Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: rGh8+y/IhsEBVTPXhE+5bNWHuucb8Dd6C141L4mE4KY=
Subject key identifier: 5C:EE:05:E6:0D:01:A2:B0:76:AC:0A:3D:B7:37:CC:89:3C:BC:3B:14
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 01A0DD29C3C8EFBC0CB9030291FF3C22581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0EED
Signing time: Sat 26 Sep 2026 10:01:36 +0000
Manifest this update: Sat 26 Sep 2026 10:01:36 +0000
Manifest next update: Sun 27 Sep 2026 10:01:36 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: YF8DWDDgQ5do15PedffdhSnuMXaeiDRoW3jFuqmoKYw=)
2: rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa (hash: i5/iyo2rt1F0mdV5nHS/+ieV6kBSf0qdaLWU+lHJUz0=)
3: sUdV13N_3SZTo-Y2HxDJ2JHQUbc.asa (hash: JJciRc7IP4JGmv4ypRYcIbGSjCbG/DkgLQ/P1JAxCHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:c3:c8:ef:bc:0c:b9:03:02:91:ff:3c:22:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Sep 26 10:01:36 2026 GMT
Not After : Sep 27 10:01:36 2026 GMT
Subject: CN=5cee05e60d01a2b076ac0a3db737cc893cbc3b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:c6:3d:9c:4d:68:aa:8b:c2:00:1c:f6:b5:
18:e2:7e:38:e2:40:15:6f:ce:15:b6:65:f7:c8:00:
a4:20:31:23:20:40:6a:1b:8d:51:b8:7f:9d:a5:af:
bd:42:33:53:09:b2:5b:f7:f0:b8:f6:cb:7a:f2:73:
b7:60:31:32:cd:62:c0:b4:91:6e:11:4d:38:fe:13:
c0:ce:f3:e9:48:51:d8:9b:b3:08:9e:03:3b:2d:df:
1a:52:62:c4:d5:c1:64:6d:9f:e1:d4:9d:43:0d:04:
2f:14:fe:82:ad:d5:59:f9:5a:f8:5d:db:22:61:0e:
ac:90:7c:64:76:c9:e6:bd:2d:ce:f6:c9:2b:61:a1:
05:5f:5e:52:63:c2:d2:71:f5:e1:cf:46:94:dd:66:
f6:11:fc:f6:83:14:23:56:e9:96:4d:a0:ad:69:4e:
5b:65:ff:44:03:94:4c:38:af:b9:54:19:91:89:80:
88:c4:00:16:9d:cb:f6:6b:63:30:47:d2:91:e4:40:
a1:fd:2b:0e:a5:83:70:40:24:df:5f:55:03:a2:43:
3e:04:ce:bd:5c:5a:c7:e7:36:35:36:40:2a:0e:dd:
3f:ec:ad:76:ee:d7:db:bd:93:3b:71:26:9f:19:61:
eb:f1:47:ab:5f:3a:ae:23:ba:cf:30:14:da:7b:04:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:05:E6:0D:01:A2:B0:76:AC:0A:3D:B7:37:CC:89:3C:BC:3B:14
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a2:b6:98:53:b5:7e:dc:9b:c3:1a:01:b2:6c:c6:73:fa:a6:
24:64:8a:d7:01:6c:2c:a7:4d:1a:b8:b5:4c:a1:3d:94:ee:ac:
92:f1:3a:9a:84:81:df:b3:1d:3b:9b:b0:bc:ae:c7:ff:89:cd:
b8:3f:9e:13:d0:63:68:e3:6e:8e:8b:7f:27:cd:ff:39:d6:1a:
b4:a4:00:95:63:81:a3:78:42:5a:ad:8f:1f:07:b1:1c:ff:13:
65:65:0f:d0:5b:f0:01:e9:ec:2a:ab:9d:16:2f:8a:4c:e6:a8:
b1:de:d0:41:ab:c9:70:01:37:de:90:ff:42:c1:cc:18:5d:45:
54:31:61:45:68:aa:d8:fa:82:12:6a:0f:04:e7:38:82:8a:af:
43:87:0b:28:c6:26:31:89:55:b3:7a:18:20:6b:ce:41:48:73:
48:ce:69:ab:eb:59:09:9b:02:35:f9:90:e4:48:5b:f0:7d:72:
03:62:68:d2:0b:60:a8:5a:be:0e:36:f7:21:56:2a:57:3c:d1:
fc:88:2a:29:5d:d8:12:96:54:a2:b3:4b:9a:e7:ca:a2:c0:fb:
f4:76:31:55:8b:7b:6a:73:a9:64:82:0a:42:44:20:df:ba:df:
89:d2:65:7d:a4:de:de:0e:dc:73:08:d2:ea:b1:82:e7:70:79:
a4:35:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:13 2026 by rpki-client