Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 0yHspc25BsWPF2xYz3kf+yE/57bH0x70c3jLeVA7Umc=
Subject key identifier: 09:F6:AE:C7:EF:C4:E9:A5:6E:9A:A8:21:B7:E3:BD:9A:69:72:B4:B5
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019E1CEC0BD06AC78E92F89202F32FA1339A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0FB1
Signing time: Tue 12 May 2026 16:01:31 +0000
Manifest this update: Tue 12 May 2026 16:01:31 +0000
Manifest next update: Wed 13 May 2026 16:01:31 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: ab1QoGitUv3gLFlA4Uqf38ocgTY/UlPyFJyyyRiowDA=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:0b:d0:6a:c7:8e:92:f8:92:02:f3:2f:a1:33:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: May 12 16:01:31 2026 GMT
Not After : May 13 16:01:31 2026 GMT
Subject: CN=09f6aec7efc4e9a56e9aa821b7e3bd9a6972b4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:85:f4:bb:1f:80:19:b7:06:28:b2:02:56:
c4:38:aa:81:26:da:58:a5:b8:89:8b:53:a9:58:b6:
9f:e8:c5:fa:05:ed:ba:a0:2e:ed:a5:5c:f5:46:ac:
f2:5c:35:53:21:dc:94:7b:ad:e4:e0:94:cd:fe:7e:
a7:ef:66:dd:67:d3:e9:95:c3:d0:5f:f5:1a:bf:72:
55:91:37:31:b4:50:f1:14:fa:d5:b2:de:30:d1:92:
5b:06:87:b8:e6:ae:5e:2a:30:b8:27:0e:19:71:8a:
7e:d5:b2:ad:30:98:33:d8:e8:85:db:0a:c2:80:28:
f0:5b:3f:74:e1:5d:a7:c7:d6:81:d7:d9:85:58:04:
02:31:4e:27:76:87:5e:9f:1d:dd:4b:ec:c9:ac:51:
f6:72:b3:bb:c5:ae:5d:d6:0d:a9:9d:4a:58:99:9c:
f0:51:0a:94:82:84:02:39:d5:7e:4c:a7:52:e1:c0:
56:80:63:68:eb:45:6a:b4:fc:4d:7f:2a:d0:b7:67:
ad:2b:f9:7d:3d:12:1d:32:e2:fb:07:be:0f:45:8b:
33:f6:6c:f7:de:8f:70:04:a6:bb:80:62:40:77:ba:
1c:a4:59:48:47:34:7b:10:4f:35:f2:3d:90:97:52:
7a:93:3e:c2:bd:e0:a8:e6:3e:35:16:ed:b8:8b:dc:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:AE:C7:EF:C4:E9:A5:6E:9A:A8:21:B7:E3:BD:9A:69:72:B4:B5
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ad:01:93:b0:84:95:81:02:8f:19:ff:ce:44:a9:0d:80:23:
87:1d:5b:3d:62:04:8b:ea:dd:b5:ba:db:db:c1:a8:b6:09:8d:
6f:e0:7c:fc:4d:bb:b1:bd:f9:79:18:74:59:ce:19:ae:1f:0d:
67:d0:83:26:07:4e:17:f0:99:2c:62:85:5e:97:e8:4e:d4:8c:
ab:84:49:7d:2e:82:51:25:89:34:8b:6d:da:39:a5:b5:10:90:
2b:0d:04:a3:89:78:e2:27:54:73:77:d8:c1:c0:44:fc:00:cb:
6c:e1:ff:27:e9:3a:b6:2c:df:c8:cd:c4:df:80:b5:4f:d6:c9:
16:1e:eb:5e:dd:0e:ac:8e:15:6f:cb:d5:ac:f1:a5:3c:18:f2:
fe:f0:34:6e:d6:77:6e:cc:c1:d1:f6:59:cf:0a:ff:d8:6b:43:
79:67:4a:8e:d9:c1:d6:85:b9:8e:b9:a9:32:53:3b:71:43:92:
7b:6a:ff:f7:76:fa:bc:ae:d4:93:fd:08:3b:bf:8f:c5:23:3e:
b4:b1:f4:9c:3b:50:b2:5e:80:fe:33:fd:b1:93:84:53:f6:f3:
a9:ad:de:21:d9:f8:bd:23:42:fe:13:9a:b4:16:a6:3e:6b:b9:
f3:b9:4f:a5:e5:d5:22:aa:27:c1:dc:f8:b7:a5:f1:09:9f:0d:
e3:04:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:01 2026 by rpki-client