Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: pIajWeJjAjJzGg2OjuxGqUijiA4Ye/kbakkLvXX/gAE=
Subject key identifier: B2:64:DD:A8:88:BE:1E:28:58:2A:A7:E0:F6:2C:2D:7B:37:1B:1D:F8
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 01A134111D2A99B9043E8FED1213562D7AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0F1A
Signing time: Tue 13 Oct 2026 07:01:39 +0000
Manifest this update: Tue 13 Oct 2026 07:01:39 +0000
Manifest next update: Wed 14 Oct 2026 07:01:39 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: t0yHBYAHPTbKV/Yjjjwz1Ph0ZwibWduZa+9DIKkZ1jM=)
2: rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa (hash: i5/iyo2rt1F0mdV5nHS/+ieV6kBSf0qdaLWU+lHJUz0=)
3: sUdV13N_3SZTo-Y2HxDJ2JHQUbc.asa (hash: JJciRc7IP4JGmv4ypRYcIbGSjCbG/DkgLQ/P1JAxCHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:11:1d:2a:99:b9:04:3e:8f:ed:12:13:56:2d:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Oct 13 07:01:39 2026 GMT
Not After : Oct 14 07:01:39 2026 GMT
Subject: CN=b264dda888be1e28582aa7e0f62c2d7b371b1df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:10:48:29:6f:22:70:1c:0f:56:47:df:69:
c9:f7:c7:9e:a7:47:d4:a5:ce:2d:48:d3:ab:8a:1a:
3b:d3:c6:a1:79:c7:d5:d7:91:58:82:a5:37:55:06:
69:21:7f:23:88:c2:6d:ff:c8:66:06:c3:5f:36:32:
db:9f:94:8b:e4:68:03:bd:12:74:54:65:de:46:44:
7a:b7:cc:b5:f8:1e:1f:67:e0:66:13:1f:30:19:ab:
a8:dd:e6:5b:c6:75:8c:85:12:71:90:6d:2e:32:ab:
39:c9:ad:cc:77:3e:18:a0:b3:07:32:8b:55:0b:14:
dd:36:2c:23:d3:fa:1d:5f:3b:1e:1b:f4:fa:a5:85:
e8:90:40:08:1f:0a:d5:95:8f:73:16:9b:d6:50:7a:
c0:e3:bc:37:26:51:0d:0f:04:53:e4:92:2e:55:05:
f4:a0:22:99:e1:aa:27:59:1a:02:c1:a5:9f:83:a3:
dc:02:41:67:77:e3:d5:7f:e7:81:fd:8a:b0:b8:9c:
ae:99:c6:d1:83:b9:1b:b1:24:2a:2b:df:37:5c:61:
96:c3:e3:20:82:6d:63:7c:ca:25:25:60:60:c1:7c:
9e:e8:f4:2c:d8:94:ca:53:de:c7:12:32:91:ec:41:
89:fb:41:89:3e:dd:20:46:22:6e:9e:93:52:57:5f:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:DD:A8:88:BE:1E:28:58:2A:A7:E0:F6:2C:2D:7B:37:1B:1D:F8
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:cc:0f:93:66:a2:47:ee:3b:67:b3:ae:fd:09:c2:b1:f2:
4f:69:37:b5:af:08:84:52:57:2e:6d:aa:25:45:6c:76:8f:1a:
f9:3f:b0:fe:bd:dc:ae:6b:2a:90:07:dd:2a:bb:11:f7:51:fe:
d6:19:08:50:98:6b:ff:0b:6d:b5:31:ea:a8:cc:ae:f2:d2:9a:
43:9c:80:bf:27:0c:22:51:b0:d3:2c:e6:2f:23:5a:21:c3:31:
be:5c:15:b5:ff:10:34:08:62:f8:a7:86:3b:a1:d7:35:31:0e:
1f:df:92:d3:5e:db:a1:8e:66:e2:46:00:f9:20:01:a2:8a:76:
4f:cd:2c:3e:8f:98:4d:b3:c7:1d:41:3d:24:c1:cb:ea:1c:b7:
43:d2:ec:91:2e:fb:62:7b:4e:9d:92:1a:97:fd:82:9e:da:a2:
7f:3c:69:b5:30:5e:36:3d:d0:44:c4:cc:f0:2e:6f:1e:23:b0:
6f:3d:d8:4e:8a:ed:37:1e:81:ab:ed:51:90:9f:5e:91:de:d1:
59:46:2b:ad:fd:f3:99:95:d5:36:e5:6b:7a:93:f9:97:39:c2:
31:e5:28:fa:f7:13:b7:e4:55:99:96:07:11:f0:9a:6e:9e:68:
4a:7d:e9:d1:e5:a4:bf:80:c2:aa:ed:36:a8:ef:aa:70:2d:5d:
06:72:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:49:54 2026 by rpki-client