Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: WVoglhEogrUPvcphHhPEg/ThljT15/gjbpxsHdHDOEQ=
Subject key identifier: 52:DD:DD:F9:5B:A1:3D:F7:29:72:42:01:E4:2B:B4:FC:06:5A:FE:2C
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 01A0D34A68C2F98041FABEDAC82C6CADE186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 0440
Signing time: Thu 24 Sep 2026 12:01:04 +0000
Manifest this update: Thu 24 Sep 2026 12:01:04 +0000
Manifest next update: Fri 25 Sep 2026 12:01:04 +0000
Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: RD6kWm6Wo6M/u+Oz9xXKhD8CSOrtgA30JVKTfkAww8Q=)
4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:68:c2:f9:80:41:fa:be:da:c8:2c:6c:ad:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Sep 24 12:01:04 2026 GMT
Not After : Sep 25 12:01:04 2026 GMT
Subject: CN=52ddddf95ba13df729724201e42bb4fc065afe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:08:1a:48:64:c2:31:60:31:8c:9a:eb:4e:
2a:d3:95:90:88:f2:45:e5:ec:34:ca:e0:68:56:31:
ca:28:b8:14:7d:8c:d6:95:ba:1b:e5:97:ba:d2:1f:
fb:8b:5d:bf:b7:21:06:77:e7:87:42:e0:58:53:f6:
e9:72:79:b6:28:07:fc:f9:2d:dc:5f:bb:8b:b1:91:
c0:a8:53:43:c7:08:5a:b6:e5:b5:cc:30:44:b7:54:
21:31:fb:78:e8:d1:a7:ea:b4:ad:e7:f8:82:88:6f:
ea:01:52:49:33:73:e7:af:af:1a:e6:62:b4:e4:1f:
45:9e:4a:cd:a6:b7:ac:0b:88:9d:71:fc:75:7e:7a:
31:e6:30:e3:b7:c8:fa:1a:2e:4d:34:68:e6:e4:8d:
c7:7c:d5:0d:20:3b:f2:5b:e7:7a:9b:81:81:8a:33:
ea:d6:70:1f:aa:e3:ac:01:f1:de:69:2e:cc:9e:92:
86:ea:22:e1:3f:10:2a:41:0c:05:30:ff:ff:28:03:
c1:87:db:d0:d7:17:cb:c0:18:96:e6:e8:98:e1:75:
5d:c0:6f:a4:8a:0e:7c:62:cb:37:a9:ab:b1:55:56:
71:49:ff:c8:36:a2:5f:a6:a8:4d:bd:ab:61:f9:5e:
0b:79:84:81:4b:60:0a:a5:46:06:06:40:f2:af:89:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:DD:F9:5B:A1:3D:F7:29:72:42:01:E4:2B:B4:FC:06:5A:FE:2C
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8f:71:1d:e8:77:94:8d:45:bb:0f:9b:c4:67:68:2d:22:81:
e0:02:e0:c7:8b:68:f4:f5:29:ae:23:d0:e4:43:ff:93:fb:bc:
8f:88:f5:77:4a:92:84:e8:ec:55:7a:e2:47:bb:9d:b0:12:c0:
0a:36:ba:73:7a:20:5d:36:05:60:0c:20:88:27:d3:d9:d1:b9:
21:a0:2c:6d:9f:3a:96:9f:3a:62:bc:80:79:41:79:d5:44:11:
11:8c:2b:ff:8a:16:85:9f:56:34:21:04:5a:e7:af:db:9c:3d:
49:4b:54:4a:a9:a1:23:89:70:bb:0d:ef:1a:cc:43:3c:bb:23:
aa:3c:0d:36:89:fc:de:81:38:2f:d8:2b:75:b4:a1:a6:ca:da:
81:b5:4e:72:9c:fe:89:a6:ff:21:1d:8a:ad:dd:6c:82:2b:15:
35:d5:0f:1a:a4:b3:f8:f9:01:63:16:64:94:08:b8:e5:2f:0b:
b7:6b:7d:8a:38:2a:23:80:61:e4:4b:36:42:c9:1b:77:d8:ad:
33:38:2c:f6:0a:8b:db:32:ab:82:39:a6:27:5f:a9:a5:85:91:
52:4b:80:34:b5:16:61:4a:50:3f:38:c8:06:86:59:67:87:a5:
8b:2a:a0:f4:80:ce:44:e4:ee:9d:61:f3:d2:07:a1:bf:77:bc:
27:67:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:56 2026 by rpki-client