Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: dwOzyOPZ0kDcUC9ZEFTPHvYkou1dd2kn3UaqE2+ndUo=
Subject key identifier: 21:EB:B0:63:1A:2C:F8:D6:E8:DB:6E:DD:DD:F9:8F:19:4C:6C:BC:D1
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 019E1F10CE951BF520D4FFE3AF69175299FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 16AE
Signing time: Wed 13 May 2026 02:00:55 +0000
Manifest this update: Wed 13 May 2026 02:00:55 +0000
Manifest next update: Thu 14 May 2026 02:00:55 +0000
Files and hashes: 1: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: Vx6droyLi/ueCeYShpoWqSZuwzmhfuh+YtCQX1L67JE=)
2: y9oIavvpiMrvnU2r-vzh4RLXZAM.roa (hash: 0GqP4mZRL5cj50tTVSJxQrctxG11Svu03EroPoTMkWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ce:95:1b:f5:20:d4:ff:e3:af:69:17:52:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: May 13 02:00:55 2026 GMT
Not After : May 14 02:00:55 2026 GMT
Subject: CN=21ebb0631a2cf8d6e8db6eddddf98f194c6cbcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:10:9d:1a:dc:95:04:23:74:63:a2:a6:cc:
fe:e7:99:24:2f:0e:d3:8f:28:63:5a:a1:15:82:07:
84:8b:92:54:82:1e:15:3e:88:99:15:94:03:db:10:
8e:92:71:46:dc:bb:5b:54:8e:31:24:26:c4:9f:97:
ee:4a:e7:0d:44:cf:fb:fe:15:79:26:6b:2b:f9:64:
0b:1b:d0:25:fa:05:0d:a0:c8:99:83:09:c2:8b:e6:
18:06:45:22:d9:a2:e6:87:52:0c:31:18:1b:b5:50:
92:10:d4:55:65:e9:76:25:c8:d2:5f:cf:7a:fe:af:
d3:fb:c6:a3:7c:66:2e:6f:69:59:d9:75:ba:41:55:
6f:62:68:72:01:7f:00:a4:4d:37:44:97:a8:a8:4e:
07:48:b5:63:f0:83:77:92:dd:b8:52:58:f1:bc:1e:
ee:55:b7:73:9c:a8:23:74:e2:e2:98:cd:ef:53:56:
7b:17:75:9f:7f:00:a3:0d:9f:37:dc:cf:2d:6b:f0:
6e:af:85:6b:08:6d:88:ed:48:11:d3:b2:05:b0:2d:
5f:e8:5e:eb:4c:9d:bf:b8:e9:d5:2f:c3:ae:0e:cd:
96:6d:1d:25:f8:7d:1e:e7:4f:d3:13:c4:22:b4:9b:
bf:2e:82:61:54:06:38:b0:ea:35:8d:b6:bb:56:ed:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:B0:63:1A:2C:F8:D6:E8:DB:6E:DD:DD:F9:8F:19:4C:6C:BC:D1
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:e5:f1:68:6d:a0:a9:c2:e9:49:67:4b:61:77:2c:fe:74:
5c:97:6a:20:12:cc:a8:43:b9:92:2f:bd:8a:36:95:f0:98:b4:
da:5a:3a:4f:93:43:b2:bd:46:6e:f0:0d:8c:48:0e:2e:7b:01:
76:4a:43:52:f7:d3:d0:33:17:94:cf:d6:98:53:32:e1:50:b3:
3d:6c:1d:a7:18:ca:4f:7a:16:bb:94:f3:47:e7:28:2b:67:dd:
74:82:6d:91:96:6a:84:22:21:4d:6f:5f:d6:93:e9:b7:96:65:
04:53:f3:59:38:4f:08:f3:41:49:75:2d:d7:40:4f:13:5f:14:
b7:a9:c4:27:55:0f:8d:4b:25:f6:54:e7:a7:3f:7a:e4:c6:61:
15:fb:ca:90:eb:ee:92:40:4b:28:a0:97:7e:76:22:12:fe:3b:
d9:b0:d8:79:1b:4e:ca:6b:99:14:89:3a:42:cf:4e:ba:fb:88:
0b:6d:1c:27:26:66:6f:34:4b:9e:6e:31:44:cb:60:aa:8a:4d:
3f:51:cb:c5:c5:99:75:b8:d3:b2:37:9a:c3:38:77:18:f1:b8:
83:5e:6a:37:e2:57:5d:9a:1d:ba:c8:2c:22:b4:7f:ec:88:1f:
a6:dd:12:9c:ca:3b:2a:31:b2:00:d4:fa:8a:a6:f3:a9:e8:f0:
4d:9a:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:02 2026 by rpki-client