Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: +13zTY0jyNtZDcw1Up/xMdvqzH24mvlsLtcEtXANK5w=
Subject key identifier: BF:00:B1:EF:BA:C2:4A:FD:81:31:58:E4:DD:B6:48:29:9F:A9:A7:91
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 019D9AE316ACB0DFDCB5D0CF6DFAFEC025F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:01:06 +0000
Manifest this update: Fri 17 Apr 2026 10:01:06 +0000
Manifest next update: Sat 18 Apr 2026 10:01:06 +0000
Files and hashes: 1: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: XfLjE7Nk5/re30F2Eyp23IuMhd7gLBZzXP5AFiM/AfU=)
2: w73J2wKuabz6xF5h7oZy0LH-4cE.roa (hash: Rf9ykuk+l/JPt0H5ZkccxWBMK9ULnk1SQbpqnOL7oFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:16:ac:b0:df:dc:b5:d0:cf:6d:fa:fe:c0:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Apr 17 10:01:06 2026 GMT
Not After : Apr 18 10:01:06 2026 GMT
Subject: CN=bf00b1efbac24afd813158e4ddb648299fa9a791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:84:95:96:ca:5b:34:3b:11:d8:7f:fe:5d:
f8:3e:12:23:79:47:48:91:70:24:f6:24:0a:70:f0:
9f:b7:f1:70:06:a3:43:2f:d0:1a:84:4a:d9:c8:6d:
dc:df:37:44:06:75:09:2f:d0:72:06:bc:c3:c5:8d:
90:96:7b:52:80:09:77:ab:87:be:0a:09:0c:97:35:
a9:b2:81:f7:f0:32:ff:4a:91:95:84:99:42:eb:58:
8e:c2:4a:9b:24:5e:48:f8:d4:db:07:5f:bf:0a:7a:
58:71:ff:3e:f2:fd:a1:b2:f9:aa:f1:05:e8:1c:e0:
27:de:87:fe:86:8b:2f:5d:29:ea:da:e9:ed:66:9f:
61:cf:9f:4d:e7:05:f7:5b:52:54:36:d2:6e:bf:f9:
43:9e:5b:a1:49:56:6c:5f:d8:b2:42:2c:14:96:9a:
bb:ea:36:64:e2:4c:91:91:8a:00:48:a4:00:a7:56:
d6:fe:06:bf:96:20:34:9b:69:ff:42:2f:17:a0:c9:
ac:bd:83:39:98:e0:8c:7b:9d:ac:c6:5c:81:5a:55:
f5:44:10:25:10:0a:82:67:8e:01:0a:be:31:0e:20:
40:a6:c0:c6:fd:95:9d:d9:b3:b8:5b:dc:e7:db:02:
c9:a9:56:d3:7e:55:89:a4:15:50:a1:a7:3e:83:b7:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:B1:EF:BA:C2:4A:FD:81:31:58:E4:DD:B6:48:29:9F:A9:A7:91
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:56:1a:9a:56:8e:50:08:c9:9c:6b:2c:6a:ee:ff:52:11:95:
2a:b0:cc:59:84:10:d0:ea:8a:0c:d1:74:72:fa:90:da:fe:3c:
56:a0:e0:47:6b:e1:1e:52:a2:a8:81:95:b9:0c:3c:e1:fd:ad:
de:fe:ed:6d:f3:6e:b1:6b:58:ab:a8:99:4e:ca:19:b6:70:1c:
06:69:c1:9e:70:85:6a:16:f6:ca:12:1c:6e:7a:7c:82:95:8c:
f1:d9:eb:a5:88:d7:35:e4:3b:57:aa:1d:0e:e1:32:9c:1b:49:
19:6c:ec:9e:b5:a7:73:da:cd:21:ed:9f:c4:8b:af:2b:2e:15:
d1:1e:24:a3:ac:40:87:1b:7d:24:54:20:a6:52:1d:22:b1:cf:
d9:f1:a3:99:56:52:0c:e1:27:99:b9:b5:ce:88:3b:63:c4:c2:
fd:d2:58:b4:48:fe:ee:52:e1:a4:8a:85:35:2f:1e:d5:78:7a:
3a:da:97:0d:2b:74:6a:d2:a8:c1:e8:65:cc:48:3e:00:dd:21:
89:33:b5:12:f4:fc:b5:ba:5b:f8:9b:19:f1:0a:70:5f:d1:84:
45:36:bc:b6:bb:ea:01:1c:47:e5:8f:93:e2:6c:4d:68:e2:b2:
b7:c7:76:70:50:fc:7f:9b:55:14:5c:c9:ee:57:af:e6:82:7d:
b5:d1:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:02 2026 by rpki-client