Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: O4gbZ4qHoBecKVB6JbmumRK10EP7V1nb24si4hEIRp8=
Subject key identifier: CC:C4:7C:B8:BE:68:90:1C:F9:12:E6:6C:CA:D6:E0:0E:8B:97:5D:31
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 01A0DA291F370DE85D3904CD759322069047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: 02FA
Signing time: Fri 25 Sep 2026 20:02:03 +0000
Manifest this update: Fri 25 Sep 2026 20:02:03 +0000
Manifest next update: Sat 26 Sep 2026 20:02:03 +0000
Files and hashes: 1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: uLIWt6BuFrlPy+ueJbr8v+QGsvOVw6/l2cLaczVDynI=)
2: awws4Zg8dGTfI3KzZwB4bIm-Nto.asa (hash: DmofOOMoiDHXeSleMk3EA3S9L45l9Z1SDUpGjlromqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:1f:37:0d:e8:5d:39:04:cd:75:93:22:06:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Sep 25 20:02:03 2026 GMT
Not After : Sep 26 20:02:03 2026 GMT
Subject: CN=ccc47cb8be68901cf912e66ccad6e00e8b975d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:28:46:cb:c2:a7:64:be:a9:0d:4b:af:a4:
6e:e7:60:24:42:7a:3a:21:36:65:3d:d5:f6:2d:28:
ea:45:92:8a:a4:dc:2c:0e:d0:e5:ba:67:e2:7c:a7:
75:0f:60:8e:6d:32:8c:1e:99:0c:46:fc:d9:6f:30:
33:a2:04:61:f1:69:88:40:48:17:d6:6d:3f:ee:03:
ee:11:ee:df:f1:42:db:f1:88:c8:e4:f0:5f:2f:6a:
eb:80:c1:96:37:e8:66:83:60:c7:6c:bf:73:9b:65:
43:ee:f8:6b:36:14:64:f0:14:83:e0:d7:5b:06:32:
c0:a6:93:4e:05:8e:38:88:cd:65:37:96:0a:d7:ef:
98:bc:c3:6e:05:e3:4e:4b:8c:68:24:87:95:fe:58:
26:25:fe:27:52:7c:c6:9f:43:83:ec:27:17:a4:f7:
ef:e8:e3:6b:a0:d6:35:23:4f:d4:4c:1d:54:6c:9a:
0e:30:3e:13:cb:5e:db:1b:8b:98:6e:01:29:7f:33:
8a:4f:32:78:f5:ed:cb:3c:35:a9:9d:43:f9:12:26:
20:8c:66:95:fb:cc:8b:81:d7:7d:60:bb:cc:15:e5:
97:43:1f:83:6f:af:00:54:f3:91:6d:c3:f0:c1:96:
36:d9:5e:5d:0b:0a:13:90:07:ed:91:02:94:bf:75:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:7C:B8:BE:68:90:1C:F9:12:E6:6C:CA:D6:E0:0E:8B:97:5D:31
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8c:50:e3:89:05:ba:49:65:9e:42:e9:64:6d:79:75:79:c2:
1c:80:b0:5b:c0:00:9c:1c:68:ef:06:3f:c6:2e:2f:7d:4c:4c:
6d:7d:df:35:5d:38:5c:ea:5a:0b:2d:e5:f1:7e:35:ed:5b:72:
19:b1:36:de:3d:0d:c4:97:cc:59:09:0e:e0:91:6c:60:47:7f:
49:33:c1:78:59:58:b6:43:84:4f:f5:a6:40:1d:aa:a1:cc:3d:
e5:b1:b2:30:3b:82:79:d4:36:dd:8a:bd:90:de:29:40:0a:49:
3f:57:5e:c9:56:18:91:3f:50:5a:d2:52:09:3f:65:9f:ca:a7:
67:9b:41:6a:cd:76:2d:61:38:c7:b5:90:65:ae:c2:d1:f5:87:
4b:a4:69:5d:81:21:8e:2f:ee:d4:fe:76:a7:d8:18:8c:8b:4f:
8a:8e:14:4e:a1:a4:e5:3c:86:f6:fc:db:cd:61:d1:8f:0f:8e:
ce:bd:0c:d6:b3:a7:a5:1b:c9:a3:57:7f:99:ba:fb:cd:67:ae:
f8:2a:90:31:ce:aa:8a:c9:56:9c:3e:86:28:74:2f:65:f6:bd:
3c:f6:1f:f2:35:b2:d1:32:1d:03:23:68:03:4b:f4:a6:0f:2a:
3d:cf:cc:36:d1:14:81:e3:d9:c0:1f:c2:7f:e2:f5:1d:12:24:
01:1c:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:36:28 2026 by rpki-client