Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: AY3eTAlJvR5PjYXcvQTNVU6aI7INP+k+LzXGEh+PIw0=
Subject key identifier: 58:B2:4F:35:47:F9:39:59:F5:80:C8:45:C4:AB:75:E0:9C:56:E2:54
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019D2929592FF9E07BE0D473B7F1E3415F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: A_68etnfks3PakbL9Hb45owYZ-w.roa (hash: 8UV8lYEu6iu3XIgtRfYywNlrJ6Qvyca/nSSa6hHK38E=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: /tIEP4VeqjG+ebn8tCiQDYUusEoVrkVN93dqXLvgAPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:59:2f:f9:e0:7b:e0:d4:73:b7:f1:e3:41:5f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=58b24f3547f93959f580c845c4ab75e09c56e254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:0c:19:51:28:4c:47:5b:db:b6:6b:91:ea:
8a:a6:7c:b7:e1:03:34:f7:f1:83:32:67:2d:2b:c0:
ee:3d:12:ff:f6:fd:28:fb:63:2c:84:de:3d:23:ff:
97:98:0c:8d:6b:57:67:bf:00:fa:a7:c1:cf:ab:d8:
e0:a4:67:18:53:2a:2b:ed:01:a5:95:34:06:bd:1c:
de:dd:94:44:68:d3:16:74:6a:10:63:ba:1d:82:d4:
ab:64:b3:73:d0:8e:73:8d:1f:16:70:06:85:0a:6e:
d3:82:b2:26:b5:fc:c0:bb:54:60:e5:ea:b9:99:a9:
13:6a:b6:9a:fe:56:cf:cc:60:5c:e2:77:8a:7c:4c:
53:4b:c0:aa:4d:6c:ad:39:26:6a:83:b7:96:8d:2d:
ae:67:3e:98:95:6c:11:49:2a:fd:12:aa:ac:90:5f:
86:15:5e:cc:2b:2d:5b:46:0d:ce:9e:a3:34:6c:fe:
b8:0d:63:2e:75:46:c4:2e:c2:e3:eb:fb:3b:05:07:
a6:45:dc:56:22:77:df:39:ed:36:59:c2:97:a3:6c:
37:0d:17:82:0f:c9:17:e6:cc:4f:f0:81:82:12:55:
6f:b4:ab:07:46:75:de:9d:92:c7:18:88:a3:f9:c9:
38:c0:cd:a0:46:df:e3:ab:d0:ec:1e:bc:20:97:8b:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:4F:35:47:F9:39:59:F5:80:C8:45:C4:AB:75:E0:9C:56:E2:54
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:af:5b:65:c5:a8:a3:b9:be:e6:fb:8f:08:14:b2:ca:f9:
ca:05:43:2b:ff:b1:75:15:47:7b:45:85:c8:c9:6c:ad:bb:01:
47:fc:48:93:9f:c2:4a:91:9f:48:65:6f:b2:f1:fc:0a:26:b2:
45:f9:20:ed:77:6d:88:ed:04:d2:82:38:27:c1:d5:5b:22:88:
eb:e0:6f:66:c4:70:99:4f:a6:35:74:97:9d:66:3a:59:0d:57:
62:99:0e:20:2a:bb:87:64:6c:f9:ed:cb:07:34:29:df:a5:3f:
8b:9e:68:60:46:47:51:52:89:33:42:d3:01:3f:c1:81:d8:4b:
0b:b0:6d:fa:78:07:7b:10:89:6b:fb:eb:e4:3c:08:11:91:39:
8c:a0:00:88:ce:bc:cf:3b:c3:ae:cf:7c:c0:12:a2:71:52:ae:
58:00:3b:8e:59:69:cb:fa:93:c7:6d:9d:87:50:29:3a:82:80:
2f:1c:da:51:aa:38:5b:ba:af:3c:47:2e:be:45:f4:f4:58:66:
47:78:96:a7:63:3b:23:a0:4d:36:0a:a8:53:e4:50:28:be:89:
9a:ad:eb:16:2a:89:39:27:d5:05:d4:51:1e:91:67:eb:2b:d1:
13:d5:c8:93:e8:d7:27:92:44:21:7e:a1:29:50:81:72:fc:5f:
12:d2:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:11 2026 by rpki-client