Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: oembdgsSZuxAp4IzWygH6ICR66nCCXnl7VS4PXtYc2c=
Subject key identifier: 05:70:E8:29:34:43:A1:2C:E2:E8:28:7A:90:59:65:BD:77:D2:AA:D2
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019F9323EBD7A80685A668D5B43A9D096C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1838
Signing time: Fri 24 Jul 2026 08:00:32 +0000
Manifest this update: Fri 24 Jul 2026 08:00:32 +0000
Manifest next update: Sat 25 Jul 2026 08:00:32 +0000
Files and hashes: 1: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (hash: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=)
2: CTOyFd7xxedt8gHWnQIE-RQ60pc.roa (hash: 6/Kpi6k8YzlzyuFB/7a9S47pkbxW1wbI017oLoOv9+w=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: kO1GGPxqSNwFmENnY98rpJ47v1ndzxS+OCV6NdijMwc=)
4: h9Ez5VJGHgLgp09W_3gZe1Yk8LY.roa (hash: CP/8WBU1IT54jNR+qszhkfIQMh5/elXyL0h0IDRhoPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:eb:d7:a8:06:85:a6:68:d5:b4:3a:9d:09:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jul 24 08:00:32 2026 GMT
Not After : Jul 25 08:00:32 2026 GMT
Subject: CN=0570e8293443a12ce2e8287a905965bd77d2aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:bb:d3:15:1c:13:85:9d:22:ba:49:eb:10:
dc:ac:74:9e:0a:6d:64:7d:4f:49:23:42:e8:e7:1e:
6b:6f:d1:e6:75:6a:e2:fc:ad:2c:f2:0f:54:be:95:
66:47:ec:b5:84:10:e6:f1:de:a1:52:a1:47:f8:fb:
8e:a6:46:98:c5:05:76:32:9c:89:02:67:75:03:fd:
94:83:fd:0d:e0:1f:0a:46:12:be:1c:48:3d:88:56:
f0:74:a7:20:84:ba:fc:32:f1:5d:fa:fe:ae:ef:fe:
c7:bf:18:d8:ca:f0:c7:90:29:86:d5:da:30:3e:2c:
c1:88:62:04:3f:ca:46:56:7c:72:db:1f:5a:b0:7f:
5d:ea:56:25:ea:f0:f5:f1:0d:69:42:41:60:07:33:
b0:08:4a:87:33:01:07:7c:53:4e:0d:27:5d:83:30:
b2:e4:6f:a4:65:73:f2:16:ed:f6:b9:49:d3:48:33:
c3:e1:b4:1a:50:98:22:61:45:fc:4a:bb:5e:26:0a:
d7:43:8f:25:7d:db:7a:be:27:7f:eb:e3:8e:fc:c2:
b0:34:ae:b5:f0:f8:df:6d:df:61:c7:17:4e:e9:df:
14:bd:a8:69:b3:1e:71:35:3d:ba:d2:d3:a3:8f:2b:
4c:d8:b8:71:75:c1:94:63:e6:9f:48:a5:1b:7b:b4:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:E8:29:34:43:A1:2C:E2:E8:28:7A:90:59:65:BD:77:D2:AA:D2
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:a9:f3:5d:78:8a:6e:b8:a5:b4:77:60:1e:b7:c3:9d:80:
61:45:55:8e:b4:f7:98:2c:5b:aa:2e:2d:6c:8c:f9:50:63:dd:
94:82:00:04:c3:fc:31:a8:14:9a:69:85:13:1c:e9:3d:b8:a3:
6d:54:2e:17:f6:a5:9e:07:a3:ec:70:e5:62:a0:24:25:87:81:
52:29:d0:a7:fc:ab:e1:9a:ef:d6:b9:19:d5:77:50:bc:f5:91:
9d:66:0c:5d:83:e8:a9:4a:31:86:b0:da:9a:9d:dd:c3:24:46:
ae:05:33:73:17:a6:14:80:fe:e0:17:ed:0d:ff:59:11:db:33:
9e:b2:54:e4:cf:74:ec:72:55:a8:02:80:9c:d0:92:84:dc:e9:
c1:73:0c:a0:fa:91:7b:0e:c4:3d:6d:8e:94:5a:3d:ef:c4:a0:
b6:4e:1d:d8:9e:6a:a8:bc:ac:85:ff:94:d2:7e:d7:29:19:32:
a8:1f:b7:6f:29:cf:7e:00:b9:29:db:aa:2c:c8:da:72:06:68:
df:cd:b7:3a:f3:73:51:8a:58:c9:6e:20:10:17:e1:af:fa:43:
42:b8:8a:49:2f:bd:5d:7d:73:b8:f3:69:4f:0e:65:01:f3:9a:
c6:06:52:95:bd:8c:db:51:e5:50:5a:65:03:9f:ab:34:37:eb:
4a:52:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:46 2026 by rpki-client