Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: JmtH05uxjLEKImSfKLdO4UICJhL5yGXS+KygyJl5oC4=
Subject key identifier: B9:F9:64:31:B8:3E:00:82:D0:6D:B6:72:EA:C4:24:C9:B6:8A:1B:B0
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019D25F1017A23D02CB6E3342C94BA907B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 10A0
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=)
2: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=)
3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: BJoRblpp7quKNrfQKAdJS+0Es0khXSlu9ZD0bM+8yng=)
4: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=)
5: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=)
6: o4O2QobbJXdc_ZoUPu3pY45RaXw.roa (hash: p5E90cgzMtxqooCgfC6YdKNzNDwIJawPDk8/BJmTVIk=)
7: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=)
8: uqa1tyxWj6cFaANZUIcESG1vArI.roa (hash: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=)
9: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:01:7a:23:d0:2c:b6:e3:34:2c:94:ba:90:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=b9f96431b83e0082d06db672eac424c9b68a1bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:b6:c3:8c:19:6f:09:0e:bb:19:8b:04:bc:
10:df:08:8c:fc:c5:78:6e:dd:61:c7:26:6e:c1:5b:
8d:99:2a:d2:a7:fe:f5:ee:8f:8c:63:40:8b:b7:eb:
47:d5:02:b0:09:77:f9:c5:02:8b:ed:57:3a:0b:db:
9d:fb:2e:bd:9f:0b:53:b6:2b:da:f9:42:55:f0:e4:
1a:08:57:97:a8:27:6e:95:33:a0:83:a9:ae:9b:f1:
eb:d7:cf:44:fc:14:27:ec:01:d6:6c:96:0c:49:a2:
08:d8:3e:38:6e:b7:a0:fb:aa:cd:2b:1e:d6:d2:df:
31:c5:31:7c:18:4d:0e:6c:49:5b:4f:bf:47:1d:7e:
9b:ef:3a:28:7c:36:dd:a6:b4:64:e4:38:18:31:e9:
9a:a5:d9:e2:44:c4:ac:89:bc:cf:fc:f2:73:f6:e0:
c4:9c:b9:d1:8f:86:12:42:14:9d:1e:d9:34:43:53:
7f:f3:40:a7:71:cc:b3:cd:c8:aa:f0:2b:ae:45:3c:
81:73:8f:0c:15:44:34:f4:e4:4c:a3:54:bb:bd:18:
83:c2:fe:59:24:c4:27:cf:b6:96:29:c4:54:f1:42:
2e:da:47:0a:ab:3b:95:fa:a8:45:e5:68:41:9d:62:
eb:b9:60:ce:8c:cc:df:f6:f0:84:3c:f3:cb:d6:7e:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:64:31:B8:3E:00:82:D0:6D:B6:72:EA:C4:24:C9:B6:8A:1B:B0
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:28:09:cf:83:0c:c2:b2:18:57:cf:ed:ba:4b:6f:f0:df:
da:b1:54:57:bf:03:9d:29:35:ef:4b:1b:60:87:62:f9:ab:fd:
6e:17:f7:e9:90:31:e6:30:de:44:46:2c:d9:a3:3f:5c:7e:11:
7e:42:f0:57:bb:41:74:a1:de:8d:81:fa:b0:8b:c9:ab:d9:3e:
3c:89:fd:95:e4:51:95:07:df:13:a6:c4:0d:0c:22:ea:96:78:
02:b6:66:0f:61:1d:af:6f:f3:5a:35:f4:c3:43:14:f7:86:3c:
9a:f0:45:e5:5a:83:55:64:1f:2e:a0:48:51:d2:0f:87:8f:f6:
2d:78:68:72:7d:53:09:f7:c3:b1:99:44:ac:81:99:b5:9b:68:
0e:7f:03:fc:e0:a6:de:65:3a:5f:5f:a7:d7:77:b7:a1:5f:5b:
39:e4:76:ef:df:e6:9e:1d:e6:3e:5c:c1:e5:b9:cf:b9:1a:ec:
db:f4:e2:f2:a3:24:f0:d9:a9:1f:83:02:f7:67:c9:8a:f1:84:
51:8c:7d:9d:10:e4:aa:2c:82:4e:a0:62:b3:c7:1c:b4:31:bd:
8b:8d:14:11:89:10:66:8a:fc:82:73:48:2b:35:cc:81:28:29:
9f:e8:aa:71:48:49:96:f6:1a:39:34:50:3d:b3:99:da:a6:44:
8a:d9:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:13 2026 by rpki-client