Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: MtABmsbEkBhTXiqxbK8pL1EHJvDX0pVG7Uo6i7QvpUw=
Subject key identifier: 9C:49:0B:1D:AA:44:BC:23:08:55:0D:48:7F:AB:C5:7A:DB:A8:F1:58
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019CAAC700B8647B054B3026B6E803CFE40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0774
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: RFSWeNQzdS0KAiLN/zwQnSepZ7ZbVh+0tqa+Gyl32/0=)
3: X-IMHZO2Sd5gZEJtndneD0fWreY.roa (hash: bfcFN5Xio94TqA5R1A/qDWjqIpl0U94c2LxTtPv9KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:00:b8:64:7b:05:4b:30:26:b6:e8:03:cf:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=9c490b1daa44bc2308550d487fabc57adba8f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:2c:7e:ac:ac:8f:55:cc:06:08:3e:a7:2d:
50:1d:9d:30:7d:82:a6:4b:43:78:8b:11:25:aa:7e:
46:a0:f2:a7:c5:8b:ec:8c:bb:93:58:ce:9a:5b:ef:
9d:2a:df:bb:c3:f1:ed:c6:08:0b:cc:d1:8a:2f:01:
8a:57:ee:6b:d2:6c:e6:b8:95:a7:87:94:32:ef:ee:
eb:01:0a:74:e3:7f:15:d2:7d:89:12:7e:f0:b5:9a:
97:65:bb:c5:e3:d0:84:f6:a7:87:a0:cf:5c:3f:6d:
6c:60:f8:a2:9a:0a:9d:11:bc:7f:57:f9:03:b9:44:
1e:2a:2d:c7:10:ce:09:95:1f:b2:9d:8f:e7:88:79:
b8:09:e2:e9:1f:5a:0d:df:dc:6b:31:a1:86:df:8e:
f3:13:83:13:2b:cb:3b:8b:b6:6c:a9:be:62:1e:71:
ec:f3:42:ba:aa:29:04:13:4f:00:39:b1:4e:66:74:
9a:e2:7b:f6:2b:98:55:43:07:d6:f4:ef:6c:6f:31:
1c:c6:49:17:57:43:ac:3a:3d:69:73:f6:e6:4d:9c:
f3:5f:1e:99:ee:8f:58:0c:50:ba:ad:6e:7e:3d:53:
66:17:4c:61:7b:e3:9f:6c:f7:e2:db:9f:44:6f:5d:
6e:fa:cc:af:47:63:d6:b9:59:57:7e:3d:fb:94:7c:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:0B:1D:AA:44:BC:23:08:55:0D:48:7F:AB:C5:7A:DB:A8:F1:58
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:64:9b:71:86:44:8f:c3:78:55:87:64:48:41:b5:84:97:
4a:b6:48:ef:8f:cf:57:fc:1b:58:55:cc:f5:8c:54:a1:0c:8a:
20:e7:b1:cd:73:45:d8:ee:11:14:55:5b:53:6f:62:ae:67:f4:
a0:96:24:b1:a2:77:ad:77:6c:d8:f3:24:d5:65:8a:85:91:a0:
74:c9:7f:d9:99:ae:42:4d:12:94:df:f8:5a:e7:17:40:92:a9:
63:e6:52:1d:5f:04:a8:4c:9f:bd:5e:49:13:c0:70:50:48:12:
a9:fe:f4:be:92:cb:1b:13:2c:f3:1f:7f:76:24:ec:03:f6:6a:
38:a7:a5:3b:21:c6:31:38:d8:89:db:00:6e:7a:03:ba:b7:55:
24:44:c7:f0:59:86:e3:03:3f:5e:02:de:a2:5e:64:c7:56:d7:
b8:70:51:e9:ea:9c:9a:c9:bc:52:76:02:52:70:cd:22:f6:c5:
21:4b:1e:d5:56:35:12:37:f1:dd:16:e9:02:30:ca:10:af:1e:
15:59:80:60:3d:72:4b:c0:1c:ce:e1:d3:d5:fc:ce:ef:cd:11:
65:44:f6:b4:21:ab:58:62:32:dd:ac:7b:76:03:c9:53:a9:03:
b0:33:1d:4b:b1:6b:a4:20:5f:22:48:66:6e:6b:c1:d7:aa:c6:
92:79:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:12 2026 by rpki-client