Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: KuCCzOhD9a2El1qSf5hyzDsl3gYDmKIVQO7VXW+/fz4=
Subject key identifier: 64:F8:5A:AA:9C:3D:A3:5B:F5:15:8D:8A:FA:34:70:8F:5E:5F:15:31
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019D33E3AE8E2A55498C48D6794BC4AD30A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 07BB
Signing time: Sat 28 Mar 2026 10:00:52 +0000
Manifest this update: Sat 28 Mar 2026 10:00:52 +0000
Manifest next update: Sun 29 Mar 2026 10:00:52 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: ovYxBUcm4Cwef+Rvd6tExxDzbz8lKMuRcXtkzZdSfqE=)
3: X-IMHZO2Sd5gZEJtndneD0fWreY.roa (hash: bfcFN5Xio94TqA5R1A/qDWjqIpl0U94c2LxTtPv9KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:ae:8e:2a:55:49:8c:48:d6:79:4b:c4:ad:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Mar 28 10:00:52 2026 GMT
Not After : Mar 29 10:00:52 2026 GMT
Subject: CN=64f85aaa9c3da35bf5158d8afa34708f5e5f1531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:4e:d7:73:78:7a:77:71:3c:e5:85:a5:48:
ef:c9:09:e3:31:ea:f4:d8:af:33:7a:75:4d:5d:b3:
d6:59:a4:df:ef:57:f9:4e:b5:be:5d:7b:9d:35:61:
d2:cd:38:af:4b:81:db:df:da:d9:93:29:34:06:d1:
84:e9:cf:40:d3:78:a5:f8:fd:51:e3:2a:29:ba:8d:
c5:b3:f7:66:90:3e:7d:6a:13:4e:76:dd:4a:3b:85:
86:8d:9b:35:a6:a2:be:83:e9:6a:d8:bb:19:df:0c:
e7:d3:da:98:fe:f1:1e:a2:63:76:d3:ab:3a:dc:16:
dd:97:c8:27:37:89:de:0c:f7:3c:fd:c4:ad:52:66:
c5:f4:6b:9c:6b:6b:42:09:69:27:43:b0:cb:ac:d3:
63:73:23:4c:14:cf:9d:ee:2d:2a:33:89:45:f4:ff:
ee:62:f7:c6:3e:04:50:e8:9e:62:d7:23:30:12:c0:
13:fb:b6:73:be:31:48:9b:b6:33:32:21:03:ce:1a:
ff:4e:2a:2d:76:22:ec:25:5a:93:e4:dc:fb:78:7d:
87:7e:e2:93:b4:79:49:1d:9a:8e:e0:7a:1f:6c:53:
c8:f9:9d:0d:aa:95:e5:29:78:d5:d8:64:ad:03:71:
d2:a9:37:85:2d:18:11:cc:a6:37:68:15:f4:79:0d:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:5A:AA:9C:3D:A3:5B:F5:15:8D:8A:FA:34:70:8F:5E:5F:15:31
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:50:2b:31:a9:27:8f:01:59:ad:8e:47:f3:94:57:d5:44:ef:
14:b1:67:4a:b5:d4:9e:c0:7e:91:59:9e:a9:6a:ee:e1:ed:46:
a1:73:f6:86:97:05:7b:28:f6:06:be:dd:1e:4c:c4:97:7a:c5:
6f:c3:24:4b:b6:5d:f2:1c:02:fe:55:f9:76:8a:1e:ac:b8:50:
8a:39:ac:a0:cd:14:bf:b9:df:03:58:3d:3e:da:e0:65:7b:b2:
8c:ff:5f:01:6d:70:6f:cb:33:bb:7e:1b:2f:39:60:7d:4c:5f:
33:d6:08:74:39:55:a8:b7:f6:c6:b9:63:dd:28:6c:d2:f8:31:
20:28:da:5c:2e:9c:6f:05:0f:c0:0f:08:d1:31:ea:4b:7f:a3:
12:d1:80:f0:a9:d5:c9:68:eb:bb:4b:f9:ad:60:7e:09:c2:5e:
80:5c:c8:63:a5:44:f2:c8:16:1e:4a:c9:d0:44:43:69:f1:c9:
1c:4a:0d:d0:97:bb:96:d3:df:6c:42:4e:5a:6d:ec:23:5a:6b:
0c:bd:c3:77:76:61:1b:0f:02:07:ab:3a:7f:e7:ac:3d:a2:28:
de:16:7e:19:64:87:36:f8:f6:ca:e7:45:52:07:37:82:1f:99:
51:09:d7:eb:29:9f:94:a3:bb:ef:c3:c5:d8:64:48:d7:f9:c6:
9a:66:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:02 2026 by rpki-client