Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: q/2leSI9Kz3sS6m+dhqrF+uUa9cCIWcYhMChLE8Q8us=
Subject key identifier: 57:09:48:BE:94:EF:5D:78:2F:A5:8B:F2:BF:F6:1E:12:BD:A5:CA:C1
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 01A0E92ECA01DB834F354B43E571526C42FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 01BB
Signing time: Mon 28 Sep 2026 18:02:32 +0000
Manifest this update: Mon 28 Sep 2026 18:02:32 +0000
Manifest next update: Tue 29 Sep 2026 18:02:32 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: hkZvLAUGgP7+DcM2XN3u1Pi66rWowYaunYFbqM3/xUY=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:ca:01:db:83:4f:35:4b:43:e5:71:52:6c:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Sep 28 18:02:32 2026 GMT
Not After : Sep 29 18:02:32 2026 GMT
Subject: CN=570948be94ef5d782fa58bf2bff61e12bda5cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:d7:05:68:2a:9d:9a:bd:0d:09:85:02:fe:
94:4b:49:f4:bd:fb:dc:85:4b:52:77:18:aa:30:2a:
0b:77:37:ab:db:50:e2:20:a1:db:30:9b:33:9e:bd:
f3:69:eb:2a:09:35:8b:bf:37:2c:51:f5:80:d0:2f:
34:ff:41:db:8b:30:fc:ff:2a:a1:28:dc:b0:b7:45:
de:f2:ea:b3:44:c7:42:32:4b:68:c4:f0:75:cb:51:
8f:ed:32:af:dd:26:96:78:88:40:e0:da:ed:23:b3:
c4:24:d2:fc:b2:dc:fe:f3:c2:76:98:5a:96:43:e4:
79:bc:ee:39:4a:3a:a2:71:55:4b:76:ef:d8:51:4f:
34:5e:ef:47:b3:c1:77:ce:58:e3:79:b0:08:6e:71:
8d:c6:d0:ff:c4:e0:1c:1c:70:a8:56:f7:09:ec:29:
54:7d:eb:05:b8:76:55:56:ef:ea:40:fe:bb:d0:5e:
3d:c5:b2:c8:d2:1f:c4:9f:b6:fb:8b:92:fa:4e:f6:
3d:c9:bf:80:c8:0f:8c:19:33:85:4d:29:30:af:85:
9b:4c:cd:85:0d:87:03:59:fb:26:8e:fd:af:3f:ca:
c9:e4:bb:08:6e:9b:cb:5b:2f:94:63:de:91:fc:a2:
28:98:c0:2c:6b:0a:bd:e4:88:99:56:55:3e:23:19:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:48:BE:94:EF:5D:78:2F:A5:8B:F2:BF:F6:1E:12:BD:A5:CA:C1
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:aa:0e:44:85:73:15:97:82:73:83:22:0c:b9:29:fc:42:
64:70:9b:2d:7b:99:b6:1e:67:8b:e8:8f:f0:0f:44:c7:2b:69:
0d:4c:b2:d8:2e:1f:49:70:28:d5:f9:65:1f:78:38:e5:19:1d:
b3:2b:5a:76:6e:be:34:91:02:f5:f9:bc:d6:93:16:48:9d:f4:
41:0c:3b:6c:32:c0:7a:d0:8a:b1:0d:22:7a:e4:cc:72:c1:fb:
c5:d9:f6:0a:69:de:4d:8b:32:4f:ff:4c:a5:7e:8f:32:7e:0d:
7a:4b:4a:9e:e9:42:ec:97:f7:46:f0:bd:9f:b9:49:ed:dd:12:
b5:5b:a3:f0:45:63:3b:61:2b:6c:77:23:9b:99:70:be:5e:34:
f7:28:40:93:f8:d2:20:dc:20:32:a5:18:5f:a4:90:bd:cc:75:
50:41:96:a3:ad:94:ee:5e:a0:f7:02:64:b7:fa:ec:81:38:e0:
51:ec:38:eb:c5:81:0c:ba:72:5f:c7:d5:c9:4f:cf:33:44:c7:
8c:a5:7f:f7:bd:d7:8d:27:ca:9b:2f:2b:50:4f:90:87:63:94:
70:d7:46:c5:91:96:86:4b:80:bb:4c:23:e1:95:89:76:76:d7:
62:18:60:9d:5b:0d:9a:ca:85:56:4e:8b:74:a5:f1:e1:29:e9:
e1:88:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:29:18 2026 by rpki-client