Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: LfIP3cZOHiJzvJtNNvMkf2qLnLz6dpyovLcJP56RTN0=
Subject key identifier: AA:AE:88:B4:93:2E:A1:52:47:3F:14:3A:94:C2:CC:E0:A5:D9:6C:A9
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019E1E35F01B9145C22C423624286FA2AFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 03A5
Signing time: Tue 12 May 2026 22:01:51 +0000
Manifest this update: Tue 12 May 2026 22:01:51 +0000
Manifest next update: Wed 13 May 2026 22:01:51 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: M7BrZj5yyGpEreo4zrs+ND3wq57R+h7yWRjI9xMWtaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f0:1b:91:45:c2:2c:42:36:24:28:6f:a2:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: May 12 22:01:51 2026 GMT
Not After : May 13 22:01:51 2026 GMT
Subject: CN=aaae88b4932ea152473f143a94c2cce0a5d96ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:45:c5:e6:53:e4:3b:ce:59:8d:e3:3d:fd:
b4:df:5a:e4:61:ff:32:a8:9c:c2:1c:ce:0e:00:bc:
54:26:ba:9b:75:fb:76:e5:d5:04:d1:3f:16:7e:f8:
26:37:db:8e:00:9d:0e:5c:79:d7:87:0a:d1:35:5c:
1b:87:cf:c0:63:3d:5c:4e:78:f0:44:26:c3:23:34:
0b:76:53:89:b5:14:ca:b8:41:c8:f9:75:bb:aa:79:
65:c0:5c:79:8f:c2:4b:80:93:ef:88:0f:79:d0:23:
fe:eb:fb:4f:7a:19:df:34:78:a5:2f:6b:fa:1e:85:
02:d0:12:ed:a2:90:3f:63:ac:b7:3f:d4:81:98:96:
be:ca:2c:7b:f8:a3:f7:cb:62:6d:4a:48:56:d1:84:
a5:f9:80:d6:87:37:a6:cc:da:e5:62:e5:3e:45:3b:
e3:7e:d5:c6:45:17:87:dc:0d:a2:d6:6c:74:07:e7:
eb:2b:4e:07:04:7b:21:87:a0:e1:e6:62:b9:72:0f:
41:05:eb:d6:ce:2a:53:b9:2f:c8:bb:5b:1f:5e:51:
7f:f5:87:8e:24:76:a0:11:78:ec:31:6c:23:2e:d9:
4a:77:23:7f:48:3e:56:8c:96:fe:9e:4d:df:db:9e:
db:e4:c6:dc:b0:96:1d:07:50:3c:07:40:9f:2f:08:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:88:B4:93:2E:A1:52:47:3F:14:3A:94:C2:CC:E0:A5:D9:6C:A9
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:41:8c:52:bd:27:9f:5e:29:c2:3d:1f:84:a9:5b:b5:26:68:
9b:2b:56:f5:b7:fa:42:dc:8e:9a:9d:92:61:44:41:67:fd:53:
d7:82:d8:aa:f0:d4:9f:b7:5f:b7:ad:a5:8d:05:b2:95:1a:c3:
95:18:6c:2f:2a:1d:2f:98:10:bd:c7:dc:3e:65:d0:71:0c:a6:
57:d7:ef:a0:1d:66:45:30:41:c9:36:58:7f:74:da:d3:ed:4b:
76:64:4d:6a:8b:0c:7f:11:c0:a5:47:eb:95:8f:bd:73:df:e8:
d0:80:e8:c6:9c:9b:fc:14:8d:fe:e5:6b:b2:d7:ed:ea:15:3b:
bc:25:dc:2c:69:a6:6d:39:e3:17:96:14:41:38:aa:8a:df:d7:
34:60:df:28:2e:b8:b8:c9:67:4e:b8:bd:a5:e7:40:55:29:78:
78:32:9a:e7:f5:1e:0e:9a:e5:a2:c8:45:e0:a7:3b:70:48:fd:
05:03:44:9b:13:59:1e:0b:10:00:b2:3f:60:6b:fa:e5:1f:35:
86:f6:d7:eb:09:4e:18:02:00:64:9d:92:8e:62:0e:af:1f:f4:
0d:5e:52:6f:11:96:a9:5c:04:e3:8a:df:7e:17:fd:5d:44:af:
dc:d1:b5:16:d7:fd:75:ad:95:51:cd:b7:32:3f:3b:4d:c5:c2:
07:6c:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:37 2026 by rpki-client