Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: e72JSxFlrJPrYLYz+tqAVlN+rfWpmGTldrVQxtHJR8Y=
Subject key identifier: 14:45:03:D7:1C:23:40:5A:F7:8A:19:EB:60:84:CD:62:18:F1:68:4D
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019D26964C29AAE17C357FCED65DCBE6DB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1379
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: kxJTK6GWdsj0x9boami2I6edcFG09jCXbG9yME4NVAI=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4c:29:aa:e1:7c:35:7f:ce:d6:5d:cb:e6:db:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=144503d71c23405af78a19eb6084cd6218f1684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:60:c0:3a:be:39:4c:35:e8:2d:7b:b8:11:
83:23:83:2c:69:3d:70:f6:ea:ab:e8:d4:43:fb:e6:
1b:ae:df:04:40:f3:62:d1:74:4f:ac:19:3c:9c:30:
fe:cb:99:c6:29:4d:95:d4:5b:be:e3:f1:d6:0f:1e:
c7:68:3b:46:d3:8a:f4:9b:f7:79:b1:ed:45:e9:a0:
55:cb:4d:1b:83:53:96:61:48:ac:e3:49:fc:7e:ec:
9a:20:ff:6f:38:4a:08:8c:a8:eb:cb:21:4c:ff:8c:
ad:90:14:4e:8d:d5:2f:0a:51:5f:b4:b1:7f:4b:60:
be:3f:09:88:59:c1:da:70:e2:ba:21:8f:b5:7a:61:
1e:dd:5b:75:47:1c:be:1b:80:42:27:27:41:d6:b6:
cf:96:18:61:70:af:28:c0:1e:8c:a2:21:43:7d:fa:
a7:9a:7b:4f:36:63:7c:17:83:12:6a:53:b9:83:b7:
89:64:89:69:28:ce:92:72:1b:a3:f1:a9:19:d4:1f:
fd:78:30:cf:b6:5c:93:a5:e5:3e:c7:3a:4f:79:be:
3a:cc:90:ec:49:2d:29:df:c6:5e:54:25:46:11:d4:
3d:a3:63:06:b0:1c:51:c2:c2:bc:ba:84:e3:f6:22:
58:fa:1a:50:f1:fe:fd:d3:00:34:cc:43:a1:96:25:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:03:D7:1C:23:40:5A:F7:8A:19:EB:60:84:CD:62:18:F1:68:4D
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:60:8e:01:67:47:8b:5c:89:3a:a4:0c:dd:3c:15:e2:f6:
3b:ed:7c:36:9f:73:27:f8:78:7f:fa:ee:73:22:36:f7:00:8e:
d7:36:1a:fa:33:7b:6e:5b:7d:ae:ac:40:09:f0:3c:e4:ef:8b:
a8:c0:dd:94:a5:b8:f3:e1:c4:bf:c8:03:5b:c5:a6:b0:96:14:
2e:00:07:d8:27:3c:6d:f2:fc:5e:28:5a:e2:11:7c:08:11:87:
b4:09:49:c4:64:f1:74:1f:42:21:db:b0:f7:60:74:5d:c6:41:
b6:a8:27:e9:8a:42:01:35:5b:51:d8:8b:fe:28:52:22:9e:70:
98:8d:58:4b:f4:da:55:cc:1f:ae:18:07:ad:9a:a6:b7:2d:a3:
76:d3:9b:0d:2a:23:80:82:f4:c8:f3:21:97:a9:03:f9:f3:2a:
0b:02:95:b7:a5:87:72:a3:48:5f:66:9f:bc:0d:ae:68:20:c1:
24:41:39:a9:b0:3f:b7:35:33:eb:62:1c:ef:93:56:4d:b8:cf:
d0:cb:7c:ac:3f:3f:97:4f:63:04:11:5a:71:6a:0f:28:75:32:
da:7a:07:53:c8:f9:db:aa:4b:dd:80:9d:f4:83:c7:61:92:e0:
db:d9:a4:91:90:84:fa:11:a4:d7:17:e7:5b:c1:c9:16:3c:29:
d0:76:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:22 2026 by rpki-client