Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: ukkSeXkm5jMi5NYtADkcFXTovcTZvmGuPuGvkoEm9Wg=
Subject key identifier: 88:65:5D:09:4B:10:4C:61:FC:6F:C8:30:42:37:FE:4F:4B:A2:C0:EF
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 01A1DD94B0F7F8EF8454E12E5E961DE5FB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 15EA
Signing time: Sun 15 Nov 2026 05:01:11 +0000
Manifest this update: Sun 15 Nov 2026 05:01:11 +0000
Manifest next update: Mon 16 Nov 2026 05:01:11 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: t16vIe0L/DXpuYb+6IneA06yxwPa9F1F2MrCWKtuDe0=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:b0:f7:f8:ef:84:54:e1:2e:5e:96:1d:e5:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Nov 15 05:01:11 2026 GMT
Not After : Nov 16 05:01:11 2026 GMT
Subject: CN=88655d094b104c61fc6fc8304237fe4f4ba2c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:14:00:08:de:20:1b:b0:66:3f:82:91:61:
df:76:37:37:3a:08:c1:fb:28:7d:38:35:09:5e:9c:
73:e1:c0:ec:b9:7f:73:b6:5f:bb:76:df:92:ae:64:
56:fb:dd:a9:a3:20:a3:08:97:30:d4:18:d5:08:52:
bd:68:a5:4a:e5:f9:50:4f:ed:79:50:f6:76:29:23:
5e:4d:f7:5e:3c:36:e1:e1:e0:6b:70:fd:61:fe:10:
8f:35:25:d5:67:1f:21:33:31:fd:32:5b:71:ad:f8:
ef:0e:9b:0f:4b:4d:34:73:66:cd:3c:53:1e:69:8d:
20:1d:0e:4c:67:e0:30:02:3a:cb:46:67:85:75:89:
ab:4d:9c:66:43:c4:c2:f6:27:75:26:3a:c2:d8:37:
05:0d:c0:70:18:ae:e2:38:93:0b:b0:8a:ac:66:23:
b5:02:29:47:fb:cc:dc:6e:17:7c:f4:b5:cc:7b:ad:
24:4f:5b:35:f0:80:e5:30:5f:47:40:fb:69:22:ea:
23:91:5d:85:dc:02:62:0a:b2:f0:0b:05:4d:9b:81:
e0:99:5c:f0:fe:02:4a:7a:c3:fa:03:35:24:5b:ec:
c4:6b:29:a5:fd:7f:ae:18:56:d1:d8:51:07:29:a7:
40:2c:31:59:b1:98:b3:05:e8:53:33:3b:61:08:16:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:65:5D:09:4B:10:4C:61:FC:6F:C8:30:42:37:FE:4F:4B:A2:C0:EF
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:89:81:85:5d:5e:33:84:40:0c:dc:c6:64:c0:04:7b:19:b0:
ad:92:32:c2:d3:7d:f0:84:75:ec:56:ab:ce:58:12:b4:a2:52:
32:0e:f0:d1:fa:5c:78:b6:9e:17:18:eb:5e:56:08:81:54:ff:
38:41:22:c1:fe:f3:91:94:5a:16:0c:d4:29:79:4b:98:51:4a:
b8:99:14:30:18:7b:64:76:65:31:2b:a2:50:76:16:80:f5:b6:
be:d3:9e:66:23:5e:64:0e:26:ec:a9:83:9f:5f:ed:1e:7e:35:
0e:72:b6:32:a4:cb:78:5b:d7:4b:70:e7:78:40:29:1c:80:18:
ca:74:7e:1e:fd:dd:f8:56:a8:33:ff:c3:17:41:da:39:3c:ab:
ac:ec:dc:c6:ae:46:a8:a8:88:a2:57:d3:4a:da:b5:58:71:10:
30:b6:28:90:db:9f:ed:f7:32:38:75:ec:58:f2:93:f3:32:e3:
70:7e:8f:fe:21:2a:ee:f7:d7:b2:99:05:4f:64:68:65:42:73:
d6:d3:71:6d:fb:66:2e:fc:05:f7:29:15:51:86:4a:72:61:0b:
7a:25:6b:bf:c7:b8:12:5a:79:db:f3:59:fb:4f:c4:7e:3e:b8:
df:a2:5e:1a:71:b9:75:1a:6b:5f:e8:d1:1b:eb:0b:69:b9:93:
9f:15:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:37 2026 by rpki-client