Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: ObdAHLG/xG0eBvzMue16oNyuvtZRrF6nKI1E5PwLH98=
Subject key identifier: 4F:3A:5A:B5:C3:CA:F9:EA:52:08:D3:71:17:1A:37:58:F0:BE:2D:A6
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 01A0D5702D8215B119908AF9815D4CEC1257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0EE9
Signing time: Thu 24 Sep 2026 22:01:33 +0000
Manifest this update: Thu 24 Sep 2026 22:01:33 +0000
Manifest next update: Fri 25 Sep 2026 22:01:33 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: g5Mo78JLVbSFjaJjLjVSuDBo8oU+5Kjs1lWjJc5BHCc=)
2: rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa (hash: i5/iyo2rt1F0mdV5nHS/+ieV6kBSf0qdaLWU+lHJUz0=)
3: sUdV13N_3SZTo-Y2HxDJ2JHQUbc.asa (hash: JJciRc7IP4JGmv4ypRYcIbGSjCbG/DkgLQ/P1JAxCHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:2d:82:15:b1:19:90:8a:f9:81:5d:4c:ec:12:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Sep 24 22:01:33 2026 GMT
Not After : Sep 25 22:01:33 2026 GMT
Subject: CN=4f3a5ab5c3caf9ea5208d371171a3758f0be2da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:62:d5:a8:3d:1d:68:a2:e3:1a:98:60:1a:
b7:32:e8:a2:53:32:3d:7f:3b:02:e7:ca:d8:7f:81:
83:5a:e5:1a:ec:d5:31:7b:ae:13:74:04:7d:fc:3a:
8b:28:85:36:01:d6:a7:85:c3:f3:15:45:47:3d:e7:
ad:f0:85:46:e1:58:0a:c2:a2:71:a8:6d:16:94:78:
d4:e2:fb:97:3c:20:75:3c:c3:6d:6b:c4:94:51:db:
3f:d8:f1:a5:34:86:df:70:bd:29:33:bc:a1:ed:f5:
01:f1:b1:dd:2b:76:e1:ae:1a:33:fb:f5:1c:5c:b6:
d0:95:f4:26:67:4c:e3:2b:88:84:86:79:7f:f1:22:
c7:4f:3b:4a:9e:eb:dc:34:fc:b3:84:37:bb:7b:5d:
92:93:a0:fd:0f:a3:f4:63:98:5d:6e:dd:bd:98:07:
8c:e5:92:bd:f2:76:04:b8:d8:36:03:c9:22:bb:8f:
8c:c9:b4:3a:8c:af:65:f7:1b:0d:2a:44:12:bf:13:
93:33:97:cc:9a:3f:fa:e8:d1:d4:af:1a:59:d3:16:
f9:df:6b:9d:04:8d:a9:49:ca:8f:81:c0:7a:ff:ff:
8d:bd:9a:ff:2e:38:8f:ab:9f:39:a9:54:5d:4a:da:
a9:29:08:63:40:cc:01:43:70:af:db:46:0f:cc:04:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:5A:B5:C3:CA:F9:EA:52:08:D3:71:17:1A:37:58:F0:BE:2D:A6
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:29:27:99:58:a7:ab:17:e1:f4:6d:86:dc:d3:fc:d2:88:8d:
23:12:3e:90:c3:2c:24:56:6a:4f:69:ea:02:98:f3:6b:3a:0d:
48:3e:a6:53:6f:4c:96:61:60:d4:b1:ce:6d:c0:22:69:20:6d:
bf:e1:13:9a:53:74:10:e2:7f:f8:3e:24:cc:d6:ca:4c:75:3e:
23:bc:40:3a:f7:5b:75:2e:a8:c3:dd:34:7a:ab:23:ca:95:d6:
6c:f6:91:f7:7d:97:a8:a3:9c:a2:d1:68:78:4a:c2:7c:23:ec:
f9:34:20:cd:bc:d0:8f:e3:10:69:08:c4:fe:91:68:bf:55:42:
03:76:b4:84:0c:c1:33:c4:83:e6:9e:60:0f:b8:6c:61:0d:2d:
7d:a1:1f:84:93:d5:54:9d:5f:c6:6b:f7:13:2d:e5:ad:ee:e3:
97:5e:bf:63:6e:9c:d6:58:81:21:9d:ba:e8:43:36:37:83:a1:
f7:33:51:35:2c:1c:a2:6c:c7:77:06:10:87:b6:ea:90:f2:4c:
9a:f3:a8:c4:75:30:f6:b0:63:12:b8:1b:36:b4:74:57:9b:4f:
fa:71:fb:11:af:f2:56:b0:85:65:8b:1e:f4:25:ec:39:60:8a:
f0:02:06:a1:c1:c3:e9:bb:9b:2c:5f:bb:7e:8b:3d:11:10:8f:
35:9d:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:14:36 2026 by rpki-client