Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: L0zmiKffpF3FUDU0R8K2F4X1MzXO4JcpPLXuY6xwwq4=
Subject key identifier: 74:97:2F:4A:25:5B:42:A4:9A:C2:53:3F:A3:AD:F8:0A:82:56:8C:6A
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 019CAB6AC50051D35B9A4FBB248D07EDFF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0CBF
Signing time: Sun 01 Mar 2026 22:00:26 +0000
Manifest this update: Sun 01 Mar 2026 22:00:26 +0000
Manifest next update: Mon 02 Mar 2026 22:00:26 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: iTZq9Uo3JassDDePb6iDvQD9JsM49EOHtuZS5vs8peQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c5:00:51:d3:5b:9a:4f:bb:24:8d:07:ed:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Mar 1 22:00:26 2026 GMT
Not After : Mar 2 22:00:26 2026 GMT
Subject: CN=74972f4a255b42a49ac2533fa3adf80a82568c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:a0:7c:85:12:18:2d:55:79:58:5f:3c:bd:
93:8a:10:d4:5b:cf:74:a9:59:7b:a6:c4:32:1e:e0:
8f:ec:de:48:0d:9e:cb:3c:60:5e:b8:a4:35:fe:d4:
46:2c:84:c6:f2:69:a1:9a:d6:67:ad:91:17:28:d3:
4a:88:ee:8b:3f:8d:0e:e7:1d:83:cf:a2:f6:63:99:
f2:3b:f1:7a:5a:d7:0b:87:ea:1c:0f:b5:96:13:83:
3c:f4:41:50:e9:59:a2:74:41:be:dc:a8:b7:7a:80:
3b:2d:70:50:fa:13:3e:fe:81:ee:ed:9b:f7:db:c1:
6f:ee:70:64:21:f3:2e:24:29:1a:5a:ca:ab:0f:fc:
eb:45:3b:76:d3:a3:54:1c:53:29:19:e4:38:57:fd:
35:ff:31:20:57:11:a2:94:ce:10:34:3f:2f:5a:b1:
ab:dc:3d:10:0d:a4:76:7a:48:a0:7c:71:dc:8f:ab:
0e:b3:a6:44:73:0d:91:8d:e2:77:fa:36:99:76:f1:
f7:1a:3f:22:a6:b3:b1:d0:5f:b5:63:05:6d:7d:f2:
83:5d:64:03:ae:bf:4c:ca:1f:56:0d:54:8a:01:0b:
55:df:c2:62:be:78:40:76:6e:7b:3d:33:94:cc:10:
e1:32:c3:33:c0:7c:52:f0:8a:f1:c2:c3:bc:97:8d:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:2F:4A:25:5B:42:A4:9A:C2:53:3F:A3:AD:F8:0A:82:56:8C:6A
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3b:80:9d:1a:46:d6:bc:6f:15:f8:20:ed:b4:cc:0f:2c:b6:
f9:88:ae:39:47:5a:a1:44:24:5f:15:82:da:42:ae:4c:12:8f:
08:d3:38:c1:b8:92:01:52:08:30:9e:f4:0e:fd:04:65:48:56:
43:d7:23:62:c5:ba:7b:1c:80:5c:3f:a4:c0:82:35:73:35:d3:
0f:75:5a:4e:d1:48:20:9d:33:5d:bb:18:91:41:e3:cf:89:8d:
7f:dd:14:e3:07:7b:7f:dd:1c:0f:1c:07:31:6e:b3:b7:95:0e:
45:02:ec:5f:23:fc:a3:7b:53:07:8b:cd:c7:83:68:d4:7c:1a:
0b:e7:dc:db:0c:7a:39:5f:e7:1e:a2:44:61:66:a3:5d:b8:50:
a2:6a:fe:51:d5:10:a1:b3:40:29:c0:51:c2:d2:05:80:f8:52:
ed:0d:c0:ed:bf:ee:98:56:4f:f9:65:73:89:35:06:2a:25:29:
39:ef:20:72:fa:39:82:94:89:e1:20:44:4e:43:09:35:4c:9b:
88:2e:9c:05:13:19:3e:db:3f:98:2c:9a:9d:3d:8b:c8:4b:5e:
a0:b4:bf:10:aa:19:5a:e6:f7:ab:92:57:a7:43:41:b1:8d:5d:
af:c3:be:ad:c2:57:12:fd:13:ba:36:71:7d:aa:36:fa:5c:2d:
91:6d:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:43 2026 by rpki-client