Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: 6m0QGXjwkAf5cLS0EMiBWV3/mTbLqX5g78vXmxG12wk=
Subject key identifier: 5B:32:F1:87:5F:36:4A:26:D4:77:1C:C1:52:2D:09:9A:07:C2:2E:09
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019E1FECC458F48B466695B295DD3C9FC729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 11B7
Signing time: Wed 13 May 2026 06:01:10 +0000
Manifest this update: Wed 13 May 2026 06:01:10 +0000
Manifest next update: Thu 14 May 2026 06:01:10 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: iSKg29evrkzNtHvLp08ONCOGWP8rxoiMR8T/iCePR4c=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:c4:58:f4:8b:46:66:95:b2:95:dd:3c:9f:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: May 13 06:01:10 2026 GMT
Not After : May 14 06:01:10 2026 GMT
Subject: CN=5b32f1875f364a26d4771cc1522d099a07c22e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:e4:84:39:5f:47:6c:eb:f4:bd:17:be:35:
8d:e3:b7:70:39:35:74:17:0f:c4:dc:1c:c9:27:37:
d7:2f:32:66:6e:19:e4:2b:df:a4:e9:ad:6a:be:7e:
30:9b:d6:1a:f3:e5:5e:0c:21:97:8d:81:dc:1c:9e:
46:93:1d:3c:c2:ea:2e:e1:08:12:a7:8d:ad:61:23:
28:4a:de:e8:bf:69:e0:fe:d5:70:53:4d:06:af:3a:
32:1b:f0:ae:aa:b1:5e:49:68:f4:8e:ce:a6:71:26:
38:54:7a:d7:c6:cd:a4:ca:0e:a1:6a:eb:78:8c:2a:
27:8b:9a:2f:e8:6b:ab:ba:b9:f3:16:e4:c1:eb:b1:
c3:02:1c:9e:a2:cf:82:61:ba:3e:3a:b6:02:5f:36:
41:e2:6a:38:b1:32:ef:af:3a:65:30:06:6e:c4:f7:
97:3a:5f:a8:87:0e:88:04:ca:38:b4:6e:68:03:16:
41:6e:e2:85:d1:4a:d0:10:37:90:5b:58:71:e8:6d:
df:16:b4:1e:82:39:32:b5:2a:a6:20:1a:71:6f:4d:
0f:7e:c7:9c:66:da:0f:7a:1e:51:31:ec:54:21:ad:
7f:62:53:5f:30:a6:54:9e:c1:c4:e8:e0:af:32:a0:
33:45:96:26:15:f6:df:9e:57:5d:a0:2c:de:58:f9:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:F1:87:5F:36:4A:26:D4:77:1C:C1:52:2D:09:9A:07:C2:2E:09
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:ac:ee:c5:50:e0:0c:c2:91:3d:48:88:a5:de:25:e8:24:
79:0f:d5:7b:47:41:aa:07:1c:84:37:04:fd:94:56:05:16:63:
9f:18:bc:7c:7c:79:66:5a:60:1b:0f:34:7e:7d:78:5e:a8:24:
7b:99:d7:d8:38:e3:d3:d4:51:c5:6a:80:2c:b9:51:5e:c0:b1:
77:89:be:24:71:ec:aa:8c:85:dd:fe:b9:d4:02:c9:a9:0f:04:
5c:76:e3:cf:09:fd:0a:d8:b3:fe:f3:02:82:82:0f:0c:fd:2f:
fa:b9:d3:68:9b:c3:df:ea:c1:bc:6d:d6:6d:f7:15:c7:eb:a1:
54:d6:08:b3:51:19:79:06:2f:ca:a4:d8:00:3b:d3:29:a2:64:
60:32:9d:6a:9e:60:05:bf:23:17:3e:a8:c5:29:f7:c2:c7:36:
38:21:3e:9e:09:09:f7:54:0f:c7:8c:fe:52:87:46:4e:a8:0f:
df:7d:fd:ce:24:c7:28:67:e0:42:d6:27:b2:0e:a0:a8:c2:8d:
a4:37:dd:a8:58:f3:e3:2c:85:11:d7:dd:11:aa:73:fb:63:57:
d0:6e:30:3a:92:2c:0f:c4:df:37:d2:fe:f3:59:39:2f:40:cf:
d7:df:99:e8:40:b8:9e:f5:4f:04:9e:e2:f8:a9:cb:fe:a6:08:
8c:f0:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:12 2026 by rpki-client