Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: r7qB3WuxqjqwPy18JWTUr3p6RXONavCVXZpqipCnqBQ=
Subject key identifier: 2D:CB:95:4C:B9:2C:F7:87:51:34:3F:CB:44:01:87:14:41:8E:75:87
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019F9512BA20E6EC6BDFABFD0C4030BCE113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 1789
Signing time: Fri 24 Jul 2026 17:01:00 +0000
Manifest this update: Fri 24 Jul 2026 17:01:00 +0000
Manifest next update: Sat 25 Jul 2026 17:01:00 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: kbvQbWvl5LExZdLB2fBe3YfOWgeMTvPMYuCJ3u1UofI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:ba:20:e6:ec:6b:df:ab:fd:0c:40:30:bc:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Jul 24 17:01:00 2026 GMT
Not After : Jul 25 17:01:00 2026 GMT
Subject: CN=2dcb954cb92cf78751343fcb44018714418e7587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:fb:22:df:d1:4f:95:45:27:a4:2c:10:b9:
c5:03:df:47:a8:bf:48:44:36:b7:14:87:1c:b1:d7:
50:eb:14:6a:35:7b:1d:b1:74:9a:ab:b1:3c:ad:b4:
fb:59:de:5d:65:42:94:7f:b5:45:77:4f:49:e5:ee:
05:4d:97:9c:8f:5b:2f:40:c1:2c:23:96:42:df:b1:
1a:a8:fc:37:41:7a:14:1c:4f:9c:cb:99:5c:18:b7:
a9:ae:c0:67:a7:c5:41:ec:54:42:7a:6f:9e:3e:ad:
8a:48:2a:6a:a3:06:9e:3f:98:39:e7:33:f4:1b:dd:
c1:10:b2:94:cf:2a:94:49:1f:d6:a7:d9:c9:27:a6:
58:07:c0:4b:d9:29:ea:80:10:d9:8e:5f:a8:1a:a3:
15:a5:73:c9:55:50:2e:e5:21:1b:19:4c:02:e6:d5:
bd:00:d1:35:b7:e5:4a:a7:be:2c:72:91:f9:28:3d:
d6:95:bf:4b:c8:37:e8:09:11:14:7c:91:4e:2f:e3:
08:3c:33:7d:21:0f:48:08:fa:2e:66:22:33:46:f3:
58:fa:4f:4e:a3:91:9f:e5:30:7a:ec:7a:19:9e:6d:
21:cc:66:ca:33:9d:ec:be:89:d6:ab:65:08:8f:1b:
73:05:8e:3c:ef:07:ab:f6:c6:ac:0f:e9:a8:1d:cb:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:95:4C:B9:2C:F7:87:51:34:3F:CB:44:01:87:14:41:8E:75:87
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:05:5c:2e:55:e3:c0:ab:4f:6f:c4:fa:35:c4:e7:34:05:f7:
7c:dd:95:83:e3:81:c6:04:cd:c8:e0:ab:64:99:dc:c2:fe:87:
de:33:8e:54:1a:70:07:3f:13:52:4e:eb:dc:51:8f:80:58:35:
d6:dd:10:72:83:52:a4:ce:15:0a:e9:7b:5a:fb:b1:0f:75:a5:
01:1f:c0:5a:8c:4b:da:6f:9e:75:9b:d8:7d:37:a0:50:69:9e:
9b:e1:20:fb:44:0b:f1:60:28:b1:e6:a5:b7:c5:bc:4d:77:48:
2c:6b:09:46:6a:f6:a4:45:43:c8:34:3b:1a:98:92:06:3b:a1:
f8:7e:c7:af:c8:33:41:30:4e:ec:96:a8:8b:e6:d9:df:da:9b:
11:7b:f2:63:16:44:0f:1f:8f:8e:43:37:5d:c3:1a:5f:1f:93:
7e:b2:00:7f:99:8b:c3:99:7a:7c:79:2d:01:71:d4:4f:d5:54:
51:1a:24:25:5f:52:74:6c:31:ba:03:b4:d1:76:95:d7:1b:61:
fa:e1:01:b4:68:67:8d:a6:b9:62:61:d6:e9:2a:26:71:dc:1a:
cf:c0:7e:3b:1d:0f:59:35:f6:01:2c:37:f3:76:c6:11:5e:93:
e0:8d:28:f4:09:ce:15:60:87:f5:be:e7:d0:b4:98:2b:88:ec:
a3:2d:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:34 2026 by rpki-client