Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: Eg/wAHkA14ATugCEPYqh/WsmIpa8e+2PbaTadWaMswQ=
Subject key identifier: BE:95:FE:B5:C9:38:B6:D1:60:04:94:C5:7F:30:C9:7E:2E:17:25:BD
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 019F8F7EE2DA5439FD7B1D961B8B307D6880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 0108
Signing time: Thu 23 Jul 2026 15:01:25 +0000
Manifest this update: Thu 23 Jul 2026 15:01:25 +0000
Manifest next update: Fri 24 Jul 2026 15:01:25 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: XwYn9r3rTpkJqWeGEUJj7hipLx5WnfbMNNZA7Sb7xhA=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e2:da:54:39:fd:7b:1d:96:1b:8b:30:7d:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Jul 23 15:01:25 2026 GMT
Not After : Jul 24 15:01:25 2026 GMT
Subject: CN=be95feb5c938b6d1600494c57f30c97e2e1725bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:f5:c0:73:43:04:77:0b:e0:dc:3c:4b:fd:
01:07:f4:48:db:1a:a5:00:12:31:db:92:21:d9:e2:
79:25:2c:87:6a:10:16:15:60:c9:21:ac:d0:73:1f:
59:f9:5f:52:5a:26:53:70:22:14:9e:67:20:f0:39:
0c:4a:a5:73:9e:e2:c5:bf:d6:e4:b6:73:2e:19:51:
4f:5f:0b:e4:3b:88:e1:77:a0:1a:25:db:66:4d:e4:
fc:eb:12:86:94:c8:2b:82:04:bc:72:e3:b7:15:14:
73:11:97:c7:ea:48:69:99:e4:97:83:cf:06:9d:53:
57:eb:8b:5d:bb:78:7a:0a:3b:4f:33:a4:2c:38:38:
51:f2:02:e7:a3:cd:cf:90:52:0e:3d:b1:a0:a5:81:
91:63:85:6e:02:61:13:4f:7f:ef:3a:5b:64:6b:b4:
59:9e:c7:ea:cb:40:2e:cb:1b:09:0a:5e:ce:60:64:
28:c9:df:e1:e8:4f:7c:e3:c2:48:71:a1:3a:e9:cd:
46:e6:e3:11:48:4e:24:c8:b6:6d:d0:e6:13:18:40:
5c:f3:96:f6:33:05:55:04:a4:80:f9:70:cb:92:12:
43:cd:c6:e6:f8:ff:a1:5c:24:b5:df:b0:1b:3c:5b:
f4:2d:a3:e3:38:e0:ab:b5:83:1c:3d:e4:49:40:2d:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:95:FE:B5:C9:38:B6:D1:60:04:94:C5:7F:30:C9:7E:2E:17:25:BD
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:01:81:9b:95:d3:23:91:44:93:65:ae:5a:ce:f2:bf:07:
90:67:64:bb:25:66:69:51:21:7f:01:e3:fd:50:37:09:e7:00:
82:f1:9b:7a:1c:6c:7b:0a:8b:89:fb:71:a8:40:f7:b1:56:b7:
29:8c:9b:55:b1:ef:98:b1:e1:e5:84:b3:69:04:01:d6:5d:6b:
94:ec:a5:09:04:f6:aa:35:ea:a6:fa:80:f5:73:e9:d1:d5:a6:
ac:07:8d:ac:7e:11:7f:10:87:74:57:35:06:aa:05:d2:22:18:
c1:dd:2b:3e:09:1a:f0:4c:21:1f:2a:df:ab:e1:1c:41:fd:ca:
24:15:b1:43:62:18:dd:58:82:6f:84:60:3f:a3:01:31:f4:d4:
eb:f2:f1:df:b3:65:da:d7:b6:2b:2c:9a:d4:0b:cc:e0:85:1f:
00:57:35:3a:70:e0:f5:55:51:96:c3:3d:24:66:44:bf:01:16:
05:2d:89:e3:e5:96:3b:9d:bc:6e:27:a6:ec:33:91:e1:03:af:
a3:02:f9:8e:16:e2:37:26:33:ea:ee:d9:49:b7:8f:88:79:9e:
e4:4b:b1:81:34:7f:8e:68:3c:b0:68:b1:fb:a6:50:6e:52:a7:
79:c6:b8:9e:34:bf:b2:83:25:cd:1d:c7:ae:62:b9:4d:86:a5:
94:e0:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:42 2026 by rpki-client