Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: QQJE7EFUtj7rqS8kuaniGvHfJSRWnYlXhv8OBx7hrBI=
Subject key identifier: 4D:FB:7F:BA:CE:B0:26:47:36:57:A6:A7:C7:F0:A5:57:7C:23:E2:FC
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019D2A046F4E60F9576D0FE806C037A4FD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:26 +0000
Manifest this update: Thu 26 Mar 2026 12:00:26 +0000
Manifest next update: Fri 27 Mar 2026 12:00:26 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: BYy5T8wmaxRzNDjpB/34+6p/ItFUOIMZaX7Go05EfKo=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
4: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (hash: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:6f:4e:60:f9:57:6d:0f:e8:06:c0:37:a4:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Mar 26 12:00:26 2026 GMT
Not After : Mar 27 12:00:26 2026 GMT
Subject: CN=4dfb7fbaceb026473657a6a7c7f0a5577c23e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:10:c5:51:06:b7:4a:4f:68:9d:17:b4:e8:
a9:da:60:1e:43:d6:ba:04:04:94:51:79:e8:fb:51:
ee:55:06:3f:50:62:9b:00:89:07:3a:7b:fb:5d:64:
42:a7:3e:ff:aa:77:c8:7c:8e:29:ca:b4:b0:82:06:
eb:09:bd:ff:86:d7:74:1e:d6:2b:d0:45:ca:15:bd:
d5:e8:31:2e:d2:3b:f4:19:66:67:79:da:4e:9e:1f:
0a:9a:b7:f9:02:3f:a3:09:8d:b3:b3:76:10:8c:85:
d5:13:36:a5:f7:c7:1b:ce:6a:a5:11:a3:8c:b1:5e:
b8:9e:bf:2c:71:bb:25:c2:26:d9:69:de:73:d0:aa:
f3:1e:d4:df:fe:bb:40:67:8e:6e:09:99:ba:d0:37:
2e:ba:06:81:3e:50:ea:9a:a7:bd:3c:3d:e6:6a:b6:
da:f7:b4:2a:23:d8:ee:ad:9b:93:6f:62:87:4e:5a:
da:77:36:b0:31:25:fe:e5:de:c3:80:b1:45:4b:6d:
2f:6e:8c:2a:b4:ea:b8:82:69:64:46:07:59:61:87:
d6:01:b9:f7:e2:fc:59:b4:6f:f9:a7:51:d6:a7:cd:
de:b9:21:d8:b9:33:35:29:06:37:12:43:30:41:e3:
9c:88:e3:a0:67:8e:3e:2e:db:0e:09:07:6b:cc:97:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:7F:BA:CE:B0:26:47:36:57:A6:A7:C7:F0:A5:57:7C:23:E2:FC
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:37:b7:d0:e9:8c:c9:1b:60:ff:14:e3:06:e9:52:df:f5:aa:
62:cb:da:8f:0c:b4:0e:7a:81:53:3f:73:c6:bf:a4:a6:27:c2:
7a:52:56:b1:94:0b:c2:2c:9d:cd:85:15:a0:ef:3b:1c:0a:3c:
be:62:af:e4:f0:df:b7:ff:93:88:4f:25:96:d7:b5:98:2e:be:
16:50:63:66:da:ae:38:a7:50:fb:93:d7:53:4f:18:79:0b:22:
6b:a0:c2:7b:f1:90:0d:dc:08:36:87:2f:ca:f2:13:24:6d:55:
e0:c1:04:d1:b9:b6:ac:76:d1:1d:78:95:d9:10:e8:63:2d:d6:
9c:d0:24:3a:6c:77:ec:10:31:8d:83:aa:24:a7:82:99:73:ea:
7c:81:09:99:7d:1d:d1:85:33:a5:8d:25:66:32:a3:99:7a:d9:
17:37:6a:47:be:d7:95:f3:f7:51:93:cb:cf:aa:5d:64:00:de:
4c:8f:80:a7:cd:54:35:ac:66:88:8c:13:5c:83:cf:db:5d:27:
4a:ad:fa:b9:8b:de:f5:91:6d:d3:16:dd:a4:af:6f:5f:0d:69:
d3:a6:72:b7:76:c7:08:75:73:f7:37:db:b4:15:8a:68:be:9b:
5c:9a:a3:3f:ca:08:3f:0d:12:5d:61:61:46:d6:1b:58:aa:a5:
77:c0:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:29 2026 by rpki-client