Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: I5pIWtZCE+hYV33Aa0s2ESCHH8c2ZiRI2XS+1lxf3mw=
Subject key identifier: CA:2C:D2:6A:09:9D:DA:9B:21:F8:8D:58:C4:D4:79:78:9D:5E:6D:22
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 019D99CFBE982E0AC4B5E3249CFF3D359D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:00:21 +0000
Manifest this update: Fri 17 Apr 2026 05:00:21 +0000
Manifest next update: Sat 18 Apr 2026 05:00:21 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: jYtfXJWpmwthdxHLjAUtJZWjTFGZ7CJK4q40fFhH2gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:be:98:2e:0a:c4:b5:e3:24:9c:ff:3d:35:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Apr 17 05:00:21 2026 GMT
Not After : Apr 18 05:00:21 2026 GMT
Subject: CN=ca2cd26a099dda9b21f88d58c4d479789d5e6d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:a4:5a:26:a6:99:75:f0:a0:8f:c1:30:5b:
f4:5f:0f:44:b6:d9:46:f9:17:1b:a4:f5:19:10:fe:
10:f9:a3:79:7f:7b:68:d9:77:98:8a:f9:45:18:46:
6e:c7:61:ea:8c:ba:79:0c:95:58:a9:f1:db:89:3c:
5c:03:f3:18:7a:05:38:b2:64:e5:cd:5f:f5:1a:9e:
38:ef:3a:64:e0:be:17:11:91:1c:e7:65:c9:dd:05:
eb:31:a3:18:f6:20:c6:bb:c9:b8:ce:fe:06:5c:1a:
c8:14:d0:70:66:d9:47:3d:cf:c2:34:bc:01:6e:1b:
d2:dc:d7:68:63:df:46:a5:0f:d3:d3:60:4a:6f:bd:
1d:8e:2f:0c:5c:64:ff:fe:0b:b8:c7:ec:c9:d9:26:
b8:81:f1:19:08:e8:12:a6:69:d6:56:2a:fc:a1:ea:
67:d8:04:b4:2a:01:d8:14:74:96:32:d4:21:c6:5d:
2b:3e:90:2f:27:43:f5:d7:2e:fa:da:a0:74:77:02:
5c:93:29:b3:d9:57:22:a6:47:f0:ad:04:45:8a:17:
d0:48:a2:11:25:f7:17:8f:21:91:8d:78:cf:eb:05:
59:dd:9c:21:83:cf:35:5b:cb:72:8b:17:26:34:13:
6e:b3:30:1e:43:ab:d5:4d:aa:ec:41:8c:47:26:7a:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:D2:6A:09:9D:DA:9B:21:F8:8D:58:C4:D4:79:78:9D:5E:6D:22
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:16:d2:fb:a6:7c:93:55:57:db:87:a6:84:0d:51:33:e1:
87:a4:bd:61:ce:fe:46:72:7a:50:57:12:b9:77:29:d0:75:32:
24:86:cf:02:7f:3e:66:47:6c:51:2c:f5:2d:e1:70:0c:b8:dc:
b9:46:b8:90:52:fb:ce:f4:b1:ea:c1:66:a3:93:65:cb:32:73:
19:d0:48:f1:c0:22:7e:37:88:e1:81:f6:b0:f5:ad:0d:12:5c:
33:95:f0:50:89:61:8b:3b:b5:b9:db:fc:8b:ce:ba:92:e7:35:
ba:c6:0e:db:11:45:62:61:f5:b4:9f:65:32:b2:a1:d3:f4:52:
3a:a7:f3:1c:36:83:8e:f3:19:56:53:aa:8a:18:e1:7a:c4:15:
02:95:a7:23:8d:20:72:63:ff:ec:73:f5:0a:3e:5a:8a:b4:8e:
38:3e:a5:8b:70:77:6b:c8:28:3a:1b:91:cb:8f:3f:c1:92:b1:
bc:ed:43:e8:2b:18:6e:9e:43:82:ae:e8:72:32:23:2b:4d:c2:
77:c7:70:97:ce:6c:50:14:95:8d:24:2e:91:93:fb:7a:b2:34:
3c:a5:3e:f1:1d:f3:5d:01:c9:98:9e:fd:27:1b:05:5d:ad:65:
c7:ce:31:db:77:2d:82:fe:00:f6:1e:71:df:e7:2e:e8:50:09:
fe:fa:16:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz76YLgrEteMknP89NZ0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2M2NzZkYjI0YzIwNWQ3MjU2ZmM1NDlhZGM3YzNlNjBh
YzdlOWQwHhcNMjYwNDE3MDUwMDIxWhcNMjYwNDE4MDUwMDIxWjAzMTEwLwYDVQQD
EyhjYTJjZDI2YTA5OWRkYTliMjFmODhkNThjNGQ0Nzk3ODlkNWU2ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5KkWiammXXwoI/BMFv0Xw9EttlG
+RcbpPUZEP4Q+aN5f3to2XeYivlFGEZux2HqjLp5DJVYqfHbiTxcA/MYegU4smTl
zV/1Gp447zpk4L4XEZEc52XJ3QXrMaMY9iDGu8m4zv4GXBrIFNBwZtlHPc/CNLwB
bhvS3NdoY99GpQ/T02BKb70dji8MXGT//gu4x+zJ2Sa4gfEZCOgSpmnWVir8oepn
2AS0KgHYFHSWMtQhxl0rPpAvJ0P11y762qB0dwJckymz2VcipkfwrQRFihfQSKIR
JfcXjyGRjXjP6wVZ3Zwhg881W8tyixcmNBNuszAeQ6vVTarsQYxHJnqbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMos0moJndqbIfiNWMTUeXidXm0iMB8GA1UdIwQY
MBaAFC48Z22yTCBdclb8VJrcfD5grH6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2Yt
MzQ4OTI1NzhmZjE5LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2YtMzQ4OTI1NzhmZjE5
LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8gW0vum
fJNVV9uHpoQNUTPhh6S9Yc7+RnJ6UFcSuXcp0HUyJIbPAn8+ZkdsUSz1LeFwDLjc
uUa4kFL7zvSx6sFmo5NlyzJzGdBI8cAifjeI4YH2sPWtDRJcM5XwUIlhizu1udv8
i866kuc1usYO2xFFYmH1tJ9lMrKh0/RSOqfzHDaDjvMZVlOqihjhesQVApWnI40g
cmP/7HP1Cj5airSOOD6li3B3a8goOhuRy48/wZKxvO1D6CsYbp5Dgq7ocjIjK03C
d8dwl85sUBSVjSQukZP7erI0PKU+8R3zXQHJmJ79JxsFXa1lx84x23ctgv4A9h5x
3+cu6FAJ/voWIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:35 2026 by rpki-client