Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: G6JUIZbASocrRcQAbOzQN2G1bg5tfbdlXZw5d+s1NRQ=
Subject key identifier: DB:50:1D:16:BA:B7:70:EE:5F:A6:54:A4:FF:88:E1:99:0E:B4:D1:30
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019D2884B06A605BA5CB89020B32F7B3BE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 137A
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: i9GjM8REWkpnGfp3miydNqxTJC5mX9DoJHv48vZkL/8=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b0:6a:60:5b:a5:cb:89:02:0b:32:f7:b3:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=db501d16bab770ee5fa654a4ff88e1990eb4d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:b7:79:41:e7:1c:13:88:81:1f:78:fc:41:
99:0b:e1:93:54:7f:e3:29:60:af:a0:fc:64:27:b1:
42:ee:50:7d:cc:34:82:7e:0a:97:de:e6:c7:06:36:
fa:19:fc:0c:62:22:a7:68:38:fd:ec:37:f7:38:67:
5e:08:3e:ed:6d:7b:f5:ab:ca:9a:82:8a:9e:c4:a1:
f1:dd:da:5c:2c:70:82:99:93:26:c4:d3:69:f7:49:
21:8d:2a:1f:0f:c3:e2:c3:b6:93:f4:99:08:9f:2f:
8d:7f:38:72:1e:a2:8e:8a:25:94:4a:78:3c:6c:f4:
2f:5b:35:af:63:50:78:f5:cc:7c:c1:29:5e:42:13:
7a:fe:1f:45:af:5e:91:6b:8a:c7:40:4c:42:35:23:
5a:2b:e6:14:50:a8:36:35:8f:55:23:27:ea:93:0a:
a1:a5:f8:ab:6d:7e:b7:54:00:fa:61:7f:dc:e2:e8:
ce:c3:2e:65:85:f1:06:ed:ce:ec:fa:50:2e:e9:b0:
cb:e5:67:27:66:58:bd:11:86:12:6c:88:5e:89:9c:
09:11:bb:27:ed:1f:18:38:d8:c9:ba:33:ce:d3:51:
6b:27:59:73:e6:c4:92:01:42:2f:f9:22:d6:89:bf:
99:ff:12:d7:52:48:47:f1:fa:c1:57:91:52:52:eb:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:1D:16:BA:B7:70:EE:5F:A6:54:A4:FF:88:E1:99:0E:B4:D1:30
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:81:13:a7:75:a7:bd:69:72:a5:80:73:81:1c:74:3b:f9:
ce:38:5d:2f:a9:07:fd:4e:b4:6d:6e:b6:8e:42:d4:0b:46:d4:
c2:86:69:6c:14:00:f8:ea:d4:f5:48:3e:0c:5a:c6:49:f4:a5:
34:13:88:34:1c:20:85:e8:cb:a9:d5:06:ef:0a:97:ba:63:04:
7a:e7:32:05:7f:2d:5f:e8:ce:53:20:78:df:d7:73:e7:f4:45:
2a:c9:45:d0:ef:e0:c0:c8:c7:43:a9:08:d6:b7:14:56:48:e8:
14:97:45:53:6c:b1:4a:5f:ff:05:76:68:61:05:8e:c6:b7:fb:
a2:16:ce:60:17:77:d2:7e:d6:eb:7c:f5:20:1e:64:1c:92:28:
af:32:ca:1d:5f:1f:6b:f8:d1:21:72:30:e2:e8:3c:1f:36:65:
8d:ec:1b:49:d6:4d:cf:da:2f:4a:06:01:4b:ea:12:0c:fe:17:
71:3f:89:e9:23:89:57:e2:d7:2c:ab:d0:af:9f:ed:ed:20:5b:
48:dd:5d:1e:4a:d4:6a:59:ef:24:30:f6:41:5f:1f:3e:57:44:
38:96:53:fa:29:51:3a:49:a6:33:4f:ef:b8:04:df:ea:8c:b4:
f4:41:21:10:dd:21:6f:1d:6f:d1:2b:35:cb:40:0a:4c:96:7d:
b6:5c:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:39 2026 by rpki-client