Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: XNNbEI017WG2e91hnoc30+wa4KBw6j+k2AbB+6tabEM=
Subject key identifier: 6C:74:B5:11:E5:0C:3F:F2:9A:DE:41:C0:54:E1:34:BA:FD:6C:07:7B
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019CADFE9D66CEECCFCEBE68EF96EDF77665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 10:01:10 +0000
Manifest this update: Mon 02 Mar 2026 10:01:10 +0000
Manifest next update: Tue 03 Mar 2026 10:01:10 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 88EpAYuvq29ago27+rXWnGBmiTcWqkxo8/WkeGaG/m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:9d:66:ce:ec:cf:ce:be:68:ef:96:ed:f7:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Mar 2 10:01:10 2026 GMT
Not After : Mar 3 10:01:10 2026 GMT
Subject: CN=6c74b511e50c3ff29ade41c054e134bafd6c077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:e2:c2:be:ef:0e:b3:50:43:0a:70:5a:88:
3d:f5:4a:ea:c2:15:05:0e:20:4c:a7:fa:bd:ad:0f:
d7:1c:63:cd:22:b8:1c:7e:35:e3:79:cd:7c:f0:d8:
dd:9d:61:73:a3:c5:68:ed:d1:86:08:78:58:78:b3:
11:13:e0:bb:70:4c:eb:8e:81:f7:81:4e:a9:e3:e3:
d1:d9:66:2e:cc:05:57:fd:dd:0e:1a:af:32:00:26:
c9:bf:ea:28:fa:5a:16:97:b0:c0:3f:ac:cb:43:eb:
d6:10:86:44:8a:67:ce:de:c6:31:40:a2:c4:e2:a9:
c4:13:76:48:e8:e1:ee:2a:49:8d:20:b1:11:4d:c0:
9b:3d:a5:2c:16:04:24:02:7f:31:34:5d:75:f8:f1:
c2:14:f4:5e:49:b6:af:1c:0b:f8:94:67:ee:87:f3:
fd:60:dc:5d:a5:01:24:c8:a9:9d:c1:07:0a:b5:ba:
fd:8b:34:40:fd:d5:fe:95:f5:d7:49:26:6c:be:84:
b9:56:c5:eb:d2:91:c8:eb:5b:dc:03:c9:30:d4:6f:
68:71:16:10:3c:80:4f:21:80:00:98:89:db:c1:d9:
c5:4b:43:46:fd:d7:b4:7e:3a:54:24:d9:11:44:71:
b2:d5:e5:46:94:5c:c2:28:dc:77:3d:aa:16:fb:e8:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:B5:11:E5:0C:3F:F2:9A:DE:41:C0:54:E1:34:BA:FD:6C:07:7B
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:52:14:11:de:55:09:79:25:c5:20:17:ed:c1:34:b5:2c:d8:
1f:8f:e5:8a:69:a1:e9:89:1b:84:9d:e1:c8:0d:c4:77:38:63:
1a:a8:e0:d5:46:61:80:28:82:c9:8f:8e:81:12:f8:66:08:b3:
5b:31:ff:4e:fe:59:37:47:70:0e:1c:0e:64:9d:3a:f6:4c:d9:
95:6f:d6:9a:23:52:27:96:6d:56:08:0d:77:7e:81:e1:76:f1:
cf:6d:c0:2f:a1:87:26:0e:dd:7e:7d:79:10:b9:fc:4b:6a:1f:
90:c9:11:f6:b7:ad:e4:f3:0c:f7:d3:27:2d:d8:1e:76:e9:ab:
f3:bb:09:0a:91:31:4c:75:db:2c:82:55:a0:42:34:f0:42:85:
04:44:2a:50:42:a2:87:46:19:60:cb:1a:a3:31:a7:76:18:5f:
28:f3:88:fb:0c:7a:2e:9f:a4:77:f7:54:48:34:75:be:8f:ba:
b6:c4:c8:94:cf:e4:12:92:d7:d1:b9:3c:d5:62:3f:5c:54:f7:
d1:fd:de:35:ca:39:5d:6f:8c:87:98:e9:0c:6d:08:c7:7d:42:
2a:ea:98:ff:dc:41:11:4b:ce:f4:cd:b3:d2:74:90:ca:51:19:
73:3a:8d:a5:7d:cf:b3:d8:c0:8e:f7:37:27:66:ed:77:37:44:
e7:be:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:51 2026 by rpki-client