Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: 3VL5YwDGl1UjExLDgDEimYYkRkmWpPikS/bh/vP7/FE=
Subject key identifier: 1E:A3:06:B6:5C:F0:A9:4E:5A:0E:45:E6:EE:24:73:8D:43:B3:B8:47
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019CAB34ACCFF513F5DFB87C3D90A1DBCFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 0219
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: ysMl30gxMKr/3CxG0nkUQ/iaG8NG3epAgjUDp8lZxVQ=)
4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ac:cf:f5:13:f5:df:b8:7c:3d:90:a1:db:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=1ea306b65cf0a94e5a0e45e6ee24738d43b3b847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:7a:b0:5a:22:22:d9:6f:8e:b5:7b:1d:b1:
93:30:43:9f:22:c1:99:50:42:cb:1d:d4:90:15:bb:
2c:f7:c2:88:92:44:37:9b:1f:81:0c:bc:3d:46:5e:
92:d4:38:3f:65:88:1f:11:20:e8:62:70:3b:bc:02:
0e:43:d1:cf:3b:70:50:38:ba:26:82:57:1c:d4:be:
60:b3:16:c4:e8:83:44:49:4a:58:20:cb:8d:c1:a0:
b5:73:e9:2e:17:49:82:c4:25:c5:85:c7:f4:d9:be:
0a:9b:e7:78:dc:7b:76:f2:81:f3:07:ef:2f:f0:ae:
63:2b:6a:25:0d:96:8e:16:f7:20:ab:a2:16:0b:a5:
aa:8a:46:e3:0b:e0:bd:ed:63:56:2d:07:e6:47:ef:
18:c8:7f:a7:8d:20:3e:60:47:19:4f:92:6f:24:21:
53:ec:e8:42:03:38:0b:86:37:b8:80:4b:60:b3:bd:
d0:6e:51:88:95:aa:bf:81:e6:fb:57:00:38:84:70:
9b:5e:06:06:65:83:96:21:ec:5c:e3:34:ab:78:13:
18:73:52:d8:54:17:ed:6f:60:95:75:df:ec:cc:0b:
54:d2:59:67:34:1c:38:38:f2:13:0b:36:8b:21:f6:
98:07:15:48:7e:a6:c1:c5:94:d7:e1:a0:5e:f4:d0:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A3:06:B6:5C:F0:A9:4E:5A:0E:45:E6:EE:24:73:8D:43:B3:B8:47
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ac:8e:24:41:2f:c6:95:aa:24:70:ac:b5:5e:53:da:61:75:
7c:bc:41:7a:9e:3e:ee:8d:31:87:cd:eb:a6:f3:9d:2f:1e:69:
11:5f:ee:8b:d1:b9:bb:4d:77:7a:2c:94:6d:7f:b2:71:14:f7:
d4:2c:8e:19:a8:61:d3:19:10:ac:2b:ab:c6:15:39:55:cf:af:
e8:7a:fe:3a:c1:32:0a:04:02:96:35:eb:09:10:b1:c2:02:74:
7d:18:5b:59:b3:50:f1:35:f8:de:1c:5f:89:86:39:7f:b8:74:
cd:ec:ca:11:fc:e1:97:55:94:c8:a1:5d:ac:e9:89:c6:c8:1c:
d2:83:91:fb:d5:9a:cb:a7:2b:64:d4:57:96:c2:88:2d:ff:e1:
98:6c:24:48:6c:95:91:61:44:60:bd:57:64:fe:98:64:98:f2:
46:b7:6a:63:4f:66:c8:79:5b:07:55:38:56:d0:15:24:79:fa:
6d:52:1e:ea:84:c8:7d:80:fb:b3:37:aa:80:da:3b:cc:4f:68:
9b:40:ba:51:71:73:91:c5:1f:e5:c9:a5:36:f7:a2:16:55:fa:
f4:f6:8b:e9:79:38:e7:9f:dc:ea:f5:6e:95:1d:c0:3d:6f:3e:
af:d1:7d:e5:7b:37:4e:f6:2e:63:93:be:11:be:44:13:76:2c:
d4:0b:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:44 2026 by rpki-client