Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: lHDhtaKRwuxipE1Li3PWZoFWQKwUDgZMOGDzXIFA0N0=
Subject key identifier: E3:65:72:DD:DF:09:C0:DD:61:27:C2:F1:5A:EB:1C:96:1D:F3:FF:C9
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019E4F593A81BD5128E2CECAE7218CC53DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 04BA
Signing time: Fri 22 May 2026 11:01:48 +0000
Manifest this update: Fri 22 May 2026 11:01:48 +0000
Manifest next update: Sat 23 May 2026 11:01:48 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: LxrN0MzAjoumKKBVRpGUyHIAEyNeHPO15fNLbnUKU3M=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:59:3a:81:bd:51:28:e2:ce:ca:e7:21:8c:c5:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: May 22 11:01:48 2026 GMT
Not After : May 23 11:01:48 2026 GMT
Subject: CN=e36572dddf09c0dd6127c2f15aeb1c961df3ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:8a:f1:d3:9e:71:e4:73:b9:2a:59:d0:d0:
57:9b:9a:e2:a7:28:f9:7a:15:5b:47:43:cd:3b:cd:
fe:27:cf:a1:54:3f:3c:89:eb:91:90:b7:b7:f8:8f:
f0:da:7f:df:11:e7:53:90:97:0b:1c:bc:36:c1:08:
63:ba:c2:af:80:51:91:b0:63:7a:5e:57:b4:52:65:
4f:d2:56:b1:13:28:da:4d:a3:3f:a4:b7:ee:61:7a:
5d:d2:74:da:07:0b:db:61:c8:60:18:e1:ab:e3:2c:
cb:75:fc:f5:cd:5b:6b:39:2d:a2:ee:b7:1a:27:17:
22:c1:1d:18:e0:1e:4b:e4:9c:25:be:20:0e:4a:ba:
c7:88:69:75:70:7c:dd:42:e2:94:2b:b8:b9:98:ce:
69:d6:e9:4f:c2:6f:13:b9:2e:c9:d9:bc:99:f1:6d:
9e:75:a0:3d:bf:0e:8f:ce:c0:23:90:74:a0:05:df:
a9:a6:6d:bb:09:49:78:46:52:86:aa:1d:5b:4a:89:
89:18:7f:9f:f0:77:2b:5d:f8:c0:45:3d:fa:a7:4d:
cf:98:cc:67:32:72:86:bd:15:b2:b2:35:5d:98:4f:
d0:a7:25:6a:18:58:23:da:fb:6d:27:0d:3b:4e:cc:
03:4a:84:0b:a0:87:a8:fb:b8:30:06:86:80:b8:58:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:72:DD:DF:09:C0:DD:61:27:C2:F1:5A:EB:1C:96:1D:F3:FF:C9
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:e9:23:01:a6:54:33:9b:bb:a5:a1:44:cf:d8:e9:5e:3a:
b7:6e:59:87:32:f5:ad:33:b2:1c:c6:68:aa:8f:43:2b:62:94:
4b:2f:4b:d0:d2:aa:cd:51:df:5e:bb:99:dc:2f:4b:4c:11:55:
ba:4d:df:81:a2:bc:af:20:dd:57:58:6c:fa:f3:e5:67:7a:54:
75:f7:0d:06:ec:b6:8c:82:57:9d:3b:65:71:31:dc:95:40:64:
a8:94:f1:eb:48:cf:f0:e0:8e:27:ed:10:18:60:37:ec:cf:bb:
ec:c8:7b:8e:d3:bd:fc:2c:a2:e2:c5:18:b3:66:b1:7f:d8:8d:
c2:51:56:50:05:4e:24:55:13:d8:a1:37:cc:37:23:39:76:1a:
04:69:a0:69:7a:5b:a4:93:a5:4e:1e:70:dd:96:49:3b:33:06:
7d:3b:54:12:71:e4:ca:2c:b7:f0:93:d2:f1:b7:29:b2:3a:9b:
4d:e8:63:d4:e3:3e:fe:6c:8f:18:10:a9:bc:cc:7e:c7:2d:6c:
d5:e0:aa:62:2d:27:71:fc:ac:fa:2e:4c:2f:ca:9b:c7:85:7c:
63:70:2f:08:73:47:b9:f0:14:de:65:85:9c:ac:aa:9a:d2:b5:
d9:71:61:9f:a2:21:b3:36:e0:17:de:45:df:7f:70:9c:bf:92:
a8:3a:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:03 2026 by rpki-client