Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: emnmeDhYTX9mPTktcOjA7gW4Xi+UNEAJtu6s5z/gM3Q=
Subject key identifier: AA:88:1C:E4:4D:FE:45:4E:33:0E:BF:32:C2:E8:66:E7:12:7A:40:AF
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 01A0E1E24FB6A1D356A002650B750FA15557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 181C
Signing time: Sun 27 Sep 2026 08:01:40 +0000
Manifest this update: Sun 27 Sep 2026 08:01:40 +0000
Manifest next update: Mon 28 Sep 2026 08:01:40 +0000
Files and hashes: 1: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: 1mwVW3dxA+3c1e99LmsPC5xzbAG4rkb3JCDZEapVeqQ=)
2: y9oIavvpiMrvnU2r-vzh4RLXZAM.roa (hash: 0GqP4mZRL5cj50tTVSJxQrctxG11Svu03EroPoTMkWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:4f:b6:a1:d3:56:a0:02:65:0b:75:0f:a1:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Sep 27 08:01:40 2026 GMT
Not After : Sep 28 08:01:40 2026 GMT
Subject: CN=aa881ce44dfe454e330ebf32c2e866e7127a40af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:79:04:25:01:80:4e:29:15:f2:c8:6d:7d:
19:61:56:21:aa:47:74:6d:a8:bc:b5:8e:47:27:6a:
c7:14:9e:75:fc:61:18:b5:13:6c:55:2c:a2:7f:ca:
98:90:9b:92:77:e6:b2:7b:19:6d:52:e2:f7:cf:b7:
6d:59:fd:61:87:0e:46:ce:db:bf:0c:e2:f3:a8:8b:
72:a6:ec:0a:d4:82:2f:45:bb:7a:90:ed:be:fd:81:
04:7e:fd:3e:f3:1d:97:97:4e:7f:c9:f1:cb:7e:05:
c2:ad:36:37:ef:2f:4f:83:ba:c5:4b:96:4b:ea:bd:
69:c3:d7:80:ed:11:62:df:48:bb:38:00:41:92:fa:
a5:64:21:75:c4:9d:2a:25:b5:93:30:5c:ef:2a:f4:
40:31:51:ec:90:4f:ca:2f:b3:74:3b:e2:2a:8d:3b:
7e:69:34:90:16:18:93:e7:dd:df:a8:8b:0a:8a:d3:
57:44:92:07:20:26:ea:0a:3d:ff:41:a1:09:54:29:
00:6e:9e:f8:b6:28:d2:7d:e5:97:32:7a:9c:80:45:
c7:62:6d:55:99:78:b5:96:79:8f:11:cd:36:8e:e3:
e7:75:41:ee:2c:0a:6b:64:fe:2a:4c:1b:c1:e3:36:
13:c3:94:e4:44:19:67:2a:e9:9d:ce:ea:f5:04:3e:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:1C:E4:4D:FE:45:4E:33:0E:BF:32:C2:E8:66:E7:12:7A:40:AF
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0e:12:7d:52:e6:25:1a:57:aa:e6:f9:29:97:82:ab:7f:b5:
32:8b:52:f5:c8:74:8c:4f:7e:47:40:82:46:23:db:30:06:2a:
b9:5c:96:7c:4e:41:3e:0e:6d:1c:d6:83:84:48:79:9e:4a:46:
88:3a:96:a9:c7:b9:0d:f4:a4:57:a8:89:67:81:ff:bc:47:c2:
4d:da:2c:8f:74:94:eb:cc:0c:d6:39:b1:e7:cf:c0:ad:76:2a:
ed:58:b0:b9:2a:ac:23:25:7f:96:a7:2c:7f:ed:f9:6a:1e:3c:
32:0f:44:ea:3a:7a:00:23:eb:2e:3b:71:63:2b:02:6c:5a:4e:
31:24:c9:22:d9:b1:49:f3:b4:89:c7:e8:99:80:cc:d2:bf:d7:
7a:31:6d:17:16:f5:37:83:49:bf:96:99:22:27:6d:d7:30:b9:
ca:dd:3a:99:59:9c:62:e3:fd:da:5d:19:39:89:63:25:fd:b7:
92:69:aa:57:72:e4:9c:fb:c2:15:1d:0f:5b:4c:45:04:7a:36:
3a:41:8b:40:69:3c:72:4a:7f:64:d8:37:d4:b0:5f:f1:37:81:
dd:e5:e7:53:15:f7:36:65:6f:4e:88:bf:c4:af:1f:1e:89:cd:
b4:c7:34:48:a8:df:04:0b:53:67:a0:2f:77:3e:6b:13:14:7e:
7f:79:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:09:12 2026 by rpki-client