Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: 54HFRKBqvddFp0pF5UMloDIKOh2H5YgVPZHK6WBqg8k=
Subject key identifier: D6:E4:A8:76:A1:8C:9F:EC:5D:09:53:44:64:46:69:B8:AC:76:B1:20
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019D273AFBA7C463D0D6A9AF2844548A06C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 1647
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: 2yEOY+lt+D1SptoxdjL1eEWxv7FbyS34vw+Gu5bq+/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fb:a7:c4:63:d0:d6:a9:af:28:44:54:8a:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=d6e4a876a18c9fec5d095344644669b8ac76b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:e0:1b:fa:13:09:6c:98:60:ef:86:c2:f1:
4f:52:38:bf:be:94:c0:2a:67:35:72:38:06:c4:a4:
95:b6:b7:cb:4c:88:71:eb:36:bb:f7:63:44:71:48:
8c:8c:18:0f:7d:db:85:a0:8b:5d:cc:fd:04:89:d2:
9a:22:e9:bd:12:29:9f:e3:08:33:fd:5c:ae:49:b3:
70:3c:44:ad:a2:4d:82:86:a1:26:11:3b:ac:f6:e9:
3b:1d:91:8d:f0:39:90:23:a7:31:4a:6d:00:ca:74:
a5:bf:2c:bc:d1:7d:1e:2e:ee:e5:3e:e5:ba:8a:ab:
20:7f:5d:c8:4a:ea:9b:8e:51:c7:49:a4:b1:0d:13:
c5:5c:e7:76:bb:0c:80:11:b6:2b:60:13:96:99:78:
77:72:34:03:b4:ea:ca:80:df:77:a0:a6:d6:bd:ac:
55:6a:2d:43:05:7c:10:ea:0e:62:46:5a:22:45:d7:
af:63:5c:77:17:1d:3c:b2:b2:42:c7:0c:53:77:21:
6d:43:38:da:16:02:c5:ad:17:f0:b1:1b:a0:e3:42:
5f:c7:75:ab:91:87:51:1e:dc:7b:9f:4e:30:8c:b0:
51:5e:b6:c5:6f:7f:10:8d:7b:93:72:3a:58:bf:5f:
54:08:54:35:4b:00:df:a6:bd:28:dc:15:45:20:a9:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:A8:76:A1:8C:9F:EC:5D:09:53:44:64:46:69:B8:AC:76:B1:20
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:8f:50:87:95:f2:f4:5b:87:aa:30:07:68:ac:fc:59:50:
66:23:8e:75:79:6d:dc:16:e5:8b:23:b4:07:54:ee:61:a9:c3:
3e:16:31:8b:59:e0:33:e4:aa:ed:e5:22:cd:c7:92:a1:77:c2:
06:78:b5:e0:99:71:55:99:c0:33:31:6a:3b:99:57:99:0f:e2:
74:80:9d:ab:28:50:b7:2f:df:ee:94:ee:bd:98:df:8c:9d:62:
d7:6f:fb:3b:c9:4f:36:56:b1:40:09:7e:09:74:89:c3:93:b3:
4b:1a:0b:48:d2:c6:4d:f7:81:27:a3:a3:f6:6c:5d:8a:cb:78:
7d:5c:c7:7f:04:cf:12:57:c0:1e:21:8b:7d:22:c8:d9:bd:0b:
84:1f:8f:61:62:7e:c6:e1:e4:77:82:fa:92:6c:1c:9a:2c:79:
f8:41:76:13:eb:e6:c6:d4:6c:81:12:32:9b:b1:2e:8a:6d:72:
dd:02:07:54:20:d0:37:f9:59:2f:0d:f2:0f:69:c2:25:4d:0b:
09:d2:94:c6:40:f0:ef:fc:42:98:89:90:27:11:ff:ac:2a:61:
da:88:69:ef:c0:10:e2:63:77:03:fd:fb:22:28:4a:1b:fe:cd:
44:7e:f8:89:5f:d4:cf:b1:b2:82:3a:df:55:58:6b:92:f5:c1:
fc:4b:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:13 2026 by rpki-client