Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: V0E6Cm/uzRNRFbbuKUUiVRfHRCxHlfnwNwPU8qQQuno=
Subject key identifier: 42:A9:0E:D7:1C:E5:71:CB:99:89:EC:69:63:7B:A7:E7:92:3B:C2:22
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01A1DE3979D91514921CB39913CD3C60B853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0A27
Signing time: Sun 15 Nov 2026 08:01:11 +0000
Manifest this update: Sun 15 Nov 2026 08:01:11 +0000
Manifest next update: Mon 16 Nov 2026 08:01:11 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: KeYQci85jW9aQ7VCOKxYjrleTVgLfj6M+ApJK7mmCbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:79:d9:15:14:92:1c:b3:99:13:cd:3c:60:b8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Nov 15 08:01:11 2026 GMT
Not After : Nov 16 08:01:11 2026 GMT
Subject: CN=42a90ed71ce571cb9989ec69637ba7e7923bc222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:ab:ea:54:39:76:21:88:d3:b4:6f:0d:4d:
fc:e5:12:e6:0c:e0:48:03:a3:3d:62:54:91:2e:08:
4b:54:7c:11:a2:96:09:2d:3b:74:f3:e5:b6:d4:d0:
57:ea:6f:81:c2:34:1f:13:a0:8a:03:26:91:1c:08:
e2:de:36:19:4b:07:6b:d5:b6:93:f5:b5:f4:67:bc:
c8:98:a5:7a:0b:2b:8f:8a:bd:c7:dd:34:dc:ba:32:
a9:e1:0d:35:7f:65:42:f3:7c:27:35:1d:e7:ac:0d:
bc:de:25:f1:c8:2c:54:03:f3:b6:a3:9f:22:94:0a:
a0:bf:e2:1c:52:a9:39:7d:a6:03:0f:85:eb:53:62:
3c:0b:4d:05:37:b7:39:c7:ee:96:0e:d9:f1:0e:67:
32:19:6f:f3:f4:e2:04:25:a9:5d:74:9b:05:26:c1:
ef:3c:b3:6f:f4:c9:ee:fc:c7:1c:9e:24:49:1b:95:
66:49:09:3c:78:f6:49:65:12:d2:65:a1:9e:b6:e7:
eb:73:9d:30:b7:79:d6:b8:1d:6b:05:13:f5:73:77:
94:8e:1e:c4:aa:f0:65:7a:7d:22:09:5f:b4:f6:ea:
05:1a:7b:6a:b0:18:9e:f0:af:f9:3d:04:44:88:a5:
c7:0a:96:f1:37:7f:67:73:d7:a5:6b:2f:d7:a1:bf:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:0E:D7:1C:E5:71:CB:99:89:EC:69:63:7B:A7:E7:92:3B:C2:22
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:40:76:c4:de:ae:6b:b6:ae:4a:32:73:88:84:0f:56:15:7a:
78:c1:d6:2b:e1:55:41:b3:e8:5a:4b:9e:ea:0f:3d:a5:9d:ce:
eb:0b:9a:16:1c:b0:4d:73:1a:72:3d:c8:7b:6e:8d:1d:99:17:
68:a3:b7:8b:86:fe:29:4e:bc:da:7a:22:05:e6:22:93:93:e7:
13:9b:2f:87:b6:6f:27:e9:4e:24:d0:c1:26:9c:72:db:f4:60:
0c:1d:9c:8b:fe:35:3e:f3:75:02:71:c2:a5:68:e5:f9:4e:9e:
92:29:21:d3:e8:fb:8b:6f:b7:8a:30:c0:05:e1:ca:2f:c3:b5:
39:5b:74:70:e1:53:1e:ab:dc:64:cb:f1:ab:22:3f:a6:40:23:
d5:8e:d4:6c:5d:25:54:ae:73:1f:a8:65:f6:90:95:ce:40:6c:
07:6e:47:64:9c:58:a8:81:de:36:1b:17:cd:35:10:5b:57:ab:
87:b4:9b:48:67:b4:51:6b:a9:c7:66:f6:b3:06:67:1b:a2:1d:
31:7b:ab:38:a2:de:af:d5:9a:0f:8d:2c:72:0e:3a:9c:27:1e:
3b:d2:d0:12:f4:e5:55:b3:32:83:e3:a4:92:3f:60:28:f6:83:
77:a6:4e:28:b3:e5:19:5c:09:5c:f0:92:90:3e:2f:70:0b:ec:
cd:e0:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:27:05 2026 by rpki-client