Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: nFX/ROKjsIy/PAGxMPziVC+hcAtOD+shvWNQNJINETA=
Subject key identifier: A3:1E:36:A4:03:82:96:AE:08:CA:0E:45:D0:C8:3A:1F:AF:3D:F8:11
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019F924886994334100874AAEFD6684810E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 04:00:54 +0000
Manifest this update: Fri 24 Jul 2026 04:00:54 +0000
Manifest next update: Sat 25 Jul 2026 04:00:54 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: 2RTMSo+HWu6NKpX12KQU1YIIrtKFATXiOLLrkzPW3HA=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:86:99:43:34:10:08:74:aa:ef:d6:68:48:10:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jul 24 04:00:54 2026 GMT
Not After : Jul 25 04:00:54 2026 GMT
Subject: CN=a31e36a4038296ae08ca0e45d0c83a1faf3df811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:ba:60:9e:16:79:de:77:2a:0f:79:78:06:
08:a0:14:21:80:82:f9:a2:42:bf:30:e3:b6:69:c5:
1d:93:d0:10:8d:93:fa:90:b1:ce:6f:25:75:9a:4c:
ce:1c:a1:aa:2d:74:a0:8d:61:60:05:da:34:1b:a9:
9e:31:90:27:45:08:05:74:b4:3c:e3:9e:85:97:29:
b8:ad:08:3a:43:f2:45:cd:d0:c8:3b:fa:85:a3:b3:
91:b3:ee:41:0a:32:ee:6c:00:ce:b6:68:27:d2:da:
c4:95:7d:4e:e0:83:aa:8b:e4:db:2b:06:01:e9:9f:
f7:d1:7f:c4:6f:b1:ad:e7:8a:d4:8b:be:ff:4b:12:
13:3b:18:23:2a:3a:46:88:d1:82:fd:40:57:50:25:
28:94:81:f7:25:89:19:c1:84:7a:47:3e:56:69:be:
4b:16:a5:71:87:03:4b:08:e8:9f:e7:2a:9d:9a:3c:
5b:af:d1:b0:25:40:23:e3:65:d0:af:34:03:25:e0:
5b:e3:57:8b:db:6d:62:7a:1d:ae:4f:f4:5f:b1:14:
35:fd:45:8a:42:88:a9:44:2e:af:00:7d:9f:77:ec:
2f:44:cb:7f:bf:8f:c5:28:eb:ea:cf:42:d5:8a:40:
57:27:cc:fb:1a:c2:a1:85:c7:9b:2a:08:94:a8:1e:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:36:A4:03:82:96:AE:08:CA:0E:45:D0:C8:3A:1F:AF:3D:F8:11
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0e:fb:66:9d:c8:45:92:8a:a5:0b:d3:ae:63:21:16:29:b3:
dc:a5:6f:14:5b:1a:cb:51:73:90:90:a4:de:a4:5e:e5:f6:89:
5e:4a:87:78:c3:f4:d5:46:24:2d:93:cb:28:26:79:ba:c0:21:
3c:7a:db:37:48:4d:8f:0b:71:97:8a:fa:a1:f8:de:ec:b3:e3:
e6:77:cc:19:9e:f2:9f:67:81:c4:51:a0:73:b1:7f:84:4f:3c:
b0:43:fc:05:3d:bf:e8:f5:22:5f:a9:d1:45:32:1a:5b:b8:de:
e4:14:1e:5e:27:9f:b4:3c:70:c0:8d:52:8b:de:16:65:6a:a2:
fc:0b:c4:46:a1:e9:09:7e:e6:72:9b:1f:65:b1:af:d9:cf:c7:
df:40:90:2a:39:37:fb:49:3f:9a:7f:7f:3e:b4:88:53:23:94:
b0:e2:9d:02:3a:5f:1f:23:0b:b6:ed:7e:72:17:50:ad:c6:9c:
56:9e:e9:df:36:db:59:0b:1a:19:3f:e8:f1:28:fe:25:19:4d:
bb:59:9f:77:c1:94:23:be:ad:e1:5c:aa:2e:f5:37:cc:85:cc:
78:d7:20:db:07:55:fc:a1:4f:60:9b:f0:56:20:13:1b:f3:b8:
bd:45:70:cc:96:9b:ab:69:e2:be:cb:bd:df:02:63:5b:64:0a:
71:0a:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:52 2026 by rpki-client