Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: IogmhNps2h2uzUGMoyufZpaVL+T7YMuAA+M2YJ6al88=
Subject key identifier: 07:30:7B:A1:81:49:E2:5D:75:21:F0:FF:2F:3B:07:16:6A:F5:AF:39
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01A1070194B326F8C42F4BA828FF9F63B916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 13:01:46 +0000
Manifest this update: Sun 04 Oct 2026 13:01:46 +0000
Manifest next update: Mon 05 Oct 2026 13:01:46 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: +0z98BUOWh/hS0zJki4q4kPwDqbc1EkH+yZtrNL1t5M=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:94:b3:26:f8:c4:2f:4b:a8:28:ff:9f:63:b9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Oct 4 13:01:46 2026 GMT
Not After : Oct 5 13:01:46 2026 GMT
Subject: CN=07307ba18149e25d7521f0ff2f3b07166af5af39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:65:0d:9a:35:7e:7f:cd:0d:8e:a6:7c:d5:
77:54:3f:99:c6:47:41:95:e3:5f:45:c4:c5:9e:b9:
0d:55:42:2d:a4:9b:73:fb:f4:b7:d5:86:28:b8:3d:
42:3f:7f:da:27:a0:01:f8:8f:78:15:c6:42:75:9f:
ae:36:55:50:18:64:be:9a:79:49:7f:73:ac:fb:de:
6c:0c:fa:39:ac:62:13:23:06:03:76:da:42:e9:35:
c5:a5:f0:ce:4e:c8:38:7b:86:2d:0f:c7:3a:32:03:
e8:29:5d:7e:47:b5:59:9a:da:c0:2d:28:be:fa:95:
33:ae:97:9b:82:2c:67:bf:1a:f7:4a:a2:2e:ff:9d:
e8:b8:bf:64:4d:b1:83:e0:8c:61:55:8c:98:ec:80:
d9:0a:b3:c0:e7:e7:2f:28:ed:46:4b:e1:e4:e1:b1:
28:0b:95:a4:99:12:09:68:da:2d:40:73:fc:e5:5b:
5e:26:fa:eb:76:15:5e:a2:32:4a:b5:58:a1:91:5a:
76:0e:39:80:4c:37:fa:ff:3a:95:94:6f:7d:f7:fe:
5b:e1:c4:74:82:ac:ba:72:22:71:6b:c4:b0:f6:b6:
cb:4c:30:4d:94:e4:d7:fa:b6:44:a1:66:f3:ff:24:
3f:29:f2:40:2f:11:47:38:cb:07:15:b2:58:c4:c7:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:7B:A1:81:49:E2:5D:75:21:F0:FF:2F:3B:07:16:6A:F5:AF:39
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:8f:dc:00:99:82:55:bf:60:c4:d0:6c:1e:6a:1c:64:75:
52:88:dd:ca:5a:58:36:5e:4b:bf:18:bc:66:e1:c1:fb:8f:61:
d4:ea:34:ce:9c:4c:3e:aa:52:67:71:31:50:4e:c3:b4:f8:bf:
33:e2:36:a1:42:34:d8:1a:f9:b9:01:a9:8c:c0:46:58:20:76:
5e:7c:d4:f3:1b:d4:40:f1:8e:76:69:83:44:f8:8f:04:b1:0f:
72:31:e5:ea:c1:cf:97:bc:2d:08:91:71:ac:34:50:b9:7d:06:
bf:b2:dd:33:e1:ea:3a:c7:52:d8:b3:5e:a9:22:dd:28:8f:43:
5a:26:86:57:33:f3:5f:42:60:f8:fb:2d:6c:f6:77:64:4b:da:
7c:a1:08:64:41:33:98:ff:96:f7:bb:e6:bb:46:ac:28:d7:c5:
28:eb:8a:43:91:37:b9:05:86:e3:17:cb:5a:38:59:14:4e:97:
19:34:65:7a:57:9d:1f:1b:69:6c:8e:55:a3:f8:42:45:32:c4:
06:a7:ee:70:0f:17:33:77:c7:1c:72:bd:a4:fd:31:ac:9f:7c:
6d:1c:58:0d:42:47:61:cd:78:28:66:fa:5f:41:7c:e0:5f:c1:
c3:f8:6e:a9:84:30:dd:ed:bb:bd:47:f9:a0:ed:7b:a7:e5:0f:
43:99:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:45:54 2026 by rpki-client