Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: ijfjXEREKm+c870rw6f/7dU5ttIK7a5U0dK9LfMWCgk=
Subject key identifier: F0:69:25:94:D8:41:FA:71:86:89:6B:D7:01:46:4A:F5:C9:00:C7:44
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019D27A8BA90CE88A9C275269CB506BA1742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0F32
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: uIEBUi0GDkYgfl4u2LhctclBbo+4Zz/y2UFxnD/AJFw=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ba:90:ce:88:a9:c2:75:26:9c:b5:06:ba:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=f0692594d841fa7186896bd701464af5c900c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:e9:bc:48:60:bd:96:7e:e3:45:47:68:f2:
2f:16:d0:6a:8e:38:52:8a:c7:81:e8:ec:a8:17:76:
b7:56:4e:b2:2b:05:ee:a1:4f:67:df:27:c0:ab:73:
f7:70:dd:19:29:a6:d8:2a:93:cd:09:58:7b:41:1f:
70:c3:84:1d:3f:fd:c3:a0:26:db:91:3f:83:73:69:
bc:23:34:31:03:2b:32:d9:bc:33:f7:1a:7b:07:cb:
94:88:8c:d9:fa:e4:8a:b3:f3:d9:e4:f2:0e:08:18:
7b:41:a5:d7:71:3e:c8:9e:98:56:35:b4:8b:fc:ee:
4f:ff:55:87:50:3b:29:b2:9b:9c:23:85:51:7d:f7:
c1:61:78:8d:5b:af:33:1c:28:b1:90:4e:77:f2:f2:
62:49:be:57:bb:0f:4e:80:e7:ce:c9:1d:14:28:da:
b4:84:7a:de:7e:bf:1e:f9:37:4f:0f:0d:23:bd:9d:
5d:d3:a6:19:5d:22:0b:d7:b0:98:8b:e6:9d:23:96:
f7:54:99:e2:8a:92:75:24:ea:6c:d8:01:60:a8:5f:
60:f3:36:3e:22:6b:4e:46:dc:83:eb:b9:22:de:b9:
be:99:71:e5:aa:dc:e6:2e:cb:25:f1:33:22:b7:fa:
04:22:6d:a2:18:e5:3d:ac:08:4d:d9:ae:3c:f6:d3:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:25:94:D8:41:FA:71:86:89:6B:D7:01:46:4A:F5:C9:00:C7:44
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:76:bf:5a:f1:84:e0:98:af:72:fe:e6:07:ab:08:84:b2:
ba:04:25:1d:fc:6d:19:69:7d:2c:c5:68:95:4e:42:1c:62:eb:
7a:4a:63:e1:6e:1d:f2:79:8c:cc:7b:35:b4:9a:fd:e8:e4:c5:
20:0e:b1:22:4e:86:e1:43:12:8c:52:cd:18:11:fa:af:b9:e3:
cf:7b:cc:13:ec:82:47:10:e3:db:55:1b:75:27:5b:ae:67:ba:
04:ef:6b:94:be:65:99:26:36:55:39:d8:f9:c7:d9:e3:91:d2:
1e:56:20:6b:e5:81:fb:5b:7c:6d:fc:b3:1d:a8:cf:75:e7:94:
4f:a9:ec:13:81:df:c6:f8:93:ef:b6:a3:8c:54:13:cb:55:db:
23:17:67:68:da:2a:b0:d2:bb:87:a7:55:39:2c:34:8a:0f:73:
ce:bf:81:47:58:98:18:cd:24:2d:2f:04:c4:7a:89:33:9f:df:
b7:17:10:9b:15:d1:a9:43:d3:bb:c1:3a:77:17:9e:ae:2b:f3:
e2:26:0c:fb:59:be:93:f2:f4:68:4c:fe:ab:24:32:52:a4:ac:
9e:15:78:cf:e2:49:30:dc:90:42:e3:1e:9c:00:26:3a:79:0c:
dd:2a:cb:4d:13:88:8e:44:ff:12:62:79:7a:0d:72:4d:b3:cb:
d9:01:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:49 2026 by rpki-client