Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: kNjRUfpApUoanF/xdecKHa4GM54bup/LBcAk1XkKcLE=
Subject key identifier: 02:F5:48:EB:BA:2A:A6:57:0E:68:90:C4:0B:8B:8E:87:9A:D1:5E:4F
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019CAC1000FABDF4F66700EB7512DFAC05E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1857
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: qWzyi/Ubulo4Fm+sWmFzxfwEaKekd/ZoF5YwwcUO5bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:00:fa:bd:f4:f6:67:00:eb:75:12:df:ac:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=02f548ebba2aa6570e6890c40b8b8e879ad15e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:de:14:01:1f:cd:2a:ce:e0:9f:fb:20:c6:
9f:c0:ef:fa:d2:f7:23:49:d3:42:0d:1a:55:9e:76:
f3:11:3a:d4:ae:01:fd:85:1d:08:e1:3b:3b:51:6e:
35:4d:d2:65:b8:2b:42:5a:88:5f:06:d7:71:ab:4c:
02:45:54:f1:9c:fe:09:1a:e0:5f:c9:1e:62:c1:32:
bb:31:25:3c:63:99:68:5e:c3:59:cb:2f:21:a1:10:
89:52:7e:12:57:18:70:42:58:2a:aa:d5:b0:cc:61:
ba:c2:22:c0:d4:3e:1c:16:47:ab:3a:59:c2:b4:09:
b4:a0:31:3e:8e:c0:ca:47:f9:19:65:25:32:ca:e2:
9a:9b:30:ce:eb:96:81:e6:d1:4d:b2:d5:d2:49:97:
82:e6:ee:52:ca:03:7a:ed:dc:35:7e:9d:41:41:c7:
66:2f:72:62:66:ab:d9:8f:40:f8:92:b6:5e:aa:73:
c2:4f:9d:c2:b3:d9:3d:e7:32:d0:ad:61:7c:4f:7b:
16:ba:58:ec:52:57:8a:a7:44:c3:8c:44:47:74:83:
0b:a0:fe:c2:98:d3:8c:d9:f7:52:ad:85:26:a5:bb:
e7:a2:c5:f9:d8:7b:3c:07:db:e9:35:ef:8f:32:31:
8a:c6:d7:d8:0f:52:0a:47:c8:7d:90:2b:d1:71:7f:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:48:EB:BA:2A:A6:57:0E:68:90:C4:0B:8B:8E:87:9A:D1:5E:4F
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fd:a9:7e:96:f6:4b:94:9f:eb:c1:29:49:63:d9:74:a5:46:
62:0a:57:66:15:23:57:ca:e5:9c:6e:30:fa:f0:e8:84:ad:2f:
ec:a5:dd:af:d5:3d:c5:fc:13:2b:77:17:a1:1f:2f:94:98:4f:
9e:93:45:25:35:28:ff:30:f1:5d:bf:b3:50:c5:74:5d:f1:4b:
81:42:65:da:3d:4d:64:4c:99:25:aa:07:6f:ed:56:38:dd:af:
27:fd:78:69:d9:a5:7a:84:0d:03:6f:25:d8:02:48:be:a8:b1:
1d:2c:6a:bb:6d:a4:d7:c1:26:b1:4d:2c:34:b3:6f:c8:bc:45:
00:2b:ca:1e:df:0b:d0:41:79:b0:1e:09:e6:e6:86:24:3b:a0:
e2:21:ea:34:4d:60:f2:cf:f6:d8:c0:8a:13:ec:dd:3a:4e:7e:
74:d6:4f:25:43:bd:1e:34:73:2e:52:94:4d:94:3d:dc:11:68:
31:23:2a:4e:9a:0b:4a:39:0b:ba:b1:a6:e9:cb:98:31:43:49:
d9:d4:3f:3a:4e:c0:38:07:87:47:45:57:c0:36:64:da:b8:0e:
b8:56:80:1a:cd:bb:59:09:08:03:e1:0e:f9:51:17:b5:8a:e6:
bc:67:c0:44:c7:4d:49:ab:14:de:f1:c8:45:bf:f1:00:f2:2b:
2c:db:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:02 2026 by rpki-client