Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: SJEwxEIh1PrBAf8Lq5NP7krNqwkfXyMiBwHjyTAU4Rs=
Subject key identifier: 8C:FA:76:57:34:23:97:01:B0:B3:E1:54:46:91:A5:0F:8C:0D:EC:A4
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 019CAD5946AF5F6EF5412B7E3539812B77D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 05B2
Signing time: Mon 02 Mar 2026 07:00:35 +0000
Manifest this update: Mon 02 Mar 2026 07:00:35 +0000
Manifest next update: Tue 03 Mar 2026 07:00:35 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: 1SgbLVThZwKgaK6ufHceen1uJ7AEPZon0Yhx1o/yhxo=)
2: g_5AMoFOj5a0mYwjqCP6X5Eogc0.roa (hash: wHZf0niCFW9Zgd1CxrKbTTjY8FLkaeRzaQjI2AnGqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:46:af:5f:6e:f5:41:2b:7e:35:39:81:2b:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Mar 2 07:00:35 2026 GMT
Not After : Mar 3 07:00:35 2026 GMT
Subject: CN=8cfa765734239701b0b3e1544691a50f8c0deca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:24:70:8a:4b:fc:e9:00:e2:9a:3a:bd:09:
da:01:d7:f6:4a:25:a8:86:fd:db:db:22:a9:0e:fb:
59:1e:e7:68:4d:00:18:69:b5:26:f4:bb:ff:ba:ec:
94:0b:46:18:06:12:9d:44:5c:49:69:d5:68:2d:c3:
bd:7e:35:33:a0:26:94:80:24:10:1f:da:9c:4e:b8:
68:64:8d:ca:7a:4c:e9:7b:9c:00:5d:d3:fe:98:96:
e6:aa:78:22:b9:60:ed:7e:09:4b:b0:95:47:97:a3:
4e:74:d6:0e:65:86:77:52:ad:12:0f:a0:62:79:d9:
dc:35:17:60:64:71:cd:f3:0e:44:cb:03:54:03:d2:
93:49:52:b8:9b:a2:c3:33:9d:8c:a6:d7:27:74:34:
85:f5:a3:28:bd:23:a7:d5:b3:2a:96:f1:2f:49:2c:
b3:f0:42:45:c6:a8:e5:a4:88:1f:28:e0:49:68:ae:
9a:05:e6:57:94:90:cd:b6:4d:cd:22:1c:72:91:e8:
37:f5:fa:0d:6f:48:9c:3e:4a:23:33:d2:3e:4e:a9:
95:6f:8c:9e:84:c9:24:4b:aa:c2:53:10:0e:b3:f3:
57:de:0d:9b:a9:69:4f:cc:22:98:98:7b:99:bd:4c:
3f:55:3a:f0:96:58:e0:b9:8a:40:cb:39:0e:5b:29:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:76:57:34:23:97:01:B0:B3:E1:54:46:91:A5:0F:8C:0D:EC:A4
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f9:10:d3:68:5f:3c:b0:6e:d7:c8:5f:2e:66:58:c1:2e:ca:
e6:48:b9:0a:3b:5a:13:d5:00:ec:96:46:69:42:75:08:e4:96:
f1:d6:18:94:6f:9e:0c:21:89:a1:b6:51:85:c9:10:d3:fd:38:
3b:38:6d:5a:d7:70:9a:33:00:35:34:e1:44:74:58:af:b7:29:
e0:88:a5:b9:e0:31:04:c2:b1:e5:b7:e8:ed:71:a7:2d:80:72:
26:72:53:c4:05:aa:7b:6c:47:d9:40:30:93:6b:1a:c2:23:c6:
71:82:76:cc:e5:06:f8:7f:0d:ba:c2:ac:de:c1:ce:b0:b5:e9:
d5:49:7c:d6:83:f3:f0:3b:ea:82:6f:d3:37:5d:82:a3:95:84:
3d:de:37:e4:33:3c:59:40:5b:3d:96:18:70:c1:24:99:b3:14:
59:46:11:71:ff:d5:a0:43:ec:64:8f:3a:e6:48:f4:64:76:00:
a3:c7:ca:5d:cd:e0:5d:49:08:d9:9c:91:50:e0:24:cc:57:95:
7f:0c:93:05:b2:2e:f9:40:b6:58:20:95:f2:95:0d:09:a1:61:
86:7d:41:42:da:53:a4:ca:d9:da:f0:4a:14:9b:7c:3a:e0:c9:
ec:6b:a7:d5:1b:5c:1e:30:28:96:5f:3e:99:15:c6:a0:40:3e:
eb:7b:6c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWUavX271QSt+NTmBK3fSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzBiNGY1MjIyYTQ2ODVjNTRjZDI1YzRjYjhkNmY5MzIz
M2FjN2IwHhcNMjYwMzAyMDcwMDM1WhcNMjYwMzAzMDcwMDM1WjAzMTEwLwYDVQQD
Eyg4Y2ZhNzY1NzM0MjM5NzAxYjBiM2UxNTQ0NjkxYTUwZjhjMGRlY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaMkcIpL/OkA4po6vQnaAdf2SiWo
hv3b2yKpDvtZHudoTQAYabUm9Lv/uuyUC0YYBhKdRFxJadVoLcO9fjUzoCaUgCQQ
H9qcTrhoZI3Kekzpe5wAXdP+mJbmqngiuWDtfglLsJVHl6NOdNYOZYZ3Uq0SD6Bi
edncNRdgZHHN8w5EywNUA9KTSVK4m6LDM52MptcndDSF9aMovSOn1bMqlvEvSSyz
8EJFxqjlpIgfKOBJaK6aBeZXlJDNtk3NIhxykeg39foNb0icPkojM9I+TqmVb4ye
hMkkS6rCUxAOs/NX3g2bqWlPzCKYmHuZvUw/VTrwlljguYpAyzkOWynWbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz6dlc0I5cBsLPhVEaRpQ+MDeykMB8GA1UdIwQY
MBaAFC4wtPUiKkaFxUzSXEy41vkyM6x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWIt
ODYxNmEzMTBlODAzLzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWItODYxNmEzMTBlODAz
LzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/kQ02hf
PLBu18hfLmZYwS7K5ki5CjtaE9UA7JZGaUJ1COSW8dYYlG+eDCGJobZRhckQ0/04
OzhtWtdwmjMANTThRHRYr7cp4IilueAxBMKx5bfo7XGnLYByJnJTxAWqe2xH2UAw
k2sawiPGcYJ2zOUG+H8NusKs3sHOsLXp1Ul81oPz8Dvqgm/TN12Co5WEPd435DM8
WUBbPZYYcMEkmbMUWUYRcf/VoEPsZI865kj0ZHYAo8fKXc3gXUkI2ZyRUOAkzFeV
fwyTBbIu+UC2WCCV8pUNCaFhhn1BQtpTpMrZ2vBKFJt8OuDJ7Gun1RtcHjAoll8+
mRXGoEA+63tsyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:49 2026 by rpki-client