Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: 6feqU/0QxQkCpOjfoviYNSVJG3btO6AAachBEWykXMY=
Subject key identifier: 8C:FA:93:28:F9:46:77:67:6F:84:DB:03:73:F6:0D:4E:51:C4:CA:71
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 01A0CC359EF42A07C45501D0D7C295B326A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 01AC
Signing time: Wed 23 Sep 2026 03:01:01 +0000
Manifest this update: Wed 23 Sep 2026 03:01:01 +0000
Manifest next update: Thu 24 Sep 2026 03:01:01 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: UCh244mMe/I1qpI7vB8rzleUC7lMOxo9/GMptb/CJms=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:9e:f4:2a:07:c4:55:01:d0:d7:c2:95:b3:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Sep 23 03:01:01 2026 GMT
Not After : Sep 24 03:01:01 2026 GMT
Subject: CN=8cfa9328f94677676f84db0373f60d4e51c4ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:64:43:f3:fa:ce:f0:b5:77:8a:b7:37:ec:
bf:d5:aa:8c:de:63:c2:11:25:12:ff:07:4e:33:8d:
bb:41:4b:0d:d3:42:15:3a:c1:5e:b6:4d:95:d7:f1:
38:2d:fa:7b:7f:45:7a:c3:f6:41:fc:1c:fa:4f:ac:
13:fa:16:e4:83:b0:8b:5f:f8:55:4f:8c:e0:9f:2f:
a3:bd:58:a8:03:e7:7b:5b:f2:e6:2f:43:15:65:86:
df:49:f8:2a:a7:4a:8d:b8:fc:f0:d7:e5:9b:09:42:
e2:80:5e:36:3e:e0:68:49:e7:33:9f:69:81:cf:ea:
8b:97:11:01:af:c7:4f:20:97:7f:3f:10:81:22:56:
28:f3:97:c1:57:6c:8e:51:e1:10:bc:56:3f:83:23:
cb:7d:30:2f:8e:a4:b7:94:3b:f5:e0:bb:7a:72:42:
ac:b8:dc:5a:9c:d3:b2:9c:50:34:af:f3:05:5e:e2:
6f:ba:38:65:b1:d3:cd:17:2c:b1:33:d1:c8:8f:88:
63:96:86:73:87:46:91:32:a5:37:67:bf:2a:55:45:
a5:c0:4a:85:83:05:8a:e1:c1:94:94:3c:86:ba:0e:
d3:a8:6c:87:89:30:c3:fe:98:55:0b:d8:33:9e:51:
95:a2:25:7a:89:68:e9:3c:41:6b:f6:97:2e:ec:69:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:93:28:F9:46:77:67:6F:84:DB:03:73:F6:0D:4E:51:C4:CA:71
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f0:92:8f:46:b9:8e:5b:16:d7:52:7a:c6:1b:1e:cb:ed:01:
83:2f:22:b9:45:bf:2c:03:4b:f6:b0:ee:79:15:35:1b:12:bb:
be:7d:3b:f2:fd:fc:e9:bc:f3:96:40:ab:82:f4:d8:e1:af:56:
15:12:d9:da:b7:42:1e:2b:a0:46:58:30:6b:84:f2:2f:0d:40:
bc:75:4b:8d:50:41:b8:9b:76:9f:71:79:7f:8b:c8:9d:f9:ac:
71:98:cf:b2:6e:a1:6d:62:7d:72:68:95:90:60:fa:fa:e1:7c:
ac:7a:b4:b1:96:76:0b:a8:31:10:dd:89:8b:eb:79:c5:3e:55:
ca:70:fe:aa:f9:e0:60:9a:03:a3:ca:6c:fe:7b:e9:03:0d:d2:
d0:3a:5b:f6:00:03:44:60:50:0f:aa:3f:dd:1f:0d:3f:08:75:
5b:fa:5e:47:84:9a:71:98:3d:e5:38:05:1d:f8:1b:3f:7e:e6:
46:00:d7:e5:31:e5:ce:3d:26:06:70:89:bb:f5:f5:76:56:a4:
a1:aa:ad:8e:02:b0:51:f2:84:e3:0c:33:9b:7b:20:3d:0f:41:
80:75:dd:90:87:4c:bf:59:12:07:7b:68:ef:91:52:73:df:1f:
a1:93:a4:7e:26:c1:ba:6c:0b:1b:a5:67:ff:d6:8a:b2:8a:ec:
89:32:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:07:46 2026 by rpki-client