Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: Ke3ZQG+6jDqpyygNNMG/knsRctSuzegTEclbbHBsaqc=
Subject key identifier: 74:FB:7B:F1:57:09:AB:4A:40:2A:C1:39:92:C9:03:31:19:6E:A3:7C
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 01A06D5DA0F34525851CF7DA8CC7C78903D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 17F9
Signing time: Fri 04 Sep 2026 17:00:47 +0000
Manifest this update: Fri 04 Sep 2026 17:00:47 +0000
Manifest next update: Sat 05 Sep 2026 17:00:47 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: XARPrAuYQ8OP3Sl2JBcxFUH0AnEnLNy4jduirTNzD3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:a0:f3:45:25:85:1c:f7:da:8c:c7:c7:89:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Sep 4 17:00:47 2026 GMT
Not After : Sep 5 17:00:47 2026 GMT
Subject: CN=74fb7bf15709ab4a402ac13992c90331196ea37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:52:50:09:a0:e8:19:9c:53:21:35:f3:c2:
c0:28:bb:e2:f2:ea:dc:a6:da:b5:5b:3a:b0:b4:56:
c8:a2:aa:ca:7e:a1:44:fe:43:bb:c4:fc:0b:60:d7:
d1:8b:e8:0f:0b:b5:1f:b2:fd:7a:8c:31:52:ca:3f:
bd:97:6a:4d:58:ce:95:1d:5f:91:a7:29:6e:24:d8:
09:ab:93:24:aa:42:ea:fa:77:a9:9e:f8:a0:19:41:
cb:6b:ad:9a:cd:46:45:99:10:d4:d3:fc:41:0c:9a:
15:5c:9e:5f:a7:9b:5a:92:71:fe:b3:05:61:03:7d:
b7:a0:43:6b:68:7d:e8:b5:68:06:f8:f6:1d:93:86:
7b:35:9c:2d:37:41:16:58:94:0e:24:85:e0:68:78:
95:96:5c:fb:a8:6d:06:a6:43:22:5d:a1:21:a3:54:
2a:42:9b:98:37:b8:c6:b3:0f:da:af:06:71:f5:27:
b9:3a:cc:2b:dc:b3:f6:57:d5:96:d6:05:89:b7:f6:
97:73:ab:e8:fc:6f:c1:81:7e:2c:91:b0:29:76:f6:
69:95:60:06:93:46:94:76:68:f2:45:f2:24:9c:29:
64:18:7b:3d:a4:cb:40:c7:b6:7b:15:1a:bf:11:8a:
41:57:6c:8d:36:d7:d8:d6:f7:43:77:96:08:6a:71:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:7B:F1:57:09:AB:4A:40:2A:C1:39:92:C9:03:31:19:6E:A3:7C
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:13:70:9a:63:25:0f:08:b9:62:fe:4b:08:59:07:f2:e7:8c:
08:51:09:77:76:c2:57:a4:d4:8d:1e:5c:e5:44:a8:30:63:1d:
6e:52:be:e7:c4:bb:2d:bf:fb:5d:82:2a:84:a8:1e:57:75:0b:
a3:22:6d:02:ae:85:aa:5e:16:a8:0a:af:cc:f2:a7:19:ca:9a:
4a:42:5e:a1:59:a1:33:cb:bd:7f:3c:34:90:4d:fd:25:d3:b5:
39:6f:83:7e:1d:f6:eb:9a:99:39:f0:99:81:d5:4e:c2:76:8e:
a2:12:1e:27:ff:84:64:56:52:83:6d:3e:7b:ac:e4:5a:d7:4c:
42:67:6d:99:34:5d:11:d4:21:9a:8c:8d:02:56:ab:7e:65:1d:
d6:82:fb:0f:69:bc:68:d8:ec:61:18:63:a2:d1:26:b9:2d:58:
27:48:dd:f3:12:29:dc:f8:ca:7e:d9:5f:3e:f9:ec:48:bf:9a:
30:db:7e:db:c2:5a:f0:c6:c8:30:01:22:19:28:73:da:bf:2e:
7c:a6:3f:f2:99:12:c4:66:13:f2:01:c9:32:b2:c3:46:d8:f9:
f5:26:e1:a9:80:60:26:eb:f1:f6:a8:99:6b:22:8c:18:5e:1f:
83:e7:58:2b:98:b5:49:35:22:cc:ee:6d:ac:cf:68:a0:07:6a:
da:80:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:05:36 2026 by rpki-client