Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: c31+rn4teT8WSMqsIs4YPBZYOo5FoyZoXlK+4elB72c=
Subject key identifier: FC:45:9D:78:F7:DB:2F:20:60:EB:C4:53:64:90:C5:98:34:75:E1:42
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 01A0DE05E4BDFA62588AAA23426560A4F097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: 02FC
Signing time: Sat 26 Sep 2026 14:02:03 +0000
Manifest this update: Sat 26 Sep 2026 14:02:03 +0000
Manifest next update: Sun 27 Sep 2026 14:02:03 +0000
Files and hashes: 1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: z5+DxAKDyz/M9wkPiDz+hwHuEZlb3/kEuq+73545Fv8=)
2: awws4Zg8dGTfI3KzZwB4bIm-Nto.asa (hash: DmofOOMoiDHXeSleMk3EA3S9L45l9Z1SDUpGjlromqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:e4:bd:fa:62:58:8a:aa:23:42:65:60:a4:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Sep 26 14:02:03 2026 GMT
Not After : Sep 27 14:02:03 2026 GMT
Subject: CN=fc459d78f7db2f2060ebc4536490c5983475e142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:a3:4c:28:d2:11:89:54:6a:7f:b9:61:c6:
70:49:af:df:16:c1:65:c7:de:ff:bc:73:63:9e:fd:
38:a9:1b:f4:e8:f3:5d:b4:12:07:5b:4a:a5:af:6c:
39:af:46:75:20:e8:1b:ca:42:42:95:29:85:19:25:
fb:97:f9:fc:87:6c:2b:4d:29:a9:8f:8e:05:37:c6:
33:57:87:8d:ae:ad:68:4b:b2:57:6b:85:43:75:ce:
ab:e3:d0:3b:6c:67:4d:aa:0c:ec:d1:ab:be:21:6a:
7e:d6:3f:02:7a:6d:ba:da:bd:ee:3e:86:cd:db:0c:
bb:5c:8f:ea:07:1b:08:79:6e:80:2f:f4:f8:56:39:
80:9a:70:75:88:67:6e:8f:07:8b:29:c7:fc:69:7d:
ca:ae:c7:51:bb:39:cf:8a:69:d1:c7:c9:18:ff:27:
cd:1e:d7:45:22:0c:6b:16:25:98:eb:af:9f:1e:3f:
68:6b:23:68:ce:ec:d0:85:54:75:62:a6:9d:2c:cf:
21:b5:1b:8e:02:8b:20:bf:83:5d:43:c8:53:0e:cb:
a0:72:a6:da:f5:bd:9e:5d:e6:48:40:4b:be:75:c4:
4b:f0:64:70:de:54:22:8a:25:78:e4:5b:e4:16:86:
9e:1d:02:31:f3:4f:66:c4:55:18:f1:c2:91:81:7f:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:9D:78:F7:DB:2F:20:60:EB:C4:53:64:90:C5:98:34:75:E1:42
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:14:75:77:7b:6d:a4:3c:4e:d9:93:ad:07:0e:5a:b3:5c:
6d:a3:7b:ca:a4:cd:92:35:d6:48:50:89:e6:f5:af:16:50:fa:
6d:f2:f3:f8:bb:2b:bf:d3:95:5e:58:ca:0c:31:bd:bd:9d:04:
94:62:50:1e:a4:d1:0c:dd:02:da:86:89:2b:2b:7f:bb:45:3c:
a0:d4:34:f2:1c:e6:dc:3b:4e:0e:a6:e7:0f:ae:3c:23:c5:5b:
b2:4c:a8:07:8e:69:d0:3e:5c:be:42:d1:b4:5b:e2:c9:1e:3a:
db:1d:51:31:fe:90:0e:b7:05:8c:fb:93:ad:00:90:5d:13:ee:
dd:bd:e5:53:ff:c5:9e:1e:20:9b:93:a6:4b:2c:14:35:22:28:
cc:74:2b:81:d9:e6:2e:3b:0b:31:24:7b:e3:8a:77:de:7e:f0:
f1:9b:6b:9e:ed:82:2a:c5:6a:4e:0e:de:5b:28:b7:a0:a5:c8:
99:0f:e2:7f:b2:cb:ef:91:84:ad:0c:ff:d3:78:04:46:aa:26:
be:00:a6:5c:4c:6c:20:66:9d:f9:4a:7a:8a:41:9b:b5:16:20:
3a:fa:02:70:28:c0:e2:fa:91:dd:19:73:b4:42:c9:3b:84:dd:
11:d2:82:26:32:23:6b:14:44:bf:8a:5e:3a:f0:91:3d:a6:8b:
45:3f:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:36:12 2026 by rpki-client