Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: gHIYDnD0rYYk0hFC8EcGdVZa3g22a44muq2ujmXhxWg=
Subject key identifier: C2:A2:02:52:C3:7E:83:B8:4B:6D:30:09:06:4B:FA:AD:99:F0:7E:EC
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019E1FEC4724DC7BD6935C43D1DCE3A7A183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0836
Signing time: Wed 13 May 2026 06:00:38 +0000
Manifest this update: Wed 13 May 2026 06:00:38 +0000
Manifest next update: Thu 14 May 2026 06:00:38 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
3: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: 49WVlbxbrz41DUqx/SqKw+o8bhXEaWdkLGe08dR1ijs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:47:24:dc:7b:d6:93:5c:43:d1:dc:e3:a7:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: May 13 06:00:38 2026 GMT
Not After : May 14 06:00:38 2026 GMT
Subject: CN=c2a20252c37e83b84b6d3009064bfaad99f07eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:91:72:ac:40:74:91:21:fe:21:c6:7c:7d:
ba:e1:72:84:f5:b6:b0:d6:8b:12:cc:2a:cb:f2:a9:
65:0a:b9:ae:1d:7a:98:9e:f9:3d:f5:bd:ec:8f:28:
f1:08:d0:1a:6d:6a:cd:d8:89:3b:3a:22:27:dd:95:
ce:2b:b4:a4:98:12:19:46:76:0f:15:c3:79:ab:f8:
c2:be:bd:42:cb:d1:74:bd:60:c0:c3:68:02:86:69:
73:b3:86:f7:6a:cb:9f:2d:be:39:9b:0c:1b:62:e6:
5b:2e:83:79:22:6d:ec:6a:16:e9:9c:85:40:e3:60:
b3:b5:34:9c:2e:86:9a:ba:f7:07:c2:0c:4f:32:c1:
38:4a:d0:de:01:ba:e8:ee:b7:51:ac:5e:05:64:9a:
10:0d:42:d0:cb:e2:e1:81:08:cd:51:56:37:89:21:
ca:80:a5:7a:b9:60:ac:33:99:e8:54:3c:e3:6f:7f:
6c:0f:56:e5:13:88:36:b4:4d:63:9d:25:20:90:9c:
b1:3f:1e:be:0b:d5:cd:46:fd:01:ce:51:c2:d5:f2:
12:fa:a0:1b:67:4e:9d:1d:62:90:d1:0e:a6:6a:b1:
e8:12:73:85:73:fa:35:6e:5a:b8:d3:e9:bc:f1:68:
b0:c5:fc:45:5e:ad:ee:df:07:93:e4:ef:c5:ea:20:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:02:52:C3:7E:83:B8:4B:6D:30:09:06:4B:FA:AD:99:F0:7E:EC
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ee:93:e9:79:c5:9c:fb:37:a9:6f:a4:ee:55:c8:fb:2e:ca:
ca:6d:84:08:25:de:a1:c7:6d:4b:6b:1a:c7:36:d9:e3:f9:2d:
23:03:65:1d:de:de:d6:22:d0:0c:9e:ce:ca:b3:fc:a5:d4:f1:
3e:df:44:f7:49:f9:34:3b:78:a9:fb:24:c6:0c:9d:7e:1d:2c:
a2:18:71:74:93:2e:45:31:7c:33:a6:14:71:42:5d:bf:09:87:
f8:f8:22:75:ff:e3:bc:fd:88:4e:af:d7:e2:7c:c5:4c:8e:77:
67:19:c6:59:dc:26:81:7c:5c:18:9f:01:54:15:56:84:8e:fd:
4b:3a:14:9d:ab:f3:2d:28:44:5d:1e:89:c0:01:c5:62:e9:0d:
09:e2:76:e3:1c:e3:2a:36:92:25:a0:fc:90:3d:80:cc:fb:e1:
57:3d:6b:ce:a9:33:e6:71:1d:87:cc:4b:1c:c2:16:7e:f4:36:
e5:87:d9:bc:bf:ed:7a:71:a1:b0:26:07:ba:63:e4:f0:74:9c:
7b:60:21:41:3b:1e:a3:f6:bd:a8:b8:21:9a:75:52:58:5a:05:
67:94:71:5a:31:63:85:fb:6a:d2:53:62:68:86:84:17:21:a6:
cf:7a:91:fc:a6:ee:0e:ef:d2:cb:ab:ea:de:9d:d7:37:92:71:
37:30:56:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7Eck3HvWk1xD0dzjp6GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjYwNTEzMDYwMDM4WhcNMjYwNTE0MDYwMDM4WjAzMTEwLwYDVQQD
EyhjMmEyMDI1MmMzN2U4M2I4NGI2ZDMwMDkwNjRiZmFhZDk5ZjA3ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6iRcqxAdJEh/iHGfH264XKE9baw
1osSzCrL8qllCrmuHXqYnvk99b3sjyjxCNAabWrN2Ik7OiIn3ZXOK7SkmBIZRnYP
FcN5q/jCvr1Cy9F0vWDAw2gChmlzs4b3asufLb45mwwbYuZbLoN5Im3sahbpnIVA
42CztTScLoaauvcHwgxPMsE4StDeAbro7rdRrF4FZJoQDULQy+LhgQjNUVY3iSHK
gKV6uWCsM5noVDzjb39sD1blE4g2tE1jnSUgkJyxPx6+C9XNRv0BzlHC1fIS+qAb
Z06dHWKQ0Q6marHoEnOFc/o1blq40+m88WiwxfxFXq3u3weT5O/F6iC85wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKiAlLDfoO4S20wCQZL+q2Z8H7sMB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie6T6XnF
nPs3qW+k7lXI+y7Kym2ECCXeocdtS2saxzbZ4/ktIwNlHd7e1iLQDJ7OyrP8pdTx
Pt9E90n5NDt4qfskxgydfh0sohhxdJMuRTF8M6YUcUJdvwmH+Pgidf/jvP2ITq/X
4nzFTI53ZxnGWdwmgXxcGJ8BVBVWhI79SzoUnavzLShEXR6JwAHFYukNCeJ24xzj
KjaSJaD8kD2AzPvhVz1rzqkz5nEdh8xLHMIWfvQ25YfZvL/tenGhsCYHumPk8HSc
e2AhQTseo/a9qLghmnVSWFoFZ5RxWjFjhftq0lNiaIaEFyGmz3qR/KbuDu/Sy6vq
3p3XN5JxNzBWFw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:09:51 2026 by rpki-client