Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: pExNTll0p36SWre2BqaH1WOQ335GTJvxlZnidU6Hk00=
Subject key identifier: 90:61:E5:C9:F6:82:C4:C7:BB:D7:EB:93:C9:4A:78:EF:62:83:C0:15
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 019D29CDBECBF85010A68EBF015DB797CC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 162F
Signing time: Thu 26 Mar 2026 11:00:42 +0000
Manifest this update: Thu 26 Mar 2026 11:00:42 +0000
Manifest next update: Fri 27 Mar 2026 11:00:42 +0000
Files and hashes: 1: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: AFCj2dWmmofd0VfcwB+PxaPSOn85l4JcHBRVTcEy7NI=)
2: y9oIavvpiMrvnU2r-vzh4RLXZAM.roa (hash: 0GqP4mZRL5cj50tTVSJxQrctxG11Svu03EroPoTMkWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:be:cb:f8:50:10:a6:8e:bf:01:5d:b7:97:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Mar 26 11:00:42 2026 GMT
Not After : Mar 27 11:00:42 2026 GMT
Subject: CN=9061e5c9f682c4c7bbd7eb93c94a78ef6283c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:ac:72:3e:80:94:31:e2:4d:83:26:0d:3d:
63:3e:68:19:bb:42:3f:00:38:3b:82:2c:ce:2b:ca:
dc:3d:3f:41:14:49:9c:60:75:8e:86:a0:b0:4d:a6:
a3:c8:49:1b:ba:b2:26:1c:f8:41:99:e8:f7:3b:54:
30:81:d5:f9:0a:83:01:0d:ae:a1:59:0d:84:94:e1:
e9:c3:49:30:c7:55:da:d4:94:3e:a6:9e:38:db:89:
77:4b:a6:3d:26:11:0f:b7:3b:19:f0:5d:db:ce:03:
7b:5d:b1:ef:e5:c2:c6:fe:c2:9f:65:f8:dd:2b:3d:
d4:f8:f2:aa:4e:74:17:a3:4e:dd:1f:72:1d:97:80:
46:22:7c:83:b7:ac:fd:b5:15:c5:30:94:4e:27:89:
7e:8d:06:55:5f:0e:ee:45:0d:5e:ed:e3:63:2c:52:
14:5a:92:f1:6a:d5:04:1f:db:be:1d:3d:f5:6b:e7:
1e:b0:b8:4e:ed:e4:b7:cb:af:b1:6d:3a:6f:c4:0b:
3c:da:01:54:4b:a2:9b:09:cc:d4:7c:7d:d3:ec:b9:
f6:b3:0e:eb:8d:62:1f:65:61:d0:01:72:35:99:3b:
14:f7:44:f7:c1:3e:47:59:8b:cc:b8:1a:a4:8e:1f:
2b:60:27:ef:19:d2:a4:2a:10:dc:83:dc:aa:18:fe:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:E5:C9:F6:82:C4:C7:BB:D7:EB:93:C9:4A:78:EF:62:83:C0:15
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:12:a5:64:1f:07:db:88:f3:70:ca:e2:76:01:ca:b5:8b:
11:e5:03:53:96:7e:b6:71:e3:9d:45:8a:70:87:a3:c7:07:79:
6f:35:83:e9:fa:45:6c:89:fb:fe:c9:e8:56:86:c5:6c:c9:75:
63:40:8c:d3:97:30:4f:09:bd:27:ef:d2:ac:23:74:64:52:b0:
50:4c:c2:0d:b5:b1:f5:e5:98:ec:db:7e:c7:30:1b:67:82:5f:
48:ce:b6:ea:1a:b0:aa:72:66:c9:05:a7:b8:91:5f:ae:ef:5d:
97:9d:c3:aa:e8:f0:f2:2f:fd:59:cd:f4:a7:e7:e7:7b:70:a5:
7a:f7:3a:a8:27:66:f7:90:c7:a0:54:94:9f:b4:e8:b4:bc:c7:
ab:4c:01:c7:f0:3b:42:6f:cb:ff:6f:63:e5:aa:33:98:4f:21:
a0:dc:68:a8:c1:db:08:88:b0:93:27:59:ff:07:91:d7:24:a2:
12:db:04:97:26:e7:14:f4:ad:bd:d7:c5:e9:b8:aa:5f:28:4c:
10:f6:a9:23:cf:d9:d2:66:45:2f:15:ca:1a:96:1b:e4:99:7b:
64:1e:09:5f:c8:57:da:16:0e:63:74:74:a2:71:03:02:19:1e:
6c:f6:fe:67:c9:f2:c8:b2:65:f8:d2:d4:01:46:f7:9f:33:4b:
b7:e2:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:05 2026 by rpki-client