Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: D5RCK0RLGGKwUJNGTZ4k/rGKjdbLZMBkAHkt2m6RL7E=
Subject key identifier: 96:37:6F:91:F4:26:C2:37:84:9C:46:E8:46:91:A5:51:D5:6D:EB:63
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019E1DFE578F26C9381388DA82308753FDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 1755
Signing time: Tue 12 May 2026 21:01:08 +0000
Manifest this update: Tue 12 May 2026 21:01:08 +0000
Manifest next update: Wed 13 May 2026 21:01:08 +0000
Files and hashes: 1: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: oCg6MwfXbi7r1XSLoUAQeEC5sFX09GQ85FPvVsatFhI=)
2: s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa (hash: 3dNcn5nfQCOn3nOuz9gztwsMAWS61sZQeaI9Kk8/SgM=)
3: y4V7z4zgAZ-xkRHwN15WVILbdEA.roa (hash: 9JMbptZqg78oPgN1kW4Etd7vu4uHSobcSaTHaJbvEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:57:8f:26:c9:38:13:88:da:82:30:87:53:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: May 12 21:01:08 2026 GMT
Not After : May 13 21:01:08 2026 GMT
Subject: CN=96376f91f426c237849c46e84691a551d56deb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:f7:e2:d1:74:9a:fc:2f:4c:f9:6e:29:bd:
b9:ea:f9:01:a1:2b:e9:b2:77:24:18:d4:b1:90:52:
75:a3:b2:f8:31:0b:44:a1:09:23:5b:11:36:30:37:
d2:2b:52:0d:14:37:8c:5d:d0:e2:4a:b9:41:b2:65:
35:dc:4b:8c:2e:e7:14:58:83:a9:35:b4:bd:0b:ab:
8c:5d:b6:1d:10:eb:a9:14:cd:eb:fa:db:a6:72:b0:
d1:e4:f6:6d:0f:5e:f0:66:13:93:f2:c0:7c:29:0b:
f2:7c:8d:01:39:2e:9e:9f:41:a9:5d:84:d2:8b:37:
0e:81:1c:5f:f1:1e:f8:2e:5e:1a:fe:c8:3f:4d:7e:
11:4b:f1:22:4d:d6:17:50:ee:ed:b0:d2:d9:a4:78:
bf:d9:2b:8d:47:0f:99:10:8e:60:73:1b:7e:d4:50:
39:ab:01:57:3a:44:b0:75:3f:34:2c:54:1b:44:78:
1f:a1:b3:ab:a2:a5:e8:09:44:cd:3f:51:2a:a9:90:
e0:cb:47:cf:ab:f4:0a:4b:13:99:e5:4f:0d:8b:dd:
2c:ea:e6:b4:9f:e8:8e:4a:d5:09:c5:9c:07:8c:2f:
23:e9:e9:99:53:62:4f:44:68:2f:2f:dd:c3:af:db:
3a:4a:7c:e6:26:4b:b2:61:a5:5d:53:b0:a4:96:d7:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:6F:91:F4:26:C2:37:84:9C:46:E8:46:91:A5:51:D5:6D:EB:63
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:64:7d:5f:6d:99:eb:fb:fc:22:82:8e:3b:57:af:fe:30:
ad:97:fa:16:05:7d:50:a4:94:f7:3d:a0:05:8b:27:ae:5e:5b:
37:d0:6c:52:c4:e6:27:4b:6e:b4:5f:59:75:c6:ea:b8:3b:fe:
78:c4:6c:0e:c9:6b:cc:9e:4e:a1:f2:98:5e:5a:f4:22:18:f4:
38:50:8e:f4:04:59:da:53:59:12:90:61:c3:c4:85:33:70:4e:
a7:30:4b:e3:3a:d4:fc:0a:97:8d:39:fe:4a:be:ef:a9:bb:17:
6a:91:f6:0f:4d:f3:d8:b5:4d:91:a7:d2:58:6f:4b:ef:8e:ae:
c5:e2:8c:e2:6f:36:2a:09:01:b0:8a:0a:bb:a6:cc:97:cd:18:
d2:13:6e:ce:3c:2e:91:04:40:89:9f:2d:28:23:a0:02:ff:f5:
dc:6f:5b:dc:69:2a:de:2b:26:87:ad:2d:65:1d:c6:25:45:df:
26:2a:f6:6e:05:1b:64:8a:61:cb:b5:1d:41:16:d2:86:9a:5c:
77:1c:32:76:3b:78:39:bc:39:9c:70:6e:6d:7a:18:c0:a5:ce:
82:93:10:5e:96:66:db:34:fc:47:92:92:2b:2c:62:d4:62:1d:
08:a8:51:d3:67:96:c6:d2:99:76:9c:28:0c:df:87:96:f9:79:
f9:8c:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:40 2026 by rpki-client