Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: sxqDBUzLMZAZMSGHB9DWOBUsNWmdZUhu3ZAM2C7YNEI=
Subject key identifier: 71:09:0D:33:79:6F:FC:3B:04:F9:9F:73:C5:25:A0:2C:E2:0D:9E:98
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019E1F479E24B6AF605A10C21108B488B79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: FB
Signing time: Wed 13 May 2026 03:00:47 +0000
Manifest this update: Wed 13 May 2026 03:00:47 +0000
Manifest next update: Thu 14 May 2026 03:00:47 +0000
Files and hashes: 1: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (hash: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=)
2: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: dxWjMgmSuNv14yIjYDHHLAb4clN/QKdQmOnP0e6IIyA=)
3: chZPH4ZC4M2DAOIIjqvske79NxY.roa (hash: Da9ZVR4WFGTaF/DxkypPXhAW8yz4gKHy/MICLQjoEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:9e:24:b6:af:60:5a:10:c2:11:08:b4:88:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: May 13 03:00:47 2026 GMT
Not After : May 14 03:00:47 2026 GMT
Subject: CN=71090d33796ffc3b04f99f73c525a02ce20d9e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:d0:f9:53:34:e2:3a:9c:b8:b4:f7:cf:77:
80:99:2c:41:14:fd:09:46:d3:0c:27:02:c9:19:c1:
30:a0:52:1a:ef:6d:28:3f:fc:97:ad:d3:06:8b:4c:
fe:ca:16:b0:a9:8c:95:0a:28:c7:6c:24:70:f2:01:
a7:28:a2:7d:38:1a:21:45:32:22:1f:bd:ad:c5:08:
fc:74:5d:6e:ad:b3:cc:67:a2:16:c6:23:f9:c2:c3:
22:31:bf:f0:17:aa:0b:cd:4f:55:72:0d:0c:d0:09:
dc:fc:00:86:79:4a:ac:eb:3a:6e:bf:4a:5b:ea:4b:
fa:8d:a4:59:87:6e:77:36:26:bc:ad:7a:76:4b:76:
ac:35:a2:72:23:77:a9:1e:28:6e:5d:7a:8b:7d:fa:
3c:c1:dc:7c:ce:10:ca:99:9f:19:d3:5c:10:44:7b:
52:2a:5d:1f:fc:fa:0e:9d:49:fd:36:98:62:27:ad:
f5:99:e2:50:68:4c:2a:b1:24:bd:5c:d4:a5:5f:27:
1d:2a:0e:41:65:f4:be:2c:9d:43:91:a4:20:98:98:
00:bf:5a:17:6d:55:55:63:7d:d6:f7:41:69:21:08:
27:b2:0a:5f:eb:f4:04:89:93:85:a2:10:79:8f:25:
27:3f:b0:8e:5b:79:4a:b5:bf:f2:ad:f0:da:c4:10:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:0D:33:79:6F:FC:3B:04:F9:9F:73:C5:25:A0:2C:E2:0D:9E:98
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:48:7e:bb:77:a0:c8:18:7f:e4:2e:c0:84:d1:99:a8:b6:68:
e6:90:45:0a:bb:5d:ca:3d:17:07:7d:4d:b9:65:3e:03:ff:46:
e5:e0:92:c6:ea:d0:bd:94:ae:97:cd:4d:a5:39:ee:e0:55:58:
a3:d2:0f:59:a5:3a:78:ce:d9:fb:a9:4b:17:5d:b0:0a:5c:fb:
99:f2:34:4f:5a:de:f2:f5:ae:5c:3f:c8:33:c9:bf:ca:5a:57:
95:af:17:13:ca:0d:95:e5:16:e5:5c:61:89:82:97:95:c7:ba:
92:b9:40:b5:2b:7f:dd:81:b1:28:b3:35:69:2d:03:a7:55:b9:
79:19:53:f1:6a:79:b2:cb:23:82:5c:5e:09:7e:09:50:2d:96:
6b:90:6f:6a:27:da:3a:1d:fc:99:20:0c:da:19:6f:4f:d4:84:
9c:5a:11:15:fa:60:81:b1:71:02:77:53:ed:32:e8:0b:69:33:
13:94:18:b6:78:f7:f7:af:52:34:3e:21:d1:47:77:2d:72:87:
05:b3:0e:1d:3e:57:87:c8:20:9e:19:0f:71:b4:aa:f2:ca:ee:
f1:47:6e:c2:cd:86:93:e7:d1:74:ad:f1:c4:f9:91:fe:d7:cd:
66:e4:7d:29:25:60:e6:2c:2e:e0:ce:be:74:b5:84:bc:bc:ee:
56:c5:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:30 2026 by rpki-client