Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: figdMA1xce0J0s8Vhau9TXkgmA+KZ33PA8EGFWr2+7Q=
Subject key identifier: 80:6E:B0:46:7D:18:41:E7:19:4B:89:BF:F5:F1:E8:28:DD:03:2B:27
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 019D2583EC53DAD42BE7B968EE2FFF0BCE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: g+eEvnYDu5D5TuqdUAmaBDYWPU+xcr41Vpys2jd8iLg=)
2: xE7QTqbNdhn5gknQPHHkIzofK-E.roa (hash: llDvi2taRSF2NctjRtmwTyGFIoc+gbx6y6MnqNFwqu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ec:53:da:d4:2b:e7:b9:68:ee:2f:ff:0b:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=806eb0467d1841e7194b89bff5f1e828dd032b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:7f:24:6b:b4:f5:bd:9b:38:07:23:30:f2:
63:aa:58:d1:e9:d7:6d:35:3b:ae:3e:d6:d4:cd:90:
48:f1:b1:7a:4f:73:9d:39:8c:d5:02:fa:38:40:7b:
ba:f2:66:0c:e9:f0:cb:d3:fb:1c:7c:71:41:e7:c7:
d2:28:11:29:d7:38:4a:20:18:6e:c2:5a:4f:c5:f7:
96:23:91:f5:80:8a:90:ac:c6:a6:b6:64:5b:2d:e6:
40:20:34:e6:8b:5b:d5:4f:c6:42:4c:a1:e3:88:8e:
37:26:ce:d0:86:d4:3b:7d:e6:62:8a:5b:8f:79:2a:
2f:77:de:ed:88:35:57:5a:50:e5:92:5d:5c:d6:3e:
da:20:b3:ea:2c:fd:9d:91:d1:23:07:ac:9c:72:1c:
6e:87:1f:88:56:1e:97:5b:b0:f0:2b:01:3c:73:67:
05:58:e6:cc:d9:15:ed:1a:e3:82:cf:10:21:11:03:
d2:b0:84:80:4b:c3:cc:89:b5:58:d1:03:5c:af:5b:
20:68:4d:d0:fb:dd:b1:37:5a:ce:00:6d:23:fd:90:
40:ef:ac:fd:9e:e8:16:37:6b:58:05:a9:aa:e8:10:
ee:c0:2c:d7:7f:cb:d0:2a:8e:e6:af:df:bf:40:e8:
2f:3a:b7:3e:c2:d1:bd:df:e4:3d:c3:a8:d5:cd:f3:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:B0:46:7D:18:41:E7:19:4B:89:BF:F5:F1:E8:28:DD:03:2B:27
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:46:f2:1a:b9:28:31:8e:4f:9e:c0:9e:74:31:c7:bb:d8:
db:26:ee:52:02:1e:6b:aa:7c:86:5c:e0:42:5b:ea:3f:2f:71:
9e:1f:42:1b:d4:e8:7c:f6:56:fc:2e:7c:84:e3:a5:62:d2:60:
84:32:e3:85:e0:a0:e2:d3:ba:cc:d4:d9:ec:c6:f9:76:f5:8d:
84:b5:17:bd:27:bb:cf:ad:a7:60:37:ef:b1:6e:fa:8a:e5:1c:
aa:2c:9a:e8:75:aa:97:15:ca:36:ce:0b:cb:2b:1c:15:6c:43:
07:2e:89:24:81:ca:76:c1:1c:3a:b1:6f:e8:27:35:cf:b7:23:
36:aa:36:f0:fb:f9:68:26:5c:0a:9d:01:37:63:9c:40:b9:bb:
33:cd:67:4f:89:64:30:6c:85:3d:7f:5a:92:88:36:3c:34:29:
99:a3:93:06:7d:83:3e:08:85:22:ca:48:8d:0c:4f:39:29:6d:
6a:68:b0:07:35:6f:22:61:92:0d:07:6d:c1:b1:80:30:9c:ec:
8c:6e:fc:d4:d8:20:e1:39:24:ae:43:55:4b:5c:22:ae:6c:f6:
8a:d8:35:4d:67:fa:83:30:62:de:3d:52:e4:c4:dc:82:9f:54:
c2:ca:09:7b:6e:9b:65:0d:f9:fe:24:af:81:f1:e3:97:cd:2e:
fd:db:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client