Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: XfbEXmyPzSkEUkkeAAtbG5uHyqe+18Q1NFNCvXO8L94=
Subject key identifier: EA:5D:D4:CF:98:12:F5:9C:17:6A:DE:2C:0F:DC:2C:0E:95:4F:AB:35
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019CAAFD7213BBEC0910D7455C74F0DDDC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 15EB
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: TwgBBYDwr0zMSwjV43w19UOFtvAstd4+x3MmjeR+KAw=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:72:13:bb:ec:09:10:d7:45:5c:74:f0:dd:dc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=ea5dd4cf9812f59c176ade2c0fdc2c0e954fab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:de:8d:26:8c:8a:c7:aa:11:ca:23:6a:4c:
81:d2:c0:fe:f0:54:63:7c:42:54:10:81:f1:be:0c:
af:6d:78:76:1b:ec:dd:4b:02:85:70:9b:97:d1:d2:
64:c6:05:06:f4:c4:3a:86:2a:f1:4f:c5:7f:71:81:
b8:09:df:29:3b:d3:0a:85:aa:25:f5:05:a8:f5:c3:
56:9c:aa:00:20:a9:c1:cb:e8:e4:eb:15:f7:ff:67:
87:02:84:87:c0:b3:0d:b0:65:b6:31:da:88:55:cb:
00:79:e8:a5:16:98:f4:2e:c1:31:49:66:ef:a5:3b:
a3:48:ca:7f:12:52:9d:e6:2f:16:e7:67:d3:53:e1:
13:9b:03:7b:13:9c:c7:0a:f6:bc:38:82:21:92:94:
92:a3:6b:d3:04:b0:c5:b4:16:9a:8d:fe:8f:a2:84:
2d:e6:91:0a:df:43:c9:28:a1:d7:37:11:a0:00:c5:
46:41:97:93:c6:a8:1f:64:e1:46:f3:00:6c:95:27:
2c:f9:b4:e3:d3:49:e7:3e:af:e9:b1:c2:f8:29:3f:
0a:df:85:2d:ee:6f:d1:fc:de:05:7d:57:91:de:96:
14:f0:6b:72:02:a9:ee:fa:30:e2:34:24:08:df:9c:
1d:6d:86:46:01:b8:2b:dc:6a:0c:c6:0f:e1:12:f0:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:D4:CF:98:12:F5:9C:17:6A:DE:2C:0F:DC:2C:0E:95:4F:AB:35
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:55:ad:ec:8c:76:0b:9c:a5:8b:71:7c:1c:42:07:9a:44:b0:
62:57:32:ce:38:22:dc:32:f4:b5:da:36:5a:64:14:da:55:22:
a5:ae:ee:34:20:75:81:eb:49:25:1a:5b:ae:96:82:3a:0c:ca:
91:80:9c:40:9d:41:c8:2e:14:36:d0:97:f7:46:d6:47:08:da:
ba:55:3b:35:57:4e:67:1b:b9:45:f4:15:3b:56:17:02:8d:2b:
72:b0:00:ee:57:be:43:c2:e8:81:87:6e:d1:f1:e0:39:75:b1:
47:68:60:d1:7f:85:60:d1:ab:13:43:b6:46:62:8e:36:e1:37:
c5:13:2f:7f:7e:eb:96:3a:33:5b:c9:98:2e:e6:fd:69:0a:ac:
de:39:88:f0:43:67:2b:35:c2:fc:2d:f1:e4:3b:43:00:5a:c7:
60:5d:3a:b6:18:55:5a:34:ac:2f:3b:bd:5d:23:0b:e4:0a:c1:
3a:d7:1a:4e:83:57:33:b9:01:f5:ec:c7:70:fd:0c:8b:57:60:
4e:9b:2b:b8:20:36:79:9d:31:e9:f3:64:b2:57:3c:bc:e4:4d:
0a:aa:57:2b:a4:a4:62:62:e3:2f:6e:24:26:3f:ed:02:1c:ca:
a3:e9:b4:eb:db:79:3c:55:0c:99:46:15:19:5a:70:d6:44:7c:
45:d1:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:25 2026 by rpki-client