Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: 5bwlBhinKpYgvCoh/Cm0ZZQtr/YP0pMMkp8z9thcwmM=
Subject key identifier: 87:EE:EE:33:D0:AC:F8:80:37:26:C4:DF:87:E0:FC:6A:D1:71:D7:0E
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 019D3866219612F9905870041CD99F48BCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 05FA
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: CrCfGOx8NjkwiS2YJ0RN8YJ2p3Myzt54Ad06czwShUc=)
2: g_5AMoFOj5a0mYwjqCP6X5Eogc0.roa (hash: wHZf0niCFW9Zgd1CxrKbTTjY8FLkaeRzaQjI2AnGqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:96:12:f9:90:58:70:04:1c:d9:9f:48:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=87eeee33d0acf8803726c4df87e0fc6ad171d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:b3:d0:7f:1d:1b:8c:e1:21:7a:4c:b6:4c:
e8:be:ee:54:aa:4b:db:dd:dc:c9:cf:bc:ca:bf:f2:
af:32:1f:29:dd:09:93:c4:b3:93:b4:3a:c2:ac:b9:
7f:23:b2:3d:3a:d7:63:1c:7d:77:2b:32:25:99:a8:
e5:e6:ed:f5:0e:14:77:e7:62:1e:70:2f:32:65:6a:
59:18:bb:8f:c1:e1:75:79:73:52:c5:de:16:96:b7:
2f:dc:77:f0:34:a7:bd:06:30:ac:d3:51:93:0d:70:
97:4d:ce:2b:4d:3e:11:28:61:0b:56:b9:37:b9:dc:
41:db:76:d1:cb:78:f0:2b:83:84:30:c0:c9:79:ce:
6f:dc:05:45:74:0f:0e:10:c2:91:dc:aa:85:f4:de:
b4:94:8b:bf:d3:c1:88:6c:fe:77:95:bf:af:bb:2e:
9d:da:35:af:40:aa:74:09:4e:45:08:c6:ab:aa:d6:
11:6c:6f:57:a6:c2:14:56:20:38:49:10:c8:ac:43:
11:c1:86:f8:93:55:d8:27:db:38:8a:7b:f5:4b:13:
2d:f3:c2:af:72:40:fa:de:7d:ed:74:54:31:9c:34:
ac:83:48:89:c5:c1:38:1d:39:7b:08:29:a9:70:54:
be:0b:0e:c8:15:e5:99:08:9d:f2:f7:3a:84:1a:dc:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:EE:33:D0:AC:F8:80:37:26:C4:DF:87:E0:FC:6A:D1:71:D7:0E
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b1:d7:f2:e8:0b:e7:89:41:40:eb:56:8b:1c:8a:16:48:63:
d2:74:79:1c:88:94:4b:e9:4f:69:d2:bf:74:e4:72:b7:a1:25:
b1:dd:28:85:60:88:a3:53:39:47:1c:82:10:30:e6:39:03:2a:
53:94:51:f6:ae:58:21:b6:56:95:9d:7e:86:20:36:dd:7c:6a:
a6:c5:11:48:27:1e:5e:76:83:15:8e:e5:1c:4f:ae:14:cb:4e:
8a:fe:b4:3b:53:8b:e6:8c:8b:09:4b:05:bd:81:90:60:5f:45:
8d:13:89:af:49:f9:f0:15:3a:00:b4:0c:e8:11:16:17:77:6f:
08:23:80:46:7a:69:b8:ca:0f:32:b7:7e:55:47:da:f5:55:66:
f6:a2:b6:f0:e2:40:39:72:59:9e:a7:27:e8:41:b9:23:d0:e3:
b0:50:3c:ea:fa:08:6a:5d:9d:f9:1f:34:82:05:4b:75:01:48:
ee:a6:33:ad:3d:fe:5c:5a:c2:de:2c:5f:33:fc:c0:b7:59:9a:
d3:8d:82:22:e5:a8:be:2e:ed:a4:5f:78:91:f5:d4:b0:51:0f:
f2:65:0a:a7:5c:0d:52:8d:48:bb:7f:fb:0b:a8:2f:96:0c:48:
b6:8c:ac:1e:c4:45:45:28:8d:58:66:21:92:5a:40:d9:54:4a:
12:2f:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:23 2026 by rpki-client