Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: /kisF5Wi7eGIqHt6Xe9dmU5lvb3KQyQfhWl9cXAXmbA=
Subject key identifier: BF:C3:D8:D7:BE:DF:47:0B:E6:4F:7E:1F:56:1C:BC:81:AB:B1:F4:97
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019E1E6C37BB226F2563072CB23F0E714115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 16C7
Signing time: Tue 12 May 2026 23:01:09 +0000
Manifest this update: Tue 12 May 2026 23:01:09 +0000
Manifest next update: Wed 13 May 2026 23:01:09 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: YIo4btdf1Axv/s/ogQjep+A/gg6UIYChIa1vnBKMNig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:37:bb:22:6f:25:63:07:2c:b2:3f:0e:71:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: May 12 23:01:09 2026 GMT
Not After : May 13 23:01:09 2026 GMT
Subject: CN=bfc3d8d7bedf470be64f7e1f561cbc81abb1f497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:64:b4:1e:e7:33:92:ac:3b:a2:f3:f1:45:
80:b3:1d:03:0c:1c:77:ec:2b:9b:03:fd:b1:e4:30:
b2:8f:b8:45:c9:b2:12:bf:c0:1e:2e:a7:3a:f4:e5:
95:8c:71:79:26:37:e3:6f:4f:4d:ed:ca:06:3e:2d:
1a:7c:f0:c3:0c:fd:a5:c0:2d:6d:04:75:3d:df:05:
79:ca:06:5e:3e:4c:96:ea:00:78:3f:2c:6b:c8:f8:
c5:10:9a:15:5e:2c:06:c2:9d:d8:ca:76:de:cb:3a:
7c:8b:35:c8:d4:78:74:c7:95:00:74:8f:66:cc:f8:
d7:69:5a:27:e8:22:88:10:d0:a9:3e:a7:94:d2:70:
1d:69:3a:81:1f:60:22:e0:3c:a7:71:11:14:75:25:
02:28:03:0b:2d:b9:e4:86:2c:81:4c:e3:ff:8d:5c:
42:a6:aa:ae:9d:f5:12:17:85:f5:10:1d:c2:9c:79:
81:08:77:43:c2:b5:bb:1c:58:3f:dc:35:34:86:ec:
71:94:c5:f7:f8:db:83:86:1d:7e:29:94:6b:2f:17:
ae:97:20:d6:0e:6e:bc:9b:d9:9d:34:3b:18:ff:8f:
c4:c1:07:eb:b8:ec:e2:53:dd:86:67:1d:eb:39:1c:
1a:13:d1:80:11:37:e4:6c:b1:fc:3b:28:7a:04:a9:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:D8:D7:BE:DF:47:0B:E6:4F:7E:1F:56:1C:BC:81:AB:B1:F4:97
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:95:29:0c:c1:b5:3d:44:5b:b7:64:f0:c6:a3:f4:e3:8e:
5d:55:0d:18:92:2e:6b:46:92:ee:d8:1b:1d:db:35:73:d0:f4:
21:c5:59:ba:63:9f:86:f4:49:c1:83:55:f8:09:a9:e9:ee:a7:
37:e5:c4:80:55:1f:fa:94:a4:cd:55:9d:1f:6b:5e:25:42:b0:
10:21:52:b7:80:56:9b:a5:ba:50:eb:db:10:b9:57:22:f6:90:
55:6d:37:a3:28:30:cd:89:8b:4a:7f:58:18:7d:cd:3a:89:e9:
29:46:25:d5:2c:5e:e3:cb:29:f2:cd:2e:f5:77:a5:46:b4:f2:
9e:7c:b3:c1:2a:f5:73:df:81:77:ba:ca:1d:64:a8:a1:0c:8f:
39:47:d3:ca:df:62:a2:ed:39:4e:1d:a8:12:a4:4a:dd:eb:d2:
c5:4c:3a:b4:15:e5:9f:50:f1:6d:44:81:f8:42:26:15:47:55:
49:da:1d:bd:06:d0:4d:47:d2:74:31:a7:a8:26:4c:fb:64:d9:
46:8a:f3:c5:a2:b9:e4:f6:28:3e:55:51:31:42:fa:d6:33:81:
2b:d6:c3:c0:ba:06:ae:0d:b5:25:74:c6:67:74:66:9f:37:0a:
ac:10:d2:62:c4:5d:0b:e1:86:21:b2:6d:a2:84:48:88:04:7f:
9d:ec:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:57 2026 by rpki-client