Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: HsY+i+Yh2i1WPtZIqGo7CnVM5O+vsqiL8zWoeZCZgyo=
Subject key identifier: 4C:80:48:4C:D5:90:54:95:98:2D:D4:C8:F9:53:30:34:A0:F4:08:2A
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019FAA50F6FCD1E3DD85751325545C9F6106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0903
Signing time: Tue 28 Jul 2026 20:01:00 +0000
Manifest this update: Tue 28 Jul 2026 20:01:00 +0000
Manifest next update: Wed 29 Jul 2026 20:01:00 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: WCf1aNWa32srt6ZOQXE9eqYsd3kowHywGjLx0S6hk+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f6:fc:d1:e3:dd:85:75:13:25:54:5c:9f:61:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jul 28 20:01:00 2026 GMT
Not After : Jul 29 20:01:00 2026 GMT
Subject: CN=4c80484cd5905495982dd4c8f9533034a0f4082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:80:03:0d:fb:fa:ae:90:a8:c1:4d:f1:1c:
78:e7:f8:ec:88:b3:55:88:54:76:37:67:f9:fe:fc:
d0:bd:e3:f5:8f:a9:37:40:51:d9:0b:cc:6b:bf:72:
50:08:3b:3a:ce:66:79:28:f6:0e:a1:8b:68:ff:87:
ec:97:c7:30:9f:50:30:00:69:24:3e:c3:ae:c2:1a:
fc:29:d5:a6:b6:1d:1d:9a:7b:7f:4f:05:25:92:f1:
af:56:af:b5:70:01:ad:a7:d4:02:a1:81:fb:13:eb:
fa:2b:1a:d7:69:85:7f:11:1f:20:8c:f2:29:73:59:
6a:aa:ff:c7:04:a9:a7:4e:61:c7:37:dd:5f:5b:de:
b7:83:fc:dd:f0:52:0f:4d:3d:e3:3d:e7:3a:45:f2:
16:ac:53:be:31:e1:4f:09:85:80:b9:25:fe:e0:a8:
eb:5e:3e:0a:10:84:49:c6:a3:f1:62:a2:c5:47:3c:
39:68:4b:72:c5:5f:42:72:e6:5c:08:c5:a6:08:e5:
a7:09:43:bc:a3:0d:95:e9:be:25:71:12:31:fd:0f:
79:6e:1c:fe:eb:fc:e7:dc:e9:6b:39:81:5c:99:d8:
55:2f:ab:3f:d1:87:eb:a0:e5:8f:91:47:c4:22:ee:
07:9c:00:2b:cc:fb:92:85:df:7a:c0:cb:67:9f:51:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:48:4C:D5:90:54:95:98:2D:D4:C8:F9:53:30:34:A0:F4:08:2A
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:ad:ec:54:5d:00:1a:f1:45:90:92:2f:40:42:90:c1:4d:
e7:0a:33:ef:f8:f3:4d:07:46:02:7f:27:d1:fa:1d:a4:d4:5f:
b2:73:c7:ac:c0:1a:6c:95:82:bf:78:82:dc:be:32:a6:02:d3:
80:7b:3d:b5:b6:7e:49:8c:12:41:bd:49:56:30:67:83:9c:1a:
20:f0:80:33:db:40:ab:cd:75:69:bd:fb:76:cd:de:99:4f:08:
44:c1:1b:31:db:25:b6:26:59:3e:03:a7:46:22:ea:69:9e:ee:
25:d8:93:65:a2:6c:6d:e3:c8:6c:6e:46:e2:53:da:c7:b1:42:
b0:22:a7:3d:85:f6:21:00:c4:67:04:28:0b:40:c7:13:1b:05:
1b:15:38:9a:dd:6a:6a:5c:92:65:cb:04:95:59:f8:31:22:4b:
9d:8e:53:55:bc:b7:13:16:97:3e:ab:d3:17:71:63:dd:27:b9:
a9:97:f8:71:1b:41:0c:43:cc:f5:d0:02:0c:c4:e4:ab:fb:11:
35:7d:04:84:e8:6f:ce:94:fa:c4:ce:c3:3e:d4:11:27:ea:27:
98:7e:63:b5:46:56:bd:24:96:88:95:4a:42:35:ad:39:50:04:
99:00:05:b8:1a:2d:f0:af:14:5c:73:b7:88:3f:ee:83:17:5b:
ef:b7:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:02 2026 by rpki-client