Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: da10/Mf49iqCNXJBXyVRnHYtX19ui8Rh1n/H74Ood+I=
Subject key identifier: 66:82:15:F6:FE:75:38:E4:F1:3F:39:1A:77:78:21:B7:89:8D:3B:47
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 01A0E13CE9FBC1083CB86488D5F225C2C310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 1835
Signing time: Sun 27 Sep 2026 05:01:00 +0000
Manifest this update: Sun 27 Sep 2026 05:01:00 +0000
Manifest next update: Mon 28 Sep 2026 05:01:00 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: zfdU2jeYbQlPaoNnN9pBYBSvj3Sjn5qtxBLHGEZs4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:e9:fb:c1:08:3c:b8:64:88:d5:f2:25:c2:c3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Sep 27 05:01:00 2026 GMT
Not After : Sep 28 05:01:00 2026 GMT
Subject: CN=668215f6fe7538e4f13f391a777821b7898d3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:04:19:d2:84:d1:3e:ec:2d:07:c7:42:43:
13:36:80:14:45:9f:9e:51:62:1d:d5:db:11:fe:93:
b4:1f:83:b9:b9:40:80:9f:8e:22:20:7a:b2:8d:45:
60:37:51:72:7f:45:65:b6:e8:3f:85:50:ec:f0:9e:
e9:a0:ae:cc:ed:08:53:26:c6:81:66:ec:76:38:a8:
33:69:43:3b:7d:32:42:b4:51:a7:f8:b0:80:1f:86:
cf:b1:32:60:69:da:7e:5f:b5:de:4b:45:55:b1:e8:
1a:cd:30:ae:44:29:20:4a:cd:00:19:81:8d:bd:13:
33:64:76:af:2e:85:b2:9b:f6:07:64:8c:85:8c:89:
04:42:8d:f3:95:6f:92:45:65:3e:c8:3e:e1:0d:bf:
2a:dd:88:0d:4d:93:1a:f2:50:53:b8:a1:00:e1:91:
24:06:12:f9:e6:32:ce:9a:4d:20:cc:6c:e5:ed:35:
f5:b4:69:1b:7c:cd:96:7a:ee:64:f7:c9:2d:59:4c:
95:23:65:37:a1:60:aa:11:5e:cb:7b:d1:67:a8:28:
bb:6a:cd:9b:aa:29:c5:ed:7a:8f:26:64:eb:10:bf:
01:60:0f:56:e4:c4:c4:30:be:b9:3a:0e:d9:86:08:
02:6c:1a:43:74:08:27:e8:c2:55:1b:f2:89:3c:7d:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:15:F6:FE:75:38:E4:F1:3F:39:1A:77:78:21:B7:89:8D:3B:47
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ec:c5:26:f8:7b:f1:d1:a7:e9:ef:92:c1:fa:8f:75:e8:24:
28:6a:65:72:d1:a0:d4:c6:cf:70:1e:2a:e1:53:9b:22:7a:c9:
2f:f3:b3:b8:1d:30:2a:f1:19:1a:11:43:c6:a7:a9:53:33:51:
6b:a5:25:61:bd:14:0d:e7:17:ab:5d:9f:a6:b2:79:70:73:6e:
6e:51:ea:8c:6b:49:c0:97:60:e3:c0:37:6e:74:6d:8c:6e:7b:
6c:a5:7c:2e:bd:34:fc:bc:66:01:a6:82:d7:03:da:73:e8:39:
46:8e:c3:65:c4:35:43:ce:ef:89:ac:1d:4e:cb:f6:fd:e8:62:
a6:5f:92:f2:86:8b:de:96:f4:9a:02:36:d9:05:2f:f5:66:22:
9d:be:e9:04:d9:71:48:4a:ca:24:90:f7:9d:c6:17:31:b3:6f:
2b:7f:4b:03:4f:9f:11:ba:07:9f:21:de:2a:db:14:53:8a:3d:
1c:54:a0:f7:21:cd:d0:39:02:cb:b5:10:71:6a:a5:97:f4:1e:
7a:43:08:30:33:78:73:9a:9a:68:18:14:89:b8:c2:c3:f1:0a:
37:eb:d5:39:49:58:0b:5c:3a:88:b1:4b:b3:41:f6:4e:e6:87:
1f:b9:ab:30:c9:39:58:cb:70:00:bb:96:1c:3a:17:d5:6f:86:
53:f1:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:52:30 2026 by rpki-client