Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: oKVIc8KmFjhjCfiKv+7N5ee+EiAwvz2aRjYKtRJhLQQ=
Subject key identifier: 3D:B0:CD:E8:C9:A2:B1:F0:CD:1D:9A:4E:3E:3A:36:04:28:1B:97:8A
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019E1DFE033B7392AEC67B575E44B05CC0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0835
Signing time: Tue 12 May 2026 21:00:46 +0000
Manifest this update: Tue 12 May 2026 21:00:46 +0000
Manifest next update: Wed 13 May 2026 21:00:46 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
3: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: mMb8/bTOgmgKX7BVfs9MQq3dwMxMF/1aXPowTexfjTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:03:3b:73:92:ae:c6:7b:57:5e:44:b0:5c:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: May 12 21:00:46 2026 GMT
Not After : May 13 21:00:46 2026 GMT
Subject: CN=3db0cde8c9a2b1f0cd1d9a4e3e3a3604281b978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:bf:c5:c5:5c:99:0c:fa:b5:60:f6:0b:64:
c8:d3:f9:2f:e0:b7:3b:6e:eb:6a:05:51:a2:34:0a:
52:bb:a4:44:e0:df:38:a6:7a:e9:c0:d2:2f:74:c6:
5d:28:f1:c8:8b:d2:34:ce:89:7f:79:58:b9:be:85:
81:65:c4:bc:16:d0:ac:80:8f:74:b7:e8:ef:dc:5a:
cf:d9:1a:6b:9b:2e:08:92:6f:e6:73:d3:48:24:bf:
4e:fc:21:10:a4:29:ac:34:77:e9:20:5e:6d:ae:85:
83:8d:62:36:01:1e:a5:e4:8f:5b:6d:fd:10:1a:d8:
bd:b7:51:f1:af:10:cc:f4:19:9e:29:3c:30:94:e9:
50:4b:c0:e4:7a:ae:c1:e2:d1:a3:b8:a6:1c:f3:74:
2e:39:08:8d:08:29:e0:a0:35:51:26:cb:1d:9d:a6:
cb:37:f0:f0:4d:b2:c8:67:a7:ad:bf:e2:d0:60:8f:
da:bc:e9:cd:59:0a:07:76:21:97:92:62:ca:9f:e1:
8c:82:58:d6:23:89:c3:e9:16:a4:fd:ea:a5:47:d1:
2e:5e:c0:d7:4b:48:3c:b5:ba:43:9a:27:a5:ca:9a:
4e:13:73:13:50:d2:b7:56:38:7a:7f:fe:ae:6a:0c:
f0:38:e1:96:b6:85:39:00:b9:81:7d:ea:de:83:90:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:CD:E8:C9:A2:B1:F0:CD:1D:9A:4E:3E:3A:36:04:28:1B:97:8A
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ae:6e:a0:93:ed:00:80:25:9e:97:de:d8:36:38:96:21:a4:
6b:60:98:34:68:5e:08:6d:26:53:c5:b8:79:be:6a:43:f6:c1:
78:73:eb:f4:59:34:96:af:b7:b7:ce:5d:e4:6a:b1:11:27:f3:
8f:c3:3f:a7:6a:42:e3:d2:21:70:ac:d3:f5:c0:7b:0a:17:a8:
6a:df:33:df:9c:c3:2d:56:76:c4:19:17:50:13:73:d8:b7:ae:
09:ee:46:bb:13:84:28:08:ed:95:b5:5f:56:ac:66:69:fd:10:
3d:be:37:79:b6:8d:85:ae:88:42:32:8c:67:c2:56:55:f1:e5:
34:d4:7a:97:de:f5:17:1e:fa:32:af:72:1b:2e:a8:80:3e:15:
0e:86:da:21:52:a5:70:25:5a:e7:56:55:c5:1b:c2:f5:1f:dd:
04:fb:f7:68:2f:4f:d8:ef:bb:96:60:51:40:a9:9e:8f:2b:34:
2f:ce:22:ea:77:57:6e:2f:67:ea:ce:d2:ac:0c:de:9b:b6:2e:
4b:f0:92:f2:3e:3e:a6:ad:25:c1:3d:63:05:63:ed:bf:d2:1d:
77:1a:a1:57:b5:3a:b7:33:0d:57:74:2a:86:c0:6c:9c:22:97:
de:65:5d:3e:12:15:a8:0d:20:b8:6b:0a:a2:a9:07:a0:80:fc:
04:16:e3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/gM7c5KuxntXXkSwXMDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjYwNTEyMjEwMDQ2WhcNMjYwNTEzMjEwMDQ2WjAzMTEwLwYDVQQD
EygzZGIwY2RlOGM5YTJiMWYwY2QxZDlhNGUzZTNhMzYwNDI4MWI5NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHq/xcVcmQz6tWD2C2TI0/kv4Lc7
butqBVGiNApSu6RE4N84pnrpwNIvdMZdKPHIi9I0zol/eVi5voWBZcS8FtCsgI90
t+jv3FrP2Rprmy4Ikm/mc9NIJL9O/CEQpCmsNHfpIF5troWDjWI2AR6l5I9bbf0Q
Gti9t1HxrxDM9BmeKTwwlOlQS8Dkeq7B4tGjuKYc83QuOQiNCCngoDVRJssdnabL
N/DwTbLIZ6etv+LQYI/avOnNWQoHdiGXkmLKn+GMgljWI4nD6Rak/eqlR9EuXsDX
S0g8tbpDmielyppOE3MTUNK3Vjh6f/6uagzwOOGWtoU5ALmBfereg5CX9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2wzejJorHwzR2aTj46NgQoG5eKMB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK5uoJPt
AIAlnpfe2DY4liGka2CYNGheCG0mU8W4eb5qQ/bBeHPr9Fk0lq+3t85d5GqxESfz
j8M/p2pC49IhcKzT9cB7Cheoat8z35zDLVZ2xBkXUBNz2LeuCe5GuxOEKAjtlbVf
Vqxmaf0QPb43ebaNha6IQjKMZ8JWVfHlNNR6l971Fx76Mq9yGy6ogD4VDobaIVKl
cCVa51ZVxRvC9R/dBPv3aC9P2O+7lmBRQKmejys0L84i6ndXbi9n6s7SrAzem7Yu
S/CS8j4+pq0lwT1jBWPtv9IddxqhV7U6tzMNV3QqhsBsnCKX3mVdPhIVqA0guGsK
oqkHoID8BBbjPQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:08:57 2026 by rpki-client