Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: SyTLVWVvY0z+IeNmCeO7ID/t8ceRIcCXbex4A+r8AlY=
Subject key identifier: A4:BA:E5:28:7D:DC:5E:86:E5:E1:1F:1C:77:8D:6A:87:46:40:DD:81
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 01A1DA9483E025EC5BCA483FB93CF0C95D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 023A
Signing time: Sat 14 Nov 2026 15:02:08 +0000
Manifest this update: Sat 14 Nov 2026 15:02:08 +0000
Manifest next update: Sun 15 Nov 2026 15:02:08 +0000
Files and hashes: 1: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: cm/jFbTnK9CPR+dMynS6TJ5S0hJtysuzd5/o+JdXL3g=)
2: fmAI-ELfR8es8rqjY_C_NRVbf38.asa (hash: hf1HYNu1FITfWnRrkmBLRmIEQwPhNWwa07xK+1K/E/4=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:83:e0:25:ec:5b:ca:48:3f:b9:3c:f0:c9:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Nov 14 15:02:08 2026 GMT
Not After : Nov 15 15:02:08 2026 GMT
Subject: CN=a4bae5287ddc5e86e5e11f1c778d6a874640dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:f1:0d:bb:e3:3f:99:f6:93:d1:8f:e8:53:
54:53:df:59:78:e5:cb:1d:9d:de:d5:53:af:6a:94:
12:6a:c5:f7:b8:d5:00:5b:57:ca:bd:a5:ed:aa:e1:
56:66:a5:09:d3:ee:5a:82:8a:18:34:88:f4:26:5d:
31:a2:11:18:68:4c:31:fe:0c:c7:87:95:a9:66:ee:
f5:35:c0:fd:db:f1:83:8e:54:87:70:0e:65:e4:bf:
1c:2b:e2:61:0e:ce:65:e0:4c:1a:3f:e4:fa:50:53:
c3:d9:66:86:94:ca:e4:cb:72:3f:60:82:ef:f7:1d:
05:93:a6:ce:e1:b3:ad:fe:4d:a7:72:ce:be:ad:f6:
69:94:c9:ab:67:ac:72:58:48:0d:02:a0:7b:0d:d4:
fb:7f:ef:10:f8:8c:2e:f7:e9:79:97:85:9a:b6:89:
21:3d:e6:23:96:2e:0f:34:7f:77:f3:df:6b:d0:d4:
f5:bb:a8:87:ff:75:2e:5f:05:c9:3c:97:5f:f1:71:
a6:cd:7c:30:00:e8:c8:69:96:92:d0:29:1d:9e:f2:
c7:c7:1b:27:35:0f:23:ad:16:51:09:dd:67:72:4f:
57:77:0a:a2:13:b3:cc:56:75:45:51:85:3e:38:55:
3d:77:97:d1:86:19:32:bd:90:60:3f:54:2b:c3:50:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:E5:28:7D:DC:5E:86:E5:E1:1F:1C:77:8D:6A:87:46:40:DD:81
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:e0:8b:ff:a8:1c:70:95:d4:e8:e3:23:43:33:ab:4e:68:
bd:dc:20:10:d7:dd:a0:e2:18:01:fa:e7:1c:7d:1e:8d:ac:d6:
60:dc:ae:30:44:20:14:07:4b:bf:49:e1:4d:9e:6f:90:b9:6c:
7a:f1:9e:0c:77:d3:ea:6c:48:db:08:5e:88:aa:9e:0f:a8:c9:
0b:e4:7f:44:01:0b:79:15:f9:83:8d:0e:13:3c:08:80:96:40:
df:73:b9:4f:65:8f:4d:9f:1c:e6:c3:d2:59:51:88:c6:0f:c4:
8b:e6:d7:43:2e:ed:55:0d:3b:73:8c:b4:7b:4d:1b:6e:c6:3d:
45:dc:ab:da:80:a0:1e:3d:54:5d:e0:ef:73:e3:03:ae:77:07:
71:41:08:83:30:0f:14:5f:63:52:d3:c8:82:df:d7:dd:de:1d:
5b:b4:5a:33:0f:ec:50:ed:11:10:e0:d4:a5:30:4f:9f:a9:3b:
0a:3e:14:4c:3c:2a:40:2a:25:21:c3:5d:24:47:5f:59:d0:ae:
a1:4d:3f:3b:9b:0f:ef:9b:82:21:09:27:2b:bc:e2:97:f5:5b:
ba:e4:36:0b:8f:7e:46:1e:c0:c6:f9:b8:60:e3:c7:74:54:1b:
ad:50:09:71:54:0d:51:71:2c:9f:62:06:62:1a:a0:6c:41:29:
86:d8:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:07 2026 by rpki-client