Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: Z4ecMs95nwJ8kZTOAW2YUnORyA6uabxmFqR3G3vnfuk=
Subject key identifier: A8:16:E5:4C:9C:A5:C7:95:08:7B:48:81:12:C5:F5:53:FC:4E:AF:7C
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 019D2816B52C902E679F8D9E4E42146BA803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 0967
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: 5glJUHtahwsnrUd+QxDasfOfXFdLNSx5/3+QU1ASNp4=)
2: wRkYU-8UwR69v9239dh2hReiLIk.roa (hash: qk1tAsneRLOzj3I71YrKf4Qz3NDzdsyT/yJUXhc7iYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b5:2c:90:2e:67:9f:8d:9e:4e:42:14:6b:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=a816e54c9ca5c795087b488112c5f553fc4eaf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:d3:e3:df:3d:19:e0:0e:73:26:41:45:a6:
50:2e:a3:4e:0a:e0:cc:62:9d:a1:97:d0:1e:a3:ba:
4c:c6:7b:ed:cb:fc:90:8f:86:3a:41:75:f2:a7:04:
18:ce:c0:73:21:61:f4:f3:cb:98:76:a4:63:95:f0:
d0:c7:10:e2:bc:4c:69:58:28:54:93:d2:5f:dd:b0:
db:a8:99:c2:5d:89:d2:85:8e:24:8c:78:c4:6c:06:
25:e3:65:6a:5d:0f:1f:56:6c:4c:56:42:ca:15:6c:
96:72:68:a9:4f:0a:52:87:3e:3d:d7:8b:0a:32:90:
c3:f5:26:0e:fd:48:ba:86:ae:6d:30:81:69:2a:42:
56:ef:05:5f:b7:c6:a3:fd:fe:f2:65:79:93:7c:ab:
a3:80:95:2a:8a:82:f0:d4:26:ab:a3:04:fd:f4:91:
1f:f0:01:ee:30:00:6d:0a:33:30:e4:e4:33:7e:d1:
91:f5:58:e1:12:0f:ff:41:ae:e3:3f:c9:bc:b7:80:
4a:59:eb:81:bc:d5:77:9e:71:40:73:c9:ae:20:14:
1c:b3:26:f9:72:f8:a6:c2:54:18:82:c9:64:41:05:
55:5d:3a:dc:d0:1c:3c:ae:b7:e9:71:f1:2a:33:b5:
1e:af:04:fd:4a:3b:d2:d5:eb:3c:bb:9a:70:da:25:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:E5:4C:9C:A5:C7:95:08:7B:48:81:12:C5:F5:53:FC:4E:AF:7C
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:6e:79:2a:5c:79:d9:c4:bd:d7:be:3e:31:7f:2a:cd:69:
8e:ba:c3:cf:68:ad:f8:e1:22:87:87:8d:79:67:c4:71:1b:c4:
e6:da:3c:ff:56:01:f0:4c:76:f9:69:62:3e:cf:29:ec:20:8c:
9a:90:8b:be:78:7b:26:bf:cd:3b:f6:32:47:be:c7:fb:e7:58:
3e:ae:37:0c:32:0e:1b:1d:a3:09:c1:50:ec:70:9f:5c:88:62:
7e:2b:f8:30:d4:d4:b1:84:af:c3:0a:39:66:a2:07:09:3d:0e:
54:4c:3f:6e:07:8a:95:a6:f1:f7:d8:b5:cc:0f:4a:4d:ca:04:
b4:50:91:45:cf:68:7e:dd:04:48:66:da:6e:6d:2c:17:d6:2e:
9d:74:35:1c:7d:ce:63:c9:00:b4:d6:c2:f2:00:2a:44:c0:10:
0b:f9:c7:b9:93:80:46:41:09:c6:40:21:e0:d2:2b:b3:26:62:
24:26:20:a6:a3:5e:2a:53:06:83:1f:3d:06:ff:37:36:56:4b:
a1:f5:aa:9a:7f:75:77:af:41:93:b1:04:1b:78:d0:ee:22:f1:
6b:81:63:62:10:80:92:ef:f2:06:c8:b7:7a:13:fe:14:fc:ec:
4d:86:03:89:f5:fc:eb:9c:cd:61:3d:d4:1b:f2:c1:d9:04:64:
71:04:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:29 2026 by rpki-client