Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: ELeHepfR7NA2ekW44WLYxH4hinRtF485Bl2ennRD6z8=
Subject key identifier: B6:EB:0E:5E:97:1D:F7:DF:48:2A:98:70:81:8C:B6:CF:98:18:71:83
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019D984FF2C3444AE83F0081B417DCE4226A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 07EF
Signing time: Thu 16 Apr 2026 22:01:09 +0000
Manifest this update: Thu 16 Apr 2026 22:01:09 +0000
Manifest next update: Fri 17 Apr 2026 22:01:09 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: MvBWzS4WxAahsWvqE3RAX89LQcqzwlV0hKyImHML0o0=)
3: X-IMHZO2Sd5gZEJtndneD0fWreY.roa (hash: bfcFN5Xio94TqA5R1A/qDWjqIpl0U94c2LxTtPv9KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f2:c3:44:4a:e8:3f:00:81:b4:17:dc:e4:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Apr 16 22:01:09 2026 GMT
Not After : Apr 17 22:01:09 2026 GMT
Subject: CN=b6eb0e5e971df7df482a9870818cb6cf98187183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:93:fd:e5:1a:ab:ad:c7:b1:fd:1e:74:bc:
4c:b4:5c:8c:f1:c1:19:27:70:b5:ca:af:40:f1:01:
ca:d0:91:1e:87:82:ed:a0:b3:54:18:5f:ff:fc:75:
0a:05:a2:5b:a0:dd:af:14:f8:d2:bf:91:75:51:58:
e9:7f:01:87:23:14:ab:cd:1f:83:cf:7b:33:f5:c5:
16:a6:c8:b4:17:f5:6d:da:3f:06:0f:2d:72:b6:09:
11:53:5f:1d:1c:87:65:75:ad:77:86:12:53:eb:e2:
7a:da:41:71:7b:60:72:0b:b7:dc:92:94:85:15:14:
9e:30:82:40:5e:56:5e:a1:4e:50:b1:4c:bc:5f:15:
a0:e7:b4:52:1e:e1:37:58:96:5f:7f:8c:03:24:fb:
c4:40:26:24:b5:b9:a1:4a:8d:7d:eb:2a:5b:9c:9a:
49:ed:b8:20:8d:b2:6a:d8:be:bd:30:55:db:6e:60:
6d:3d:1a:a8:72:31:7a:4d:3f:65:74:90:3b:e6:b4:
a5:6e:f6:79:e8:97:ce:15:4c:75:54:fa:e0:f1:66:
5b:0d:d1:ad:88:a6:1c:c5:66:62:14:7d:35:91:c3:
fd:e9:22:e8:7c:71:a4:b9:e8:dd:b5:39:15:43:42:
37:e0:6c:95:d3:78:8a:9f:46:20:f5:12:dc:d1:b4:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:0E:5E:97:1D:F7:DF:48:2A:98:70:81:8C:B6:CF:98:18:71:83
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2c:56:e5:22:ad:2a:ea:3f:90:2e:d0:44:1f:28:6d:78:c4:
60:12:9f:46:89:81:af:a7:88:be:2a:e3:b4:98:31:fa:5a:ad:
c2:56:c5:72:d4:16:45:44:e6:0c:8f:a0:df:8e:9d:ce:d9:12:
f9:94:22:5f:df:47:31:f2:9a:40:82:6f:c7:c3:7a:cd:a0:ac:
f1:a9:f2:85:fd:6a:38:39:82:7a:ae:49:8b:c0:6b:bf:83:5a:
3a:f9:18:62:e7:6c:a5:22:d2:ae:9f:68:a2:81:69:40:24:ba:
a7:37:e8:33:e5:8c:f5:1e:74:02:5b:c4:2f:03:4e:75:93:8c:
40:5f:fe:8b:ea:e3:a1:10:f8:b8:b9:fd:81:d4:19:ed:7c:72:
07:a1:e1:9a:58:d0:30:05:5b:fd:7b:46:17:95:58:f7:1d:6d:
f1:22:df:9b:07:38:71:31:bd:7d:f6:7d:b4:df:f1:74:87:12:
63:ce:02:38:47:87:db:f6:87:43:c7:37:1e:dc:d6:8c:c6:36:
19:9b:59:ce:5b:c6:f1:6b:30:cf:13:cd:2a:5d:68:74:d6:ae:
99:39:b8:39:a1:59:55:6a:f0:29:88:4c:55:38:10:4b:dc:f2:
e1:ba:71:0e:d1:0c:30:32:62:e9:ee:74:e7:dc:f2:a0:65:e9:
fa:ef:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:23:36 2026 by rpki-client