Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: 0PpMvmbYViVaI2XxPn2u7sSBiPY9ZaVlHyMD6VzENuA=
Subject key identifier: 43:C3:FF:E4:5F:58:26:06:A5:FA:64:8E:DD:28:11:51:32:CE:3E:D3
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01A1740248240A5CDEB2EC3E26B824E33D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 09F0
Signing time: Sun 25 Oct 2026 17:01:08 +0000
Manifest this update: Sun 25 Oct 2026 17:01:08 +0000
Manifest next update: Mon 26 Oct 2026 17:01:08 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: hOYD6w43kGIHyTVibTNp2YGe5mhV3GUuXzLjiQic8ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:48:24:0a:5c:de:b2:ec:3e:26:b8:24:e3:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Oct 25 17:01:08 2026 GMT
Not After : Oct 26 17:01:08 2026 GMT
Subject: CN=43c3ffe45f582606a5fa648edd28115132ce3ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:db:12:75:d9:1b:2e:6a:c2:b9:a4:85:4f:
70:72:82:b3:46:c3:42:69:33:fd:f5:2d:cb:e0:aa:
9d:31:aa:80:ba:40:70:a2:5c:b5:e1:60:bd:8e:12:
0b:8a:91:66:3d:3c:cc:6d:2c:f7:9f:cf:58:0b:18:
0b:38:9a:aa:69:9f:5c:73:3d:0c:52:62:09:29:c0:
73:c6:a3:6b:9c:12:93:37:c1:ad:e3:5a:ea:78:5a:
e4:87:cd:63:2b:d9:8c:74:8c:49:0f:fc:07:79:64:
8f:d4:b0:bf:c9:99:4d:4f:c0:70:7f:87:57:fb:f2:
77:32:94:30:c4:39:ff:1f:4d:a3:2d:4f:05:e6:c0:
bc:e0:ce:fc:4c:fc:2f:2c:ef:10:3e:5a:28:4f:49:
e7:92:a2:69:17:d5:90:1d:37:d9:5a:4e:4e:c5:34:
2d:61:14:bf:47:02:1a:86:7b:40:69:37:77:97:92:
02:13:19:35:87:c3:cb:a1:b7:19:9a:64:9e:1e:33:
fa:86:9d:27:c6:80:84:61:48:b6:24:10:3f:9d:a4:
2f:7a:c3:6d:75:be:a9:11:22:dc:c2:01:f7:c0:0a:
f7:b3:13:de:87:01:70:7e:51:bf:a9:7f:9f:6f:59:
9b:3e:fb:4e:48:0e:06:ba:6c:68:8b:c8:18:c7:87:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:FF:E4:5F:58:26:06:A5:FA:64:8E:DD:28:11:51:32:CE:3E:D3
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:de:02:49:74:24:c7:72:2c:b8:a7:6f:f5:66:ed:1f:3d:
a0:98:4f:15:02:9c:9d:49:0f:89:0a:24:bf:48:00:fc:7b:29:
7b:38:b1:64:65:e9:66:b5:35:5f:1b:75:73:50:88:2b:58:1b:
db:5d:22:b9:a4:de:ce:49:45:92:f2:47:e8:9d:5e:b9:86:70:
88:fa:78:91:a9:ea:1a:81:d4:e7:03:c4:58:00:d8:d6:47:91:
3c:72:92:14:df:c5:fd:91:42:22:c5:94:55:12:49:ff:ca:5b:
c9:38:b1:29:6d:1d:70:7e:d3:69:8d:47:39:7f:03:6b:69:69:
02:f1:e2:a2:81:00:a2:67:4d:b0:6a:fe:50:14:d3:1e:f1:85:
cd:89:0f:28:18:65:32:93:17:65:3c:50:b1:59:51:05:b6:eb:
55:c0:1b:b3:28:3d:11:aa:01:44:6c:c9:41:9f:12:23:8f:e9:
9b:f2:d9:c6:70:ce:ce:68:04:09:40:a7:31:ad:46:cd:91:54:
15:5b:0b:38:53:f6:a1:2d:02:eb:62:e9:9d:0e:b8:cd:f7:e4:
6f:74:49:10:d8:0a:0d:3a:58:e3:60:69:c2:b9:94:6a:5b:0f:
3d:3b:09:d7:0f:01:92:67:c0:58:35:d7:1b:38:5c:f4:c5:30:
0b:48:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:45:38 2026 by rpki-client