Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File: LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier: 5N2bGh1aawzKOM27dBQUPiTjs2hopw1owUdbL4cNx48=
Subject key identifier: 10:9C:50:1A:30:7D:86:8D:FE:DB:23:E9:E1:DE:91:47:94:94:95:F5
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer: /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial: 019D270479386F2040F7BB802614AD340C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number: 0FE6
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: Ld7I2+nYLlQ9sTOAayvvQmbnEeLq57oaEWUC3Zliyjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:79:38:6f:20:40:f7:bb:80:26:14:ad:34:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=109c501a307d868dfedb23e9e1de9147949495f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:37:f1:f8:13:de:5c:b6:48:4c:ca:1b:f4:
93:46:94:98:b1:3d:3e:46:d7:da:3e:e7:07:61:6c:
1e:e6:e5:df:a0:a7:55:c9:34:00:cd:12:d7:80:34:
97:2e:da:0a:41:21:0d:31:71:d2:a9:82:ce:55:1b:
66:b0:72:ff:6c:99:70:6a:c0:4d:66:43:7f:6f:0d:
b0:73:e4:5b:fe:70:55:3a:ed:01:c1:d5:36:1a:18:
a8:8b:de:3e:b9:fe:05:83:10:35:be:1f:59:38:72:
27:92:67:7d:c7:2a:2f:43:0c:9a:99:8c:41:0b:8f:
7f:e5:c3:4b:5a:95:bc:b3:65:76:75:e7:e7:52:e7:
36:8f:b1:26:f4:70:8f:11:6d:25:cc:8e:54:1b:a3:
73:02:08:ff:cd:6c:32:6e:bd:26:18:7e:5d:e6:02:
0a:1e:f4:62:c2:8c:dd:c7:7d:83:6c:bc:ea:58:49:
82:35:ce:fb:de:eb:86:2e:d0:8c:d8:3b:15:8a:f4:
9c:ff:f6:40:dc:77:d0:0a:4b:3a:e1:78:7c:d0:e7:
e1:cd:df:c2:f9:05:13:3f:d3:bd:cf:e3:cd:51:5b:
ff:14:1e:a2:2d:ad:09:c0:a7:f6:c5:92:dc:e7:30:
db:27:b6:44:b0:fd:6d:c2:25:90:54:4f:70:1b:5c:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:50:1A:30:7D:86:8D:FE:DB:23:E9:E1:DE:91:47:94:94:95:F5
X509v3 Authority Key Identifier:
keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:83:b5:d6:3f:ef:87:ca:be:10:ef:40:7c:36:16:3e:df:
3a:95:5b:12:7d:fc:50:2b:42:1e:10:84:2b:37:b7:fe:6b:e0:
c6:0c:ee:fc:dc:21:32:6c:14:13:05:ca:ba:2f:79:f9:b7:b7:
5a:1b:4c:71:9e:99:e2:19:40:f8:b5:13:34:b9:cb:9e:47:ef:
4e:b7:0d:40:df:78:8a:44:02:e7:fe:48:73:b7:7c:a1:9d:ed:
db:77:e9:01:3f:df:5c:e8:e1:9e:53:c3:d9:8a:e0:52:f6:7f:
94:c4:7a:64:b2:29:9e:6b:e9:39:9f:30:50:5c:10:42:8b:ea:
7f:ec:ad:d0:05:a9:b8:16:1c:4c:25:e3:42:3c:f2:e5:c2:99:
43:be:65:d7:2c:75:09:19:59:04:2e:24:fe:ad:30:52:a6:9e:
bc:eb:19:01:4e:1d:90:63:b4:59:40:b6:39:ea:94:43:85:3e:
62:bf:81:f6:16:ce:08:fc:8a:b8:d8:bd:ce:ed:63:76:8a:83:
9f:c6:3d:0d:26:ea:fa:80:0d:0d:e4:5f:81:97:83:be:53:02:
aa:91:29:cd:ac:d0:26:60:16:03:2e:6f:71:08:a9:50:40:b2:
e2:58:57:04:66:ff:3f:94:31:52:15:e8:6f:90:41:85:65:56:
72:32:ab:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHk4byBA97uAJhStNAxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTgyMjAwOGQ5Y2M3MDEyZDYwMzA0MjliMjhkODU4ZGJi
YWNhNDMwHhcNMjYwMzI1MjIwMTM3WhcNMjYwMzI2MjIwMTM3WjAzMTEwLwYDVQQD
EygxMDljNTAxYTMwN2Q4NjhkZmVkYjIzZTllMWRlOTE0Nzk0OTQ5NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV838fgT3ly2SEzKG/STRpSYsT0+
RtfaPucHYWwe5uXfoKdVyTQAzRLXgDSXLtoKQSENMXHSqYLOVRtmsHL/bJlwasBN
ZkN/bw2wc+Rb/nBVOu0BwdU2Ghioi94+uf4FgxA1vh9ZOHInkmd9xyovQwyamYxB
C49/5cNLWpW8s2V2defnUuc2j7Em9HCPEW0lzI5UG6NzAgj/zWwybr0mGH5d5gIK
HvRiwozdx32DbLzqWEmCNc773uuGLtCM2DsVivSc//ZA3HfQCks64Xh80Ofhzd/C
+QUTP9O9z+PNUVv/FB6iLa0JwKf2xZLc5zDbJ7ZEsP1twiWQVE9wG1yAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCcUBowfYaN/tsj6eHekUeUlJX1MB8GA1UdIwQY
MBaAFCyYIgCNnMcBLWAwQpso2FjbuspDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYt
NDFjYTJkM2FhZTcxLzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYtNDFjYTJkM2FhZTcx
LzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4WDtdY/
74fKvhDvQHw2Fj7fOpVbEn38UCtCHhCEKze3/mvgxgzu/NwhMmwUEwXKui95+be3
WhtMcZ6Z4hlA+LUTNLnLnkfvTrcNQN94ikQC5/5Ic7d8oZ3t23fpAT/fXOjhnlPD
2YrgUvZ/lMR6ZLIpnmvpOZ8wUFwQQovqf+yt0AWpuBYcTCXjQjzy5cKZQ75l1yx1
CRlZBC4k/q0wUqaevOsZAU4dkGO0WUC2OeqUQ4U+Yr+B9hbOCPyKuNi9zu1jdoqD
n8Y9DSbq+oANDeRfgZeDvlMCqpEpzazQJmAWAy5vcQipUECy4lhXBGb/P5QxUhXo
b5BBhWVWcjKrpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:14 2026 by rpki-client