Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: egPbxpPDeEg/d7164Vsu+CJjdzN/2+mI55IXduPu32c=
Subject key identifier: BA:86:79:70:C5:B0:7A:70:DE:8C:65:86:38:F1:2D:50:B0:C0:9A:95
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019F12663E1DD22CE0A0B5630D0EC8ED17C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: 020E
Signing time: Mon 29 Jun 2026 08:01:58 +0000
Manifest this update: Mon 29 Jun 2026 08:01:58 +0000
Manifest next update: Tue 30 Jun 2026 08:01:58 +0000
Files and hashes: 1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: FZccmR+Ys7UCZw2YhwCZ6eoL/DDpsw7dgJxWb9C9UkY=)
2: awws4Zg8dGTfI3KzZwB4bIm-Nto.asa (hash: DmofOOMoiDHXeSleMk3EA3S9L45l9Z1SDUpGjlromqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:66:3e:1d:d2:2c:e0:a0:b5:63:0d:0e:c8:ed:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Jun 29 08:01:58 2026 GMT
Not After : Jun 30 08:01:58 2026 GMT
Subject: CN=ba867970c5b07a70de8c658638f12d50b0c09a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:b8:d6:7f:b4:dd:b9:fd:08:78:31:1b:36:
08:82:30:71:16:f2:e1:97:19:02:3e:38:05:6f:94:
ef:f6:d1:8d:64:7a:69:b3:72:28:e1:c7:09:d3:a9:
24:94:ba:dc:63:1c:57:9c:1a:fe:fd:d6:43:97:68:
b6:1b:6d:38:44:76:b2:90:a7:9d:08:bd:25:a6:c9:
b2:17:a3:36:e7:9c:c4:19:08:59:58:e4:d9:a7:c0:
26:ed:71:c8:34:e2:6e:4b:8b:42:ec:d8:59:10:4b:
b1:c4:8b:c2:91:5d:aa:e9:ea:f6:44:f8:ac:64:7a:
98:cf:1c:eb:f5:f1:5d:a5:81:0c:6e:9d:c6:41:75:
18:0d:0a:58:b9:b1:81:f6:1d:36:cb:a7:b0:b2:36:
2a:f0:11:fe:93:c1:cf:94:6b:d2:3c:52:d8:14:ad:
3b:e0:fc:c5:98:55:7e:7e:a4:b6:d5:54:00:12:93:
79:23:34:48:43:52:8c:28:77:d2:df:79:8f:bf:1b:
d9:d1:21:bc:10:d0:52:3e:b8:91:88:85:ea:21:19:
6e:c2:39:74:ef:78:f6:31:0a:37:83:36:3f:dd:8c:
d9:01:69:25:58:77:39:ba:b7:0d:bd:fb:4a:2f:0a:
58:22:8e:f3:08:58:bc:b3:ef:82:da:79:fd:16:b9:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:79:70:C5:B0:7A:70:DE:8C:65:86:38:F1:2D:50:B0:C0:9A:95
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:71:36:8a:bc:c4:ed:a1:fe:0b:d7:32:3a:79:01:fe:be:e2:
39:32:ef:01:2c:b5:f2:23:81:14:6c:7d:d2:1d:51:ec:66:71:
2f:ca:f0:dd:9f:be:4e:7e:c4:6b:af:22:2e:be:c2:11:33:c0:
be:bc:78:a2:38:f0:25:4f:0c:85:2f:0d:9b:1e:fc:b9:64:62:
7e:1a:d1:3a:c8:28:2c:3d:78:61:dd:8f:e7:16:1a:b5:45:09:
56:90:40:24:59:f3:2f:0e:72:df:cc:fe:86:38:c2:13:4d:0a:
e3:94:81:19:b4:74:c9:f3:cc:cc:7a:00:86:76:9f:d0:c5:3b:
a1:ed:91:6d:2f:bb:6a:6d:f1:db:6b:c4:5c:9c:5f:8c:d8:6b:
60:a5:9a:af:6c:d6:c0:ce:e8:6d:26:9f:71:4f:2c:6d:2f:bc:
b1:9a:af:50:70:c1:f1:76:23:2a:fd:65:58:74:ef:a4:ea:96:
c3:1b:1e:8a:a7:cd:e0:79:59:28:17:17:f9:91:d7:34:d6:15:
d6:39:01:ee:16:fb:38:e7:0a:88:85:a5:cf:0e:20:da:f9:9d:
90:ea:79:6d:d7:a9:78:d6:7e:15:1f:5a:a5:f5:da:cb:6d:6a:
f1:57:08:3a:c3:55:d7:9b:30:9e:d5:f8:9b:5f:c3:50:97:ef:
8c:f8:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:57 2026 by rpki-client