Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: 0uAeLFUKmFRaT0fHr0iM4Mg1iZc9fJoZ+sDJVOGtqlg=
Subject key identifier: A3:F2:F8:8E:09:AF:88:65:A9:73:5B:8A:03:D2:85:C2:CA:C5:2B:E9
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019E1DC75418CE4E880354731EABA4A5B096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 13F9
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: c4r7bws0eBrQSzgHBgmqMf4aBOJDqWx9r3FoYlrCyyc=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:54:18:ce:4e:88:03:54:73:1e:ab:a4:a5:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=a3f2f88e09af8865a9735b8a03d285c2cac52be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:a7:b2:8e:c7:e5:fc:85:01:07:ea:31:a6:
04:11:fb:c7:db:16:cf:49:45:7b:b0:29:10:8c:78:
2f:98:dc:71:0a:5c:ce:a0:97:ed:14:55:c8:c0:4f:
04:bb:ac:ed:49:ce:d6:84:b6:cd:37:f3:cb:9c:c7:
56:a9:fc:31:36:da:61:db:fd:fc:81:28:59:cd:6f:
f4:9a:c4:d8:9c:e0:1d:df:0e:e7:fa:72:c1:6c:9c:
f5:92:e7:95:71:49:6c:a4:9c:92:7d:48:71:2c:8a:
09:55:95:32:a6:cf:7c:5e:2c:8c:03:ac:fa:02:fd:
66:32:df:57:23:b6:36:f6:b0:3d:48:4a:29:9e:7e:
24:8f:2e:95:81:d1:6a:aa:d8:23:cb:ce:04:3c:d5:
e0:b9:ed:af:f1:69:16:8f:cc:3a:d4:a1:25:88:fc:
82:6b:4b:c6:bd:53:56:ef:8a:f5:e4:7c:71:9b:54:
8e:78:2a:64:e7:74:95:c4:4e:1d:1b:15:e9:9a:84:
0a:40:8b:e0:f4:39:53:87:8a:83:9e:95:4c:ff:69:
a8:cb:45:54:16:53:27:0e:24:53:a0:79:81:60:cf:
c1:98:f0:8d:ad:78:9c:5b:d1:32:69:71:0b:4a:2f:
77:92:31:60:6a:4e:34:b3:d6:3f:28:60:1a:36:ec:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:F8:8E:09:AF:88:65:A9:73:5B:8A:03:D2:85:C2:CA:C5:2B:E9
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:10:2a:14:c2:44:55:1d:f7:d7:d3:f2:31:d1:cf:66:1a:57:
bd:3a:0f:9c:ae:7a:ff:ac:a9:61:07:73:e0:a4:6e:3e:90:97:
a7:f6:1e:6a:d4:fc:fa:a7:68:fe:b2:20:5e:80:bc:cc:53:a6:
98:c0:d5:e0:07:e5:74:f2:1d:b3:2f:a7:57:72:a3:c4:3e:3c:
1c:82:d0:8f:80:bd:2b:64:37:ba:33:3e:ce:44:d3:ca:fe:3e:
cb:03:b5:0e:ef:7e:5e:90:52:56:53:2c:0d:d5:e6:0c:e6:8c:
60:06:37:be:34:28:34:c0:84:fe:16:8d:bc:06:60:f1:eb:34:
fa:2e:91:77:41:65:f3:d2:26:69:69:a9:31:d2:57:05:42:0e:
0c:61:3a:83:d4:79:83:e4:b9:77:20:bb:9d:e8:c0:be:c1:eb:
95:bd:dc:c2:d6:3e:cd:a3:a4:b3:1b:72:96:d2:bf:6f:db:25:
87:02:a3:b3:b1:d4:95:87:0e:ac:b5:8f:d1:0c:7d:30:a6:47:
27:51:3d:24:2e:65:46:6c:0c:b4:45:81:b4:cb:9d:18:97:0d:
d2:3a:c4:42:31:52:a0:8d:c6:4e:07:a9:d2:02:9c:27:d8:6b:
d7:23:77:40:90:7b:e2:44:02:a8:ed:17:d6:f5:e8:57:3a:9d:
56:95:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:19 2026 by rpki-client