Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: Sf1Mlhvu1bzq317RSNcPlafoJJOgMZ7bZo30sQEpHMw=
Subject key identifier: 47:F1:4C:C3:AB:23:13:2D:21:5B:D2:3B:80:A3:2B:C6:66:BC:C2:97
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 019DDCFA7D8FC8D67F5092F27242427628F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 27
Signing time: Thu 30 Apr 2026 06:01:36 +0000
Manifest this update: Thu 30 Apr 2026 06:01:36 +0000
Manifest next update: Fri 01 May 2026 06:01:36 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: DC4aObxb3QS0JP4QQbUktCp2y0h0Ojed8R6bDT0BSvE=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:7d:8f:c8:d6:7f:50:92:f2:72:42:42:76:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Apr 30 06:01:36 2026 GMT
Not After : May 1 06:01:36 2026 GMT
Subject: CN=47f14cc3ab23132d215bd23b80a32bc666bcc297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:94:96:a2:6b:36:b2:09:33:44:d0:78:7f:
a1:6b:2b:21:89:b2:82:f4:ce:96:a9:00:d6:fb:13:
38:fb:a5:74:3f:f3:a9:e7:51:c8:5c:e3:21:68:aa:
f1:80:94:29:48:21:98:51:23:eb:fc:34:2f:4f:68:
2a:bc:9c:97:78:af:50:bc:9b:83:34:09:04:ad:4b:
27:55:15:ca:1b:5f:9a:c3:94:82:6e:1a:83:91:4c:
b3:93:2b:83:9b:33:d3:58:87:cf:e6:86:52:0c:72:
c1:26:62:25:f0:31:c7:17:09:f4:33:99:97:bc:9c:
95:ae:17:8e:b3:5d:60:5e:33:6a:ce:79:4f:7a:6f:
73:87:67:e0:22:14:6e:31:dc:1b:2d:fa:d8:48:59:
3c:c1:e3:b2:4d:1a:0e:cf:72:d0:e3:35:40:17:e6:
1a:a4:79:e1:5c:77:c6:8d:d5:13:e2:8c:24:4c:c0:
c4:6d:b7:a8:58:af:b5:a4:4c:50:33:a8:a5:84:3e:
54:31:42:c4:d1:2b:52:b3:61:2a:d7:be:0f:71:2c:
92:4c:66:3a:bd:3e:32:ad:21:c1:13:34:d0:8c:f7:
ee:9e:1a:5c:9f:30:21:4b:06:f0:31:a3:85:35:c3:
8d:85:71:af:14:d5:d9:5d:b4:d9:14:82:e8:35:7d:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:4C:C3:AB:23:13:2D:21:5B:D2:3B:80:A3:2B:C6:66:BC:C2:97
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:46:e4:27:df:c3:33:84:18:6c:ed:0b:04:71:e9:27:fe:
e7:63:71:74:a9:57:24:99:ba:99:80:74:49:d3:e0:b0:2a:a3:
f6:71:b8:90:3f:db:34:4d:5c:8c:54:e4:cc:e1:4e:40:b8:b6:
46:0c:00:57:38:74:1e:4b:54:6b:cd:85:12:af:45:df:ec:69:
9a:6d:b6:53:68:3b:49:c4:d2:01:df:b1:58:7d:9e:79:b3:e1:
4c:52:96:2d:3b:73:ca:c8:1f:dc:ab:96:01:b2:75:e8:0f:da:
88:14:5c:e8:7d:ea:6b:cc:3a:4f:34:f6:94:ad:8d:53:ed:b6:
77:ce:2b:76:c1:c3:3e:cb:b0:4b:bf:a2:a3:c4:3d:a9:ab:61:
6f:19:f3:3a:ba:28:96:d5:69:8e:18:8d:a9:09:6e:dc:85:68:
89:af:6a:42:cc:35:0f:12:74:da:96:ef:d4:d6:0b:15:f2:48:
b8:04:ff:8a:5c:1c:1e:eb:c7:d8:62:93:45:50:86:ac:82:ee:
92:4b:50:b6:90:cf:51:ad:fa:6a:9b:0f:fb:dc:85:c8:9a:fb:
53:4b:da:64:f3:75:1e:73:85:3b:d4:80:48:59:bc:55:94:02:
8e:fe:6c:95:d5:ee:1e:05:e8:c2:8a:44:3c:d2:1e:5f:a0:42:
68:2c:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:47 2026 by rpki-client