Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: z69ZEihSsxULmmTLAhH+TML5Sr/4/JUXTasTKbRmlm4=
Subject key identifier: AE:74:FD:69:C6:96:67:72:DF:07:E6:0E:F0:F7:81:31:5E:77:93:B2
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 019D98F4052C57AF18C8AE70C020C83D9669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0D3A
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: Byo/KUqnAThFtHxgs80q1iIlNWNeABP/wbap0o7xyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:05:2c:57:af:18:c8:ae:70:c0:20:c8:3d:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=ae74fd69c6966772df07e60ef0f781315e7793b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:47:d6:17:ce:2b:e3:19:89:f7:01:cc:0c:
dd:0e:c0:05:ef:58:cb:45:4e:fc:a4:9b:ce:f3:86:
1e:97:16:41:36:a0:c6:12:b8:f8:0c:0d:86:8f:58:
0e:ee:b4:b4:59:3f:a4:10:f9:a2:4d:2e:70:85:50:
5e:31:18:2b:44:15:a3:19:e6:f5:eb:af:ca:c7:63:
83:10:10:e1:cf:54:27:cf:ce:6c:be:ef:39:71:fe:
1f:14:7c:9f:3f:b4:4b:da:96:fa:ae:91:cc:41:95:
2b:5b:4f:81:c7:36:88:72:f0:c0:fa:de:98:d2:10:
8e:44:f5:cb:59:e2:fa:05:26:4f:91:03:6a:93:46:
ac:df:ee:65:79:a8:cd:23:ff:f5:30:73:8f:6b:8a:
c6:87:9b:12:f3:f7:1b:c8:4b:70:0f:f4:73:ba:9f:
9f:c9:49:03:0b:b2:4e:fe:aa:b6:09:4e:13:fe:2b:
48:46:e4:a7:c1:e6:e7:a4:69:86:1e:90:4c:93:ba:
89:da:80:53:9f:ab:30:4c:ed:04:09:7e:29:8a:bb:
2a:10:53:13:9f:e2:5d:fc:d3:2e:1b:26:3c:21:06:
db:79:d0:3e:95:4f:cb:c4:25:88:c0:86:da:2d:30:
72:3a:11:2e:78:17:40:25:ab:8e:39:b5:da:26:1f:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:FD:69:C6:96:67:72:DF:07:E6:0E:F0:F7:81:31:5E:77:93:B2
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:45:21:e6:b8:53:66:0a:db:95:bf:68:04:33:d9:59:0e:c1:
d4:9e:ef:d1:1f:44:31:6d:1f:69:bc:f5:8f:af:43:98:0e:3a:
a5:7e:b8:96:97:34:c9:df:57:ee:b4:90:16:7b:eb:f1:50:ad:
7a:5a:67:f1:31:c4:de:48:79:f7:9d:cb:f2:be:ae:9e:f9:dd:
74:8b:7f:69:21:cd:be:f1:c3:ef:6b:23:13:63:32:73:45:95:
eb:84:27:b4:81:15:75:aa:27:6a:be:a5:46:03:25:22:6d:5d:
bd:ea:ab:78:f5:52:c3:fe:74:36:ac:c5:4d:b6:da:b5:b7:83:
9a:57:62:22:14:d5:13:18:87:9b:b9:4a:ad:0e:33:1a:e4:19:
18:98:33:55:25:0c:49:4a:5a:99:e4:ea:2f:23:47:34:d5:28:
38:5f:74:09:4d:d1:5f:61:2c:39:fe:b0:69:9d:4d:13:14:a6:
ff:06:50:3f:97:43:8b:26:da:bf:f9:26:1f:21:98:f1:8a:b8:
7a:20:ea:bb:03:cc:4a:d4:71:06:b5:7e:14:a3:ba:e9:85:3d:
20:a2:29:bf:23:7a:90:66:bc:1e:74:d6:73:ce:3c:5b:b9:04:
3c:0d:40:bd:a3:14:f2:cc:d7:c5:6e:26:63:65:b5:f6:7f:67:
8e:f0:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:18 2026 by rpki-client