Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: XxiZDtospq+Emiilqlp8+EaskBmA5EBUXZxBQoujkVQ=
Subject key identifier: AC:BD:F6:2C:C8:59:64:9D:C2:6C:70:DD:F5:1E:31:D7:B0:CF:C7:7C
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019D39411E26A38A0C03FCFC782EC8E413C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 10AA
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=)
2: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=)
3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: SR4yxF98a7jhQLZVDFC41kKYkUarjhz3MoM4QO/46SY=)
4: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=)
5: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=)
6: o4O2QobbJXdc_ZoUPu3pY45RaXw.roa (hash: p5E90cgzMtxqooCgfC6YdKNzNDwIJawPDk8/BJmTVIk=)
7: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=)
8: uqa1tyxWj6cFaANZUIcESG1vArI.roa (hash: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=)
9: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1e:26:a3:8a:0c:03:fc:fc:78:2e:c8:e4:13:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=acbdf62cc859649dc26c70ddf51e31d7b0cfc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:f7:a2:e2:e6:3c:35:1f:cc:15:6e:28:e0:
e8:40:0f:01:b1:54:ac:27:4e:82:a2:39:bc:22:7a:
eb:c7:e0:f1:33:ce:e0:70:b7:f4:fc:68:77:19:c9:
09:6e:a8:68:e8:69:81:33:50:fc:4a:23:99:62:db:
c6:39:3f:86:e9:9b:0f:6e:f9:70:f9:a4:4c:b6:7f:
96:80:02:da:40:c0:de:55:bb:7c:60:37:24:7c:fa:
f5:5e:9e:56:3e:30:b0:26:e1:0a:06:e2:91:64:31:
18:c3:3a:05:38:e6:92:22:30:df:d7:3b:1f:ac:b4:
e4:09:df:ce:40:3b:0f:92:28:1c:8a:36:11:91:cc:
3d:53:c2:86:0b:f7:af:33:1f:fc:48:e0:c7:16:32:
c1:d5:d2:4c:1d:1d:54:6d:0e:82:23:4b:41:cf:26:
7d:f9:d3:b8:40:2f:a6:5a:38:1a:85:aa:89:43:1f:
b1:8c:13:c2:90:62:15:bf:1e:8a:00:c3:c2:2b:9b:
bd:d1:d9:54:66:8f:83:58:ad:16:d5:78:8b:15:ba:
65:a8:8b:00:59:a8:c0:8b:1c:06:e5:f5:4f:a1:00:
b8:e9:f3:80:44:66:bb:3a:18:90:71:b0:6a:51:df:
32:95:54:cd:c8:84:b0:52:21:c9:5f:54:2b:52:b4:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:F6:2C:C8:59:64:9D:C2:6C:70:DD:F5:1E:31:D7:B0:CF:C7:7C
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c7:0b:eb:f8:c3:fd:f6:21:34:55:06:59:03:82:fa:fd:44:
a5:5f:5a:62:3e:a6:ef:37:a9:9c:c0:04:5d:a1:7e:98:77:1e:
5c:d7:2d:53:72:0f:5d:b1:ab:1f:aa:2f:67:ad:30:e6:bf:5a:
de:d8:ea:15:87:ce:8a:a9:e9:43:66:1f:ed:09:6b:89:d8:09:
25:71:4b:cc:cf:38:14:b0:28:8c:f3:38:b7:47:f6:05:25:0e:
9a:1f:7e:3a:e9:11:a7:7d:b8:0f:f0:94:b6:e3:a8:4f:36:f4:
1c:8b:0d:6c:e8:a2:08:18:f4:7b:3c:90:b7:42:bc:b1:6f:72:
73:c4:a1:be:2c:9d:f7:10:50:a5:c2:58:da:20:d0:1b:da:81:
e0:6b:af:1c:d1:93:31:28:1f:4e:2a:ca:25:c4:70:9c:9a:a7:
01:6e:1a:a6:15:05:35:c8:be:13:95:e7:ad:15:8e:ee:b3:d5:
a1:39:eb:11:e0:6e:e6:9a:9d:57:cc:af:c8:fa:28:d1:78:fb:
22:36:65:be:5d:ff:bf:db:e7:be:45:49:6a:bc:cd:10:66:9b:
4b:d6:bb:85:bb:bd:56:a0:fb:44:d1:f3:1b:e1:4f:9e:b9:87:
c3:d7:40:e4:11:7e:4d:0f:8f:36:4c:0c:4b:f5:7b:b2:56:0b:
ae:01:02:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QR4mo4oMA/z8eC7I5BPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjYwMzI5MTEwMTAxWhcNMjYwMzMwMTEwMTAxWjAzMTEwLwYDVQQD
EyhhY2JkZjYyY2M4NTk2NDlkYzI2YzcwZGRmNTFlMzFkN2IwY2ZjNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1/3ouLmPDUfzBVuKODoQA8BsVSs
J06Cojm8Inrrx+DxM87gcLf0/Gh3GckJbqho6GmBM1D8SiOZYtvGOT+G6ZsPbvlw
+aRMtn+WgALaQMDeVbt8YDckfPr1Xp5WPjCwJuEKBuKRZDEYwzoFOOaSIjDf1zsf
rLTkCd/OQDsPkigcijYRkcw9U8KGC/evMx/8SODHFjLB1dJMHR1UbQ6CI0tBzyZ9
+dO4QC+mWjgahaqJQx+xjBPCkGIVvx6KAMPCK5u90dlUZo+DWK0W1XiLFbplqIsA
WajAixwG5fVPoQC46fOARGa7OhiQcbBqUd8ylVTNyISwUiHJX1QrUrT6awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy99izIWWSdwmxw3fUeMdewz8d8MB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMcL6/jD
/fYhNFUGWQOC+v1EpV9aYj6m7zepnMAEXaF+mHceXNctU3IPXbGrH6ovZ60w5r9a
3tjqFYfOiqnpQ2Yf7QlridgJJXFLzM84FLAojPM4t0f2BSUOmh9+OukRp324D/CU
tuOoTzb0HIsNbOiiCBj0ezyQt0K8sW9yc8Shviyd9xBQpcJY2iDQG9qB4GuvHNGT
MSgfTirKJcRwnJqnAW4aphUFNci+E5XnrRWO7rPVoTnrEeBu5pqdV8yvyPoo0Xj7
IjZlvl3/v9vnvkVJarzNEGabS9a7hbu9VqD7RNHzG+FPnrmHw9dA5BF+TQ+PNkwM
S/V7slYLrgECYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:42 2026 by rpki-client