:37:da:49:b5:4c:33:1d:f8:e8:ac:
78:a6:a5:2f:c6:67:75:7b:03:54:ec:32:15:47:93:
f8:bc:08:01:64:a3:cf:bc:d7:68:a3:a1:fa:cf:1c:
7a:bb:04:c8:53:02:73:2b:06:5d:42:19:af:a2:3c:
75:85:c1:85:77:f8:da:78:91:e1:5c:87:03:85:bc:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:19:9A:A7:1F:EF:F9:A2:90:0F:67:41:A4:6A:BD:50:21:2B:F9
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:23:8a:3d:2a:35:dc:0c:83:2e:3e:94:c9:07:a9:cb:19:
3e:df:51:2d:58:5f:2c:d7:1e:29:fc:f8:08:c6:c8:24:16:ba:
53:10:83:71:e4:96:b4:a8:b6:19:b3:5c:29:14:d3:33:9e:cb:
87:4f:30:67:cf:bf:c5:9f:82:a7:cf:5b:cf:15:dd:e1:a7:cf:
c3:f8:2a:24:c8:31:96:d4:d5:de:2d:46:48:60:70:b5:48:17:
15:2f:73:f3:5c:b2:38:49:40:46:5e:8e:db:81:f3:aa:2d:14:
db:db:f8:48:f3:26:b5:e6:3b:e2:60:f5:a7:e6:52:67:c5:39:
39:92:d7:27:36:a2:65:6e:a2:78:a6:b0:ce:67:f2:72:38:77:
94:fb:ad:31:5c:c3:a8:4d:b8:75:25:c9:a3:ce:93:2c:2a:9f:
8f:df:2e:10:a7:46:d1:1a:0d:08:50:46:c3:7f:ac:66:1b:19:
90:34:29:83:99:b5:0c:4d:6f:43:80:4c:53:21:2c:a5:ed:db:
fc:bc:8b:4d:f7:19:b2:c8:02:7d:a8:34:55:7e:b4:71:24:c2:
81:1d:22:99:46:b6:d2:97:1c:dc:fe:d0:45:5f:c0:84:29:60:
90:84:fd:cb:af:97:f4:54:4d:74:29:57:db:7c:43:e1:b7:fc:
dd:54:a0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGrXl77nxzs+yRPFA0zVdoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjYxMTA1MTEwMDUwWhcNMjYxMTA2MTEwMDUwWjAzMTEwLwYDVQQD
Eyg1NDc2MTk5YWE3MWZlZmY5YTI5MDBmNjc0MWE0NmFiZDUwMjEyYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8s2FhLLRbN28Zgf+jlqtBvP+qu8
vQMxL9nYfbCLiGRoTyQaXLrAaSI52/BdcX164qBcqAZ1Axp9L1mz+joKPjuLc4PC
nqndDIoHzlCecKjkj+i4suNozOX/m98ibAUwvbw3KWCYjeaYPhm1hRpxApNHQRNC
pfxVO8HdJLTSdBy1HdlXX/xImKy8uUM/mDSIQuEy34SwurJGtTEoT0gln7pJRSiC
+KiUpxeed2bBfwcJDcMWtzXN8TfaSbVMMx346Kx4pqUvxmd1ewNU7DIVR5P4vAgB
ZKPPvNdoo6H6zxx6uwTIUwJzKwZdQhmvojx1hcGFd/jaeJHhXIcDhbzY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR2GZqnH+/5opAPZ0Gkar1QISv5MB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2kjij0q
NdwMgy4+lMkHqcsZPt9RLVhfLNceKfz4CMbIJBa6UxCDceSWtKi2GbNcKRTTM57L
h08wZ8+/xZ+Cp89bzxXd4afPw/gqJMgxltTV3i1GSGBwtUgXFS9z81yyOElARl6O
24Hzqi0U29v4SPMmteY74mD1p+ZSZ8U5OZLXJzaiZW6ieKawzmfycjh3lPutMVzD
qE24dSXJo86TLCqfj98uEKdG0RoNCFBGw3+sZhsZkDQpg5m1DE1vQ4BMUyEspe3b
/LyLTfcZssgCfag0VX60cSTCgR0imUa20pcc3P7QRV/AhClgkIT9y6+X9FRNdClX
23xD4bf83VSg/g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:42:14 2026 by rpki-client