Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: 5hEgKKlDbE7CqSjmPv6dXdzpGE05HUj26djue3k48K8=
Subject key identifier: 89:6E:C4:4D:D0:17:5A:52:27:B3:CD:3F:AA:B8:A1:B2:03:0C:DE:AA
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019DCF3E5D05FC202B97A1922FDC24762E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 174E
Signing time: Mon 27 Apr 2026 14:01:03 +0000
Manifest this update: Mon 27 Apr 2026 14:01:03 +0000
Manifest next update: Tue 28 Apr 2026 14:01:03 +0000
Files and hashes: 1: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (hash: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=)
2: CTOyFd7xxedt8gHWnQIE-RQ60pc.roa (hash: 6/Kpi6k8YzlzyuFB/7a9S47pkbxW1wbI017oLoOv9+w=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: AGTHQiLWztbLD8nKxz/3dbCFyP/mjinLG5TDBPMkcaI=)
4: h9Ez5VJGHgLgp09W_3gZe1Yk8LY.roa (hash: CP/8WBU1IT54jNR+qszhkfIQMh5/elXyL0h0IDRhoPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:5d:05:fc:20:2b:97:a1:92:2f:dc:24:76:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Apr 27 14:01:03 2026 GMT
Not After : Apr 28 14:01:03 2026 GMT
Subject: CN=896ec44dd0175a5227b3cd3faab8a1b2030cdeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:76:2d:81:d3:cc:f9:9e:86:53:5d:af:b9:
1d:4d:a2:59:b7:d8:2d:09:e6:d1:4a:3e:51:17:61:
17:f5:23:fd:e5:4d:60:11:ec:5d:d5:de:74:75:aa:
fb:bc:9d:ac:10:4b:94:dc:ff:c6:b3:c1:b9:7b:51:
54:2e:1f:4a:78:fb:91:a7:83:33:0d:98:9a:1d:dd:
79:e4:76:68:3a:0a:9d:2b:76:b7:de:5d:ab:06:07:
3f:b7:63:b8:c6:95:a9:a4:49:b1:05:be:7c:ea:82:
ab:8f:34:02:21:6c:9b:14:b3:6e:1d:d4:c4:5e:d9:
2d:f7:f9:c4:1d:0c:ac:43:39:32:92:d6:2f:4a:00:
69:92:15:cd:38:32:51:8f:cc:40:19:e4:0f:1f:62:
87:88:5d:4b:9f:44:d9:10:ba:ad:11:49:24:05:93:
5f:a4:82:0f:90:53:d1:b7:c5:0e:6d:cc:73:48:13:
4e:e2:85:82:02:f4:b7:b2:86:13:08:68:c4:df:2d:
30:ce:52:79:43:bc:33:b1:b2:62:b4:52:be:55:f2:
b0:7c:32:7f:ed:24:11:25:f1:b9:68:30:eb:40:8b:
a6:79:48:e1:29:84:de:89:45:47:2e:3e:25:ff:20:
ed:07:97:15:b2:a2:e1:a3:b1:4f:04:9f:09:c5:42:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:C4:4D:D0:17:5A:52:27:B3:CD:3F:AA:B8:A1:B2:03:0C:DE:AA
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f7:90:74:ae:e1:2a:79:8c:a2:bc:0d:f6:d7:94:aa:89:99:
c8:8e:f7:a9:da:b2:41:29:47:2d:82:6e:e8:0c:0e:94:be:8a:
6c:2c:37:20:1d:ae:c0:77:8e:65:94:4c:54:b7:ac:2f:d8:9f:
c0:70:ea:71:84:3f:3b:89:8d:e9:e6:73:ff:78:3c:28:ec:7c:
a6:7c:89:46:f4:b8:69:ff:aa:3c:f9:26:55:eb:8f:8b:ef:36:
70:07:b1:f1:51:50:07:0c:cd:81:3a:8d:48:56:7e:2f:b4:79:
0e:65:2d:cc:3e:c8:ef:0d:ff:2f:7e:2e:a1:6b:52:7e:dc:ed:
37:2d:8e:2e:28:1e:0c:00:99:7c:34:40:c5:d4:73:1f:9c:4d:
7d:71:5e:85:72:1c:5e:6e:9d:29:01:35:9f:df:4b:a7:92:1f:
06:52:5d:72:26:99:20:ce:9b:69:43:85:53:6f:f0:69:4d:43:
f1:c2:16:e5:48:68:fa:70:6b:ce:a7:3a:0d:6f:9a:f9:61:a9:
35:5d:8f:a6:97:43:44:b8:97:2e:7e:3f:2a:07:1b:36:3a:37:
1f:05:60:48:be:01:ed:c0:98:3a:50:ea:c2:7b:f0:b6:1b:f9:
d2:7d:ae:58:dd:52:31:da:85:4e:4e:4d:70:46:4b:ec:73:87:
fb:0d:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:35 2026 by rpki-client