Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: IEA5BC+/QIZC8bZqMp2nwwyB1phuvO6XG8hz50EsnDU=
Subject key identifier: A8:0D:8A:D6:42:4F:4B:CD:32:87:E5:E6:A0:5C:FC:2C:E0:66:07:2D
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019D265F2ED9690E1556A6805A9103CF6661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 07B4
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: 1CalG0bWEjPAqMJn/iLBlceIEtcA32f6QLVreQLdTL0=)
3: X-IMHZO2Sd5gZEJtndneD0fWreY.roa (hash: bfcFN5Xio94TqA5R1A/qDWjqIpl0U94c2LxTtPv9KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2e:d9:69:0e:15:56:a6:80:5a:91:03:cf:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=a80d8ad6424f4bcd3287e5e6a05cfc2ce066072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:3f:bf:19:b9:c4:b9:9c:f4:ea:47:2b:df:
7e:d4:ec:5e:cc:71:8c:ae:6b:fb:d5:f3:f0:b9:05:
51:8c:4a:e5:c7:51:18:16:59:7e:97:62:3e:ff:da:
07:31:72:df:c8:eb:a3:57:28:ea:5f:56:18:59:64:
58:d9:0e:93:86:db:3c:18:99:e2:48:0d:f9:7b:0b:
2f:26:29:f5:db:eb:60:a4:6f:49:25:19:43:19:04:
7c:e4:14:1f:57:25:f4:26:93:2f:e7:e1:ea:c8:47:
16:43:b5:66:e0:95:60:36:c4:9d:bc:b4:25:50:54:
2c:c8:9d:02:84:ed:86:74:f4:9e:90:a8:8b:d0:da:
f2:eb:fa:b5:70:77:26:70:d2:09:d5:8e:27:13:03:
16:a3:43:ab:9b:3f:e5:d9:82:6c:66:f5:e3:dc:0b:
62:5f:8b:9a:fb:79:d1:3a:6e:89:7b:14:c9:6d:85:
71:c0:91:b6:86:73:b8:98:81:be:3e:9a:ad:29:d5:
e2:ab:4a:32:18:02:41:d7:8d:89:cb:ad:31:2f:31:
cb:91:d8:f6:72:3c:86:ca:0c:66:5d:6c:47:b3:b3:
89:04:11:8a:8d:5c:c5:27:ed:31:39:71:c5:10:1f:
ba:e3:f7:dd:63:ae:34:96:cd:76:54:ec:2c:d7:9c:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:8A:D6:42:4F:4B:CD:32:87:E5:E6:A0:5C:FC:2C:E0:66:07:2D
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c4:57:fa:4d:42:44:ca:28:e8:58:1a:50:40:fd:a4:ca:e2:
d3:52:8a:7d:9c:07:8a:b0:e2:83:83:af:d1:74:48:5a:d2:1f:
1a:f5:4d:ad:69:e5:c7:d3:5f:3a:c3:a1:89:32:03:7c:32:4a:
13:ba:6b:fe:85:d6:79:81:c6:97:13:c9:8b:fa:83:bc:c3:4b:
ec:8a:c6:32:1c:b7:2d:87:68:2d:95:54:7b:d3:86:ff:da:a3:
bd:c6:8b:13:83:8c:37:50:c8:70:7b:5d:21:e2:53:1e:fe:94:
f6:4e:85:5c:61:2a:82:8d:ad:4d:c7:f7:bf:6b:c4:e5:20:83:
f3:ae:76:0f:8f:f0:05:f9:9a:a9:3d:aa:ac:05:c6:e4:bd:91:
be:5a:d7:f9:86:38:a6:ab:77:ca:de:43:86:1d:34:5b:21:b5:
50:66:92:c9:b2:17:40:64:cd:55:0e:94:57:3d:17:c9:c5:53:
86:0d:a6:2c:a5:1c:96:a5:c1:b1:b6:7a:4e:61:5f:c1:c6:90:
9f:2e:f5:19:c2:ed:76:fa:9c:2e:0e:7c:16:81:52:e7:4f:c0:
fc:00:32:b4:f9:8f:d2:90:72:3b:a0:14:94:26:00:34:b7:57:
b1:28:4d:f6:20:84:6a:d5:6d:7f:03:b1:02:da:b4:a8:5b:50:
f4:e1:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:51 2026 by rpki-client