Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: Kh0X3hzxY+Kv7vYH8glLmCBkWyY47FxuzrPAXwBeUpk=
Subject key identifier: 00:1C:6B:A9:EA:0B:08:0F:A8:99:1F:61:85:4A:E0:24:C3:C5:C7:0D
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01A0C4447F03B27BAAA13114168342AE069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0995
Signing time: Mon 21 Sep 2026 14:00:18 +0000
Manifest this update: Mon 21 Sep 2026 14:00:18 +0000
Manifest next update: Tue 22 Sep 2026 14:00:18 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: 3E8ghNj+AOsm61H6YrjFo+fMilOOi6AAC1/XwQfMbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:7f:03:b2:7b:aa:a1:31:14:16:83:42:ae:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Sep 21 14:00:18 2026 GMT
Not After : Sep 22 14:00:18 2026 GMT
Subject: CN=001c6ba9ea0b080fa8991f61854ae024c3c5c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:ba:8a:e6:93:2a:1d:e8:5d:5a:a0:17:5e:
74:45:0d:2d:e9:97:fb:b2:ca:62:fa:38:96:57:97:
d5:dd:fc:8a:9b:1d:83:f9:2b:37:c3:d7:81:e4:cb:
0d:73:d4:ca:cf:b8:78:68:11:72:7c:30:fd:31:22:
2b:bf:26:94:2d:66:80:5e:70:03:f3:ed:9d:52:18:
a6:79:cf:bf:25:7d:27:b4:48:ae:22:19:55:97:04:
17:fb:54:ea:9b:d2:34:0b:de:94:0a:64:5d:d4:4b:
0e:4d:4e:df:9d:d0:36:e5:33:6f:cf:93:70:21:a7:
d8:18:12:25:9e:00:c7:7d:8f:43:dd:08:3a:74:8d:
08:db:6c:fd:fd:cb:f2:ca:d7:0a:35:4a:22:cd:fe:
0b:e6:04:14:47:e4:d1:91:ff:16:8d:97:b5:b5:26:
de:4c:22:33:0c:2e:ea:00:2a:18:a7:8f:a8:45:46:
c7:7a:7a:76:16:c0:3a:a3:67:ca:bc:8d:84:8e:23:
8a:53:15:20:1a:50:e4:97:20:7d:5d:52:1d:3f:97:
1c:db:d6:fe:50:ee:b5:09:b7:98:5a:7d:83:17:fb:
e3:31:57:d4:53:6e:09:ce:55:e4:e0:4d:c0:b3:da:
f8:86:90:ab:63:c5:52:bf:2a:19:f3:1f:c6:e1:32:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:6B:A9:EA:0B:08:0F:A8:99:1F:61:85:4A:E0:24:C3:C5:C7:0D
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1d:50:a2:44:1f:70:26:bd:c2:8d:23:66:40:24:d0:41:76:
98:8e:e8:6d:af:b1:d2:3f:c0:7e:13:6f:64:d0:29:1b:ae:fb:
94:8d:b3:8c:f9:c8:63:53:b6:84:37:01:89:39:73:cc:63:5c:
96:6d:42:c7:6c:58:6c:69:5a:e6:22:2c:22:71:cf:54:b6:96:
6e:35:a8:48:d0:b0:0a:af:10:06:1c:d8:32:cb:72:e8:93:bf:
33:62:f2:02:2f:37:5b:e7:0c:f8:18:45:64:06:a6:9e:3e:f2:
b9:06:e9:28:81:ad:ac:dc:37:b5:4b:f6:71:d1:c0:73:2f:8a:
04:6d:aa:9b:e8:a0:c0:9d:a4:d0:93:04:08:d7:11:a6:05:f1:
73:9b:9c:90:78:a4:03:8f:b7:f8:81:32:db:4f:05:19:b0:5e:
c4:6b:59:a8:a0:da:62:2d:51:2d:fd:5b:3c:9a:3a:d1:49:8a:
f0:a2:e7:ee:7b:cc:45:d7:bb:3f:e2:2f:67:23:f2:09:2c:f2:
b0:eb:1b:e0:22:e7:2f:29:c9:dd:c5:3f:6d:fc:16:3f:8a:0f:
81:3b:aa:96:dd:bf:bd:16:f8:ee:04:46:75:e8:8f:ae:df:02:
c1:dc:55:b2:d8:0f:b1:6c:43:43:5e:46:da:29:eb:14:f4:90:
28:56:d8:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERH8DsnuqoTEUFoNCrgabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjYwOTIxMTQwMDE4WhcNMjYwOTIyMTQwMDE4WjAzMTEwLwYDVQQD
EygwMDFjNmJhOWVhMGIwODBmYTg5OTFmNjE4NTRhZTAyNGMzYzVjNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zm6iuaTKh3oXVqgF150RQ0t6Zf7
sspi+jiWV5fV3fyKmx2D+Ss3w9eB5MsNc9TKz7h4aBFyfDD9MSIrvyaULWaAXnAD
8+2dUhimec+/JX0ntEiuIhlVlwQX+1Tqm9I0C96UCmRd1EsOTU7fndA25TNvz5Nw
IafYGBIlngDHfY9D3Qg6dI0I22z9/cvyytcKNUoizf4L5gQUR+TRkf8WjZe1tSbe
TCIzDC7qACoYp4+oRUbHenp2FsA6o2fKvI2EjiOKUxUgGlDklyB9XVIdP5cc29b+
UO61CbeYWn2DF/vjMVfUU24JzlXk4E3As9r4hpCrY8VSvyoZ8x/G4TJCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAca6nqCwgPqJkfYYVK4CTDxccNMB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABB1QokQf
cCa9wo0jZkAk0EF2mI7oba+x0j/AfhNvZNApG677lI2zjPnIY1O2hDcBiTlzzGNc
lm1Cx2xYbGla5iIsInHPVLaWbjWoSNCwCq8QBhzYMsty6JO/M2LyAi83W+cM+BhF
ZAamnj7yuQbpKIGtrNw3tUv2cdHAcy+KBG2qm+igwJ2k0JMECNcRpgXxc5uckHik
A4+3+IEy208FGbBexGtZqKDaYi1RLf1bPJo60UmK8KLn7nvMRde7P+IvZyPyCSzy
sOsb4CLnLynJ3cU/bfwWP4oPgTuqlt2/vRb47gRGdeiPrt8CwdxVstgPsWxDQ15G
2inrFPSQKFbYJw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:11:40 2026 by rpki-client