Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: Ypig0LQO3mjNi7ospiifWY/e9ZZ922BZIudnBCgEgkE=
Subject key identifier: 28:81:8D:E0:81:85:CE:6B:3C:C1:AE:A9:9A:72:F7:82:AD:63:A8:A5
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01A1702578494F39CE5B3292E06B47413C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 09EE
Signing time: Sat 24 Oct 2026 23:01:06 +0000
Manifest this update: Sat 24 Oct 2026 23:01:06 +0000
Manifest next update: Sun 25 Oct 2026 23:01:06 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: FrDOElsqW5mQ4Pe96r/CVBMBoMKEpGe7cFKVvOhwGk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:25:78:49:4f:39:ce:5b:32:92:e0:6b:47:41:3c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Oct 24 23:01:06 2026 GMT
Not After : Oct 25 23:01:06 2026 GMT
Subject: CN=28818de08185ce6b3cc1aea99a72f782ad63a8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:53:85:06:a1:c4:80:48:e5:b0:2e:4c:a7:
31:4d:1c:3d:4e:17:d8:a6:c6:f7:bf:d0:58:71:de:
ae:48:55:ee:77:e6:e1:b4:da:f5:d4:e3:04:ec:0c:
0f:a0:5e:8c:71:cb:77:35:f9:c2:7d:ee:57:47:98:
3d:1e:3e:b2:e2:df:2b:88:d8:6b:33:57:90:f4:00:
79:87:ab:28:49:40:74:52:1c:6d:7a:84:a8:cb:d9:
bf:30:55:4c:16:ec:6c:0b:c8:25:91:45:20:8f:10:
4b:b1:52:70:ec:d6:58:ee:8b:8a:37:90:68:b8:8b:
07:4f:20:23:19:4f:28:fe:e0:ba:47:2a:67:8b:8e:
21:23:2d:25:56:ad:16:05:a8:c2:a9:ff:a7:10:f9:
d3:7b:3c:54:b5:a3:4c:68:c1:c2:d1:a3:5d:8e:41:
ff:e6:ed:98:81:ff:e1:82:14:7f:29:3a:6f:e3:bc:
61:13:41:95:5d:ce:25:12:23:16:83:b3:22:ef:20:
76:27:e1:1c:07:9a:66:63:32:3c:c3:8b:9c:14:02:
98:1b:f8:ad:77:84:e9:97:90:8c:3e:76:df:4d:c3:
2f:bf:91:bf:0c:69:53:2d:dc:58:eb:c6:1c:58:22:
32:16:c2:c2:a5:b1:f5:8b:68:da:b5:69:ae:c7:74:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:8D:E0:81:85:CE:6B:3C:C1:AE:A9:9A:72:F7:82:AD:63:A8:A5
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:0e:db:72:3d:d2:97:1e:ac:4c:ec:2f:4b:b8:aa:c3:9c:
6a:fa:06:f1:03:2e:2e:b9:3f:57:f7:ec:83:27:99:10:1a:5a:
c5:e5:f7:21:3e:01:53:9e:35:4b:d5:29:48:7a:13:d3:67:c3:
0a:38:65:af:e7:bd:dd:24:c3:eb:34:cf:0c:cb:19:14:75:0a:
94:bd:4a:4e:80:35:c4:c5:50:73:87:2e:7e:81:cb:ad:1d:20:
63:a3:f7:1f:3b:48:9b:79:62:ff:17:f9:33:cd:9f:aa:14:5a:
a4:27:4e:e0:a7:e7:97:55:87:27:b3:71:ec:17:d0:8d:1d:6b:
4f:52:45:6d:01:fd:af:21:d9:ca:48:c9:4a:cf:b0:9a:b9:81:
cb:27:b7:e2:ef:ac:99:9b:f3:db:ee:ec:7e:38:46:59:bb:0f:
2d:f6:44:54:b4:8e:94:ab:bc:07:8f:b6:6d:39:2d:b1:b0:89:
ab:f5:54:a0:56:7b:fa:db:14:fd:f2:13:92:bb:97:ea:e3:29:
e0:ae:d0:30:5e:6f:96:74:47:9f:0f:0f:64:d0:26:bd:a9:8b:
ea:7e:61:5b:53:a0:8b:ca:e5:a5:8b:c3:14:4b:48:2a:83:52:
dc:bd:a2:89:d4:94:bd:f3:f9:1a:37:94:36:2a:93:25:8b:81:
5a:23:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:23 2026 by rpki-client