Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: tbZuHzbb8Vqp7RgmeZls55ukwijxz3EBnnrRtxIpzbw=
Subject key identifier: 29:E0:AE:BB:81:68:B1:8B:A8:4E:94:F9:92:57:C6:FC:FD:68:44:38
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01A0C2561A08B3B74608FB3F0D373068A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0994
Signing time: Mon 21 Sep 2026 05:00:17 +0000
Manifest this update: Mon 21 Sep 2026 05:00:17 +0000
Manifest next update: Tue 22 Sep 2026 05:00:17 +0000
Files and hashes: 1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: I8vSqUX0DRwJmOV+uggZ8823OAz6OOmfAwalRebuELQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:1a:08:b3:b7:46:08:fb:3f:0d:37:30:68:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Sep 21 05:00:17 2026 GMT
Not After : Sep 22 05:00:17 2026 GMT
Subject: CN=29e0aebb8168b18ba84e94f99257c6fcfd684438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:1e:ca:2b:1a:0c:6f:de:5d:3c:da:11:af:
92:48:f1:0b:03:3a:30:0d:8b:d0:96:72:03:c6:98:
67:2c:db:d3:f8:f0:2d:d1:bb:0b:e9:f0:7a:46:98:
8e:b8:62:63:08:fb:b0:dc:d5:96:80:62:36:7d:64:
1e:ea:67:16:22:f3:8b:8b:49:9e:74:12:43:5a:2b:
26:28:5e:48:17:34:11:eb:6f:d6:54:10:b1:8b:d2:
0c:5b:bc:d2:49:15:50:03:2c:3c:70:d9:3d:e4:17:
5a:4c:65:be:45:e9:73:b2:7e:1d:bb:db:47:1a:ee:
3f:14:a6:d3:ca:bd:7d:08:bf:f1:1d:d8:eb:09:bc:
e3:4f:38:05:10:21:2d:25:6a:1d:71:14:1a:e6:ee:
de:64:0c:63:08:13:25:dc:d1:5f:aa:bf:15:93:2b:
03:2e:90:39:c6:7a:eb:f1:e1:00:cb:fc:75:8b:60:
de:48:61:41:39:0c:27:b7:46:73:5e:bf:4b:84:54:
cd:67:79:8d:cd:22:59:fe:34:04:fc:e9:fd:45:f9:
3a:cf:60:0a:26:17:0d:93:b1:0f:c8:08:af:0e:4b:
fd:40:0e:62:82:7e:38:19:cd:21:6d:8b:86:65:65:
a6:7a:52:be:32:63:e8:d3:44:d5:2f:e7:6e:0f:73:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E0:AE:BB:81:68:B1:8B:A8:4E:94:F9:92:57:C6:FC:FD:68:44:38
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:93:21:a3:0e:de:05:64:e6:c3:d6:e4:ab:27:b6:c3:31:
fb:2b:6d:83:9e:d4:d4:19:82:a6:ef:14:6f:7b:23:28:55:a2:
ee:ab:84:dd:9d:64:92:69:19:6c:2f:7e:63:08:d2:2e:2e:05:
fe:4e:8a:17:6c:e9:6b:02:d9:2a:29:9f:39:23:12:85:82:2a:
c5:36:db:b4:33:43:f3:b8:ef:20:a9:dc:0e:6b:f6:af:3f:bf:
a3:bb:e2:f0:e2:73:d1:61:79:9b:95:e7:b4:81:97:00:67:e6:
34:a3:6e:59:ae:0e:45:70:e9:4b:0e:1a:63:8e:48:8c:a9:22:
c5:8f:66:ff:e1:ca:c7:4b:2f:6a:87:75:11:d4:e3:42:63:82:
67:65:b6:06:87:e4:2d:14:52:40:5b:69:64:14:99:b3:1d:57:
67:0f:78:4c:62:70:b0:0a:83:63:0f:e0:11:d5:f9:f7:e8:b2:
b8:4e:02:d8:4c:bd:48:60:09:65:db:20:f7:27:2e:92:98:d4:
c2:7c:b1:92:73:40:1c:14:57:0a:81:24:95:54:86:e3:8d:c9:
8e:ee:8c:e3:1c:85:87:46:34:15:af:83:d8:6d:c9:7d:d8:d4:
8e:20:01:40:2b:bc:dc:cf:76:27:68:d4:34:a7:a0:c9:89:66:
1d:8b:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:26:58 2026 by rpki-client