Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: z7jUqF3ooi+Y8dtRyv35A8qgKUxKqWiz7P4eYQdcAzQ=
Subject key identifier: 87:C9:D2:40:DF:F2:4C:F9:0E:E9:E2:23:28:E5:D3:FC:F5:A0:57:10
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01A10DA79E05E64BE7BF6D94E1D457DC83FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 18FC
Signing time: Mon 05 Oct 2026 20:00:51 +0000
Manifest this update: Mon 05 Oct 2026 20:00:51 +0000
Manifest next update: Tue 06 Oct 2026 20:00:51 +0000
Files and hashes: 1: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (hash: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=)
2: CTOyFd7xxedt8gHWnQIE-RQ60pc.roa (hash: 6/Kpi6k8YzlzyuFB/7a9S47pkbxW1wbI017oLoOv9+w=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: IlTtz5F66bKOYoh8EwSlmIR+Mj23cEhZ+cT5GvAKv+s=)
4: h9Ez5VJGHgLgp09W_3gZe1Yk8LY.roa (hash: CP/8WBU1IT54jNR+qszhkfIQMh5/elXyL0h0IDRhoPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a7:9e:05:e6:4b:e7:bf:6d:94:e1:d4:57:dc:83:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Oct 5 20:00:51 2026 GMT
Not After : Oct 6 20:00:51 2026 GMT
Subject: CN=87c9d240dff24cf90ee9e22328e5d3fcf5a05710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:50:82:7b:dc:63:d9:80:a5:0b:30:2f:38:
f7:5d:a1:a7:47:c3:64:8c:5d:dc:02:12:a6:a7:83:
c5:f7:93:ff:56:2f:88:57:3a:86:95:9d:00:79:3c:
9b:4c:e1:df:62:9f:35:80:3b:b6:55:cc:5e:4e:79:
12:e4:83:7c:07:2b:46:8f:25:07:53:81:df:6e:6c:
74:f2:c8:44:78:e4:7a:7b:f1:a7:49:db:d7:dd:20:
0c:ab:1b:dc:b6:2a:70:ce:5f:79:98:2e:02:09:22:
f5:23:ba:9e:e2:67:38:df:e3:ee:5c:88:91:4c:83:
43:46:8e:dc:23:10:36:3a:39:45:6e:f1:b0:21:bd:
01:26:96:ee:87:7c:68:85:5d:72:f8:13:c4:f7:ac:
67:04:20:1b:66:e1:31:65:bf:ec:5a:28:67:1f:c6:
35:e4:99:2c:6d:23:1d:b0:c8:ca:43:23:47:0a:e5:
a0:8b:e4:39:67:f2:5c:f4:45:ad:5c:be:69:25:9a:
eb:73:69:e9:6b:71:80:f0:4f:6e:ee:1c:89:e2:1a:
d0:e3:02:27:97:34:67:ed:77:cd:fa:32:23:60:87:
f9:8d:8e:9a:b0:20:35:eb:36:07:1b:08:98:89:1a:
35:83:1e:04:3b:b9:7e:1e:e9:b1:2b:27:f2:93:99:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:D2:40:DF:F2:4C:F9:0E:E9:E2:23:28:E5:D3:FC:F5:A0:57:10
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:97:9c:05:be:b4:7f:45:8c:a7:cb:ff:06:f5:aa:44:77:7b:
f7:0d:6a:65:d6:a6:75:55:ac:51:19:0f:3d:63:24:3a:bc:fc:
0f:b5:50:b4:2a:71:7c:1d:4b:ab:83:74:c7:eb:fb:81:d3:71:
14:ae:b5:c6:8d:d4:38:35:98:af:24:3e:7f:56:18:b9:ff:7e:
90:ef:59:bb:7b:c7:43:ea:d1:3d:13:02:d4:bc:71:e7:79:ab:
e7:07:09:90:59:09:aa:fd:01:da:fc:dd:f6:25:2e:7d:33:d0:
78:5c:02:64:52:ac:5b:52:74:d2:c7:3e:27:c2:27:3c:f5:b6:
e5:3f:b9:c9:4b:70:76:0e:cf:e6:88:b8:ed:6a:31:12:d2:bf:
9b:92:94:a5:6c:eb:4a:6f:fb:8e:fb:d6:cf:a5:83:46:b8:dc:
33:67:33:39:e4:48:29:f7:39:21:39:24:15:e4:47:e2:ed:46:
e8:d9:1f:6f:b4:77:22:bc:f2:6f:9e:2c:84:f5:93:50:4c:41:
cb:dd:fd:b7:75:1e:d3:c2:3e:fb:30:ba:65:90:4e:0a:08:b6:
e7:17:cc:ab:90:99:4e:89:4f:dc:1e:10:5c:af:08:d0:61:e6:
9f:61:71:31:cb:8e:73:30:8d:bf:23:0c:f6:04:b6:28:e3:ff:
ab:3b:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:37:35 2026 by rpki-client