Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: JsBo8ZX2cPpP/WkfQbE52Ao9xAdOa3teVZNiAIhyH2M=
Subject key identifier: ED:B0:1C:10:69:6F:C2:69:54:E0:52:E6:5B:5B:A1:61:67:79:31:E9
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019D2BBC9295ACD4EA640FF80E666EE09D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: 77
Signing time: Thu 26 Mar 2026 20:01:11 +0000
Manifest this update: Thu 26 Mar 2026 20:01:11 +0000
Manifest next update: Fri 27 Mar 2026 20:01:11 +0000
Files and hashes: 1: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (hash: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=)
2: G5eQXu5H__QhEkQxf42-4uqMKhw.roa (hash: zH3RuDSSRJhuo5vyXWEf9sITlhQIFjIKWux7GYGzXfk=)
3: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: ISNk6+ArY9dD07DuESh+RwqazhXvLPt4pR5C37eh4uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:92:95:ac:d4:ea:64:0f:f8:0e:66:6e:e0:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Mar 26 20:01:11 2026 GMT
Not After : Mar 27 20:01:11 2026 GMT
Subject: CN=edb01c10696fc26954e052e65b5ba161677931e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:c6:54:ee:77:67:99:2f:b4:dc:93:9c:ee:
98:a5:4c:47:73:44:d5:42:5a:b3:ea:73:26:ae:40:
57:98:40:7f:9d:70:e2:ef:6a:54:f8:42:2e:99:17:
3f:da:b9:de:ef:17:e6:07:b8:1c:4b:c4:ff:c5:24:
cc:2e:43:8a:20:50:43:2e:40:72:23:b8:a8:cb:93:
0a:e1:75:ef:33:7d:5a:64:6e:ba:90:89:05:3c:c2:
ab:67:6b:47:41:36:39:27:50:ea:84:51:55:de:66:
a5:c1:48:f2:69:67:37:63:a7:f7:08:8e:be:71:7b:
0f:d9:e3:2c:36:95:99:5f:85:0d:3c:82:f2:67:73:
ae:06:c7:93:c9:ae:db:b9:1a:05:b5:0b:18:f4:47:
b6:fe:b0:d6:4d:b1:04:f5:15:34:c2:99:9d:11:87:
2b:19:7d:34:e7:d1:37:a3:c8:0a:a2:eb:0e:64:d6:
c1:d2:6c:be:8a:7b:16:74:c3:ca:cc:a9:41:83:29:
19:5f:0f:55:4c:35:91:1d:ae:1e:61:69:2a:20:25:
fa:10:d7:29:2c:65:e7:5f:c5:4a:f0:9c:a1:70:86:
15:83:c9:e5:54:fe:96:2b:e5:29:1c:d5:48:c2:b4:
61:55:35:c4:1e:10:46:15:bc:9a:b0:54:f5:de:22:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:1C:10:69:6F:C2:69:54:E0:52:E6:5B:5B:A1:61:67:79:31:E9
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f3:0c:22:27:9c:e7:a6:93:06:49:2d:9c:df:64:fa:b7:f2:
7d:db:e8:cd:b9:6f:d6:04:33:10:29:b5:ec:9e:b9:6c:9c:db:
9b:47:8b:e3:e7:78:86:06:22:96:51:ec:5d:6e:a1:74:34:06:
3f:a1:7e:b7:43:e3:3d:a8:65:72:62:98:84:7b:1c:85:36:d8:
90:a0:35:a9:ad:4f:fe:ad:01:99:f3:15:b7:36:2c:74:a1:c5:
ae:f0:58:b6:27:b6:e6:cc:a6:f6:76:0c:af:ce:bd:75:fd:45:
5a:06:56:cc:0b:dc:e7:03:40:ba:92:e5:ba:a6:4c:41:fd:c6:
a6:ae:24:b3:97:78:d1:ac:e4:42:f6:96:8e:c9:aa:c1:72:52:
ce:23:dd:a2:37:80:29:01:96:e3:60:ca:92:b7:41:de:50:66:
65:63:6e:7a:33:47:bb:7e:8a:cd:bc:6c:81:ea:f3:e2:c1:6c:
60:8b:1d:b7:cb:68:9f:08:e3:bc:6e:fa:0e:84:fb:28:6e:b0:
80:9d:0a:99:50:5b:4d:ba:d1:3d:48:67:01:68:04:a1:44:50:
f2:15:ca:b5:f9:70:2c:f2:d3:83:c1:80:b9:64:37:b7:0c:26:
7d:d4:cc:b3:85:43:36:88:e5:83:27:62:b1:83:ed:e6:9f:8e:
3c:fe:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:06:40 2026 by rpki-client