Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: apA4MNWfgeBq6crqGt9kMV0dD2irml3Av6lkoCGMT7c=
Subject key identifier: 44:35:31:46:68:56:F3:F9:DF:9B:CD:BD:9F:2A:94:29:87:E1:1C:44
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01A1DEDE71D8A425371E8C2D6B9681FF4BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1B0E
Signing time: Sun 15 Nov 2026 11:01:22 +0000
Manifest this update: Sun 15 Nov 2026 11:01:22 +0000
Manifest next update: Mon 16 Nov 2026 11:01:22 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 0EYRK+GNihCPdJ9gCpph3AfcPj+KcJWGqe2AJ+EJX+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:71:d8:a4:25:37:1e:8c:2d:6b:96:81:ff:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Nov 15 11:01:22 2026 GMT
Not After : Nov 16 11:01:22 2026 GMT
Subject: CN=443531466856f3f9df9bcdbd9f2a942987e11c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:d9:56:6d:18:01:6c:4b:a1:4c:4f:38:26:
5d:2f:31:33:10:0f:fe:07:f5:87:29:48:99:4c:25:
97:92:0e:c9:ad:bd:26:e7:5f:b8:e4:c1:d9:ad:7a:
a0:ca:a7:74:47:cb:ff:da:4c:4e:52:66:12:70:dd:
11:22:8a:73:e4:50:30:5b:f0:fa:81:b5:98:22:ba:
b9:75:83:96:ef:c7:a0:91:97:b2:5b:b3:da:a5:98:
28:0a:c4:4e:31:45:46:38:e9:9b:44:26:fc:af:88:
64:3b:b0:dc:1d:e6:ce:ee:3b:ff:28:68:07:e4:c7:
10:93:b5:4c:41:90:a0:28:b5:2a:2f:ff:ce:81:eb:
d1:40:85:74:2e:5d:27:73:d8:32:9a:79:bb:4a:46:
59:69:35:9e:b1:17:2b:f3:40:39:03:5f:1e:f6:0c:
f1:f5:b7:37:2d:ba:ea:64:b5:d1:b1:53:a1:bf:e2:
c4:ef:e9:f5:8c:5c:eb:7e:ab:16:c3:04:dc:8d:9d:
34:79:77:bc:d1:b6:ab:b9:3b:b7:ff:a9:22:cb:4f:
6c:0b:c2:5e:d3:11:fb:a0:ee:9c:3e:4a:08:7e:eb:
5e:66:91:80:e4:5d:ee:a8:0a:1b:9f:90:57:a8:94:
65:a1:13:a2:7a:37:a2:2e:58:76:08:39:06:af:e0:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:31:46:68:56:F3:F9:DF:9B:CD:BD:9F:2A:94:29:87:E1:1C:44
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:16:31:8f:c3:72:60:a0:4b:34:c2:17:f9:ff:bc:49:2c:f4:
8e:c7:cf:9d:85:2f:e4:0b:f5:f7:64:5a:52:33:7e:53:3b:c0:
6e:c7:08:fe:36:23:53:33:1d:ea:8b:e9:84:5a:b7:af:ca:5b:
9c:6a:4c:b7:7a:68:f4:76:1c:05:ee:da:88:03:3a:34:54:d9:
50:63:a0:c2:ec:e9:6a:55:c5:e5:e8:94:e3:2b:c9:98:76:6b:
f8:f0:bf:57:42:2d:a2:41:08:66:7a:61:0f:72:f2:33:ab:57:
b2:08:72:11:9f:ec:33:30:f1:9e:ba:21:8a:1c:32:1e:b8:33:
72:1b:e5:d3:b7:18:64:fc:9f:6b:87:1c:20:70:33:42:d9:56:
a3:36:35:3d:bc:e1:2d:2d:8f:20:e6:4a:0e:53:e2:78:0f:23:
d7:1f:88:14:07:db:32:37:c9:c6:03:78:b7:32:0c:55:99:e8:
be:aa:b0:1c:ae:e6:4a:44:9f:74:c9:ad:f5:d0:ed:62:e4:ca:
a2:1d:d0:c6:e0:26:b5:fb:07:dc:cd:fb:cb:f7:31:ff:e2:5f:
1f:c8:d5:8b:76:9d:4f:4a:84:97:6e:27:bb:d3:09:b1:d8:0a:
d1:d9:f7:47:37:8d:53:7d:c9:af:3f:e1:da:e8:1e:f0:3b:9a:
b0:93:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:20 2026 by rpki-client