Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: qaEQo2WjvBaq4ouLpAgOQwZXp44UX7q/eRGl9OxwASY=
Subject key identifier: 17:10:24:F2:42:F7:87:D9:56:FE:37:14:70:93:C7:5C:0A:B0:E6:7B
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 01A0D501DB693B8533506BE04CA6278D1AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1561
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: 17DEjye8nb4XbEddCjHTe2yyI+v40hH9BEFa5Fdn1dA=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:db:69:3b:85:33:50:6b:e0:4c:a6:27:8d:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=171024f242f787d956fe37147093c75c0ab0e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:7d:f0:b8:a9:b7:6c:59:16:33:7f:55:64:
2b:38:cf:10:19:f5:f8:13:e4:3d:89:c1:f1:dd:41:
3c:db:34:21:b3:63:d2:3b:d3:cf:d2:ea:46:53:b4:
c0:ff:5c:75:f6:eb:1c:ac:db:b4:48:72:5a:49:8e:
5e:07:fc:7c:e0:72:d7:44:a5:01:52:43:81:9e:76:
1a:c0:33:ad:6a:93:24:90:f4:51:cf:3c:4c:7b:b6:
90:22:61:08:1f:9e:e1:c9:3a:f9:a6:22:19:e2:ed:
e1:ef:8a:d1:ab:b1:cc:06:5b:ba:ae:f0:af:e3:f5:
b3:2c:de:1e:2e:dc:23:ec:e7:18:e4:60:3a:e2:29:
86:0a:37:17:17:48:2f:99:e5:44:ff:ff:3f:28:ef:
62:1b:d1:45:a1:23:8a:d6:39:fb:76:74:f2:ee:f6:
f0:44:1b:2a:cc:16:61:ca:16:22:fb:bf:37:b5:ae:
f3:c6:03:fe:f4:69:3f:3c:1b:f4:8b:ad:e7:8a:28:
f3:a7:2f:c8:9b:49:ac:9a:14:66:2c:8f:5b:63:39:
aa:97:79:6e:ca:2d:0e:3e:5f:46:96:86:e6:36:10:
aa:f2:52:e4:52:57:9c:47:e5:c8:06:db:25:c0:5a:
51:86:53:5a:34:c7:45:44:1a:5b:8c:ee:fa:99:c8:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:10:24:F2:42:F7:87:D9:56:FE:37:14:70:93:C7:5C:0A:B0:E6:7B
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:2a:c2:3e:7d:ed:c4:21:1c:4d:bc:b7:b9:95:cb:74:13:
10:51:8d:0f:8e:26:8f:b7:02:92:93:53:75:1f:38:b4:9d:98:
65:04:02:06:2a:57:11:6a:02:9b:e4:f4:50:18:1a:01:10:09:
34:6d:fd:3a:2a:f2:3e:4a:bf:ad:25:ff:be:8a:10:4d:39:17:
42:fc:a8:21:7e:c4:d7:19:e5:44:08:8c:fd:e1:83:ad:e2:75:
03:cd:cf:fb:2f:a7:6d:62:e7:b7:f9:67:78:89:ed:6d:98:98:
ac:7f:17:06:e2:d9:9a:ef:1e:be:0f:49:35:0a:4b:0f:86:f8:
02:d8:77:85:39:5c:68:20:dd:4d:36:d1:f4:36:74:be:cf:49:
4d:2e:48:c9:3e:f0:89:ba:ab:22:c9:e4:76:f1:2f:82:41:bf:
e0:fb:2e:e2:23:6c:97:06:f3:66:b3:97:d1:4f:b3:2c:ca:44:
1b:be:ea:e2:33:8e:e8:a4:27:e0:87:16:7c:57:ea:bc:dd:c0:
1d:bd:12:02:2f:51:72:b4:7b:a4:ed:38:61:6d:4f:f1:f8:f1:
6f:e5:33:eb:bd:2c:41:07:9e:a6:c9:02:59:94:b9:96:d7:89:
d7:9a:d7:da:de:10:82:f1:91:62:25:96:d6:3c:c5:5a:e5:a6:
28:f1:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:53 2026 by rpki-client