Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: 9I4nKf81MxOKwlNobcRj/SbhfjBgqDerIwQrJxxrQ5w=
Subject key identifier: E4:A9:2C:54:4B:A8:22:A1:2E:B7:7C:7E:52:C9:B3:45:64:25:82:E0
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019E1F10FF65FF70EFAC6F8A12082C8F1F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 0128
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: uk1pW3xTnX5T2wZwS21Z6ai2cGB5ra9NHQ0cndAJVf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ff:65:ff:70:ef:ac:6f:8a:12:08:2c:8f:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=e4a92c544ba822a12eb77c7e52c9b345642582e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:80:23:17:cc:0f:d0:a3:8f:72:03:e8:9b:
5b:56:80:20:16:9f:bd:89:f7:03:72:b4:3b:80:9d:
27:59:bf:d7:0b:a3:ef:6d:27:6b:65:38:16:2e:19:
ed:16:63:dc:45:e7:c6:bc:04:47:56:c1:a9:0e:20:
58:fe:dd:e4:3b:d0:49:07:0f:5b:19:80:54:20:db:
d7:db:0c:73:81:a0:58:97:b9:fa:7e:3e:a0:30:ea:
2b:a8:64:06:46:0f:02:d9:c3:13:1d:c3:03:81:c6:
21:f2:7c:11:c2:66:41:18:55:69:d3:04:a1:bd:22:
b2:5e:0f:90:e6:0a:a3:f7:af:19:c8:53:8c:2d:5f:
35:3b:ff:a9:d3:e2:65:2f:8b:2e:eb:55:8f:76:1b:
48:00:83:d4:6a:61:b8:44:2f:6f:ca:a9:1d:51:14:
7c:42:37:27:bb:5a:03:d8:3c:e0:cb:28:4c:7a:e3:
f4:3b:de:a5:19:55:36:a1:55:14:7d:e2:f8:b6:8f:
18:0c:d2:a4:2e:25:e3:da:53:2b:bf:7c:bf:f8:7f:
0b:6b:d4:f2:20:99:f3:eb:0f:c5:3c:86:d1:df:63:
e4:9f:0e:7a:e4:cb:1f:13:b4:9b:58:02:30:b5:16:
56:c7:5f:6f:e3:44:9e:5b:df:3b:22:48:75:41:a5:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:2C:54:4B:A8:22:A1:2E:B7:7C:7E:52:C9:B3:45:64:25:82:E0
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:a5:52:fc:d7:11:12:8c:ca:78:26:14:28:74:ad:04:7d:
4c:15:5e:f6:d4:2b:48:90:d3:2d:44:4e:1b:03:73:f6:b5:2f:
4e:3c:45:e1:f2:66:30:25:1b:d0:b3:bd:5a:dc:a4:34:a5:f2:
e1:c3:50:15:7d:8f:82:e1:2a:32:29:3b:f3:23:9d:c7:43:1b:
9c:15:e8:28:df:0f:6c:45:e4:4e:1c:50:3a:f6:3d:62:2b:47:
d9:65:a3:44:09:bb:2f:7f:b9:b4:1c:c6:6b:ea:89:00:04:f6:
0e:14:5e:e2:20:e7:bc:49:1b:46:90:da:3e:29:52:d6:f5:a8:
c6:7e:6e:ee:18:ba:60:c6:1f:8d:1a:8a:58:44:4b:90:ae:8d:
20:7a:76:29:45:5b:c6:d7:98:87:15:02:f0:38:5f:83:a0:98:
49:5c:c1:67:04:72:47:ac:f0:20:c6:81:65:52:fd:e7:46:47:
ac:f6:bf:88:aa:04:7d:ed:c8:60:7c:c8:a9:5c:a9:dd:5b:23:
18:6c:ad:44:c5:34:2e:67:5b:16:f8:73:f8:b1:d7:52:a0:94:
af:3c:0e:6e:1c:cc:3e:95:d3:8b:3b:98:50:f3:4d:42:1c:e9:
97:ac:22:0d:72:e4:db:84:d5:83:d3:bd:87:a8:08:3c:49:c3:
f2:82:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:54 2026 by rpki-client