Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: E79tttFm2FrNsdSpSJ8k6fznaG6oXvMyObgewAZ+zN4=
Subject key identifier: 24:68:0C:64:87:A9:D2:D7:6A:60:A9:D5:90:44:4F:16:D9:E1:FE:A3
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 019D36E5326496F815B3075A44F24A9DA872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 00:01:23 +0000
Manifest this update: Sun 29 Mar 2026 00:01:23 +0000
Manifest next update: Mon 30 Mar 2026 00:01:23 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: ieLWfjUNaisUEe4umzy3WtClhhZ/xTi1oKUi+DIR6rM=)
2: xE7QTqbNdhn5gknQPHHkIzofK-E.roa (hash: llDvi2taRSF2NctjRtmwTyGFIoc+gbx6y6MnqNFwqu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:32:64:96:f8:15:b3:07:5a:44:f2:4a:9d:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Mar 29 00:01:23 2026 GMT
Not After : Mar 30 00:01:23 2026 GMT
Subject: CN=24680c6487a9d2d76a60a9d590444f16d9e1fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:4d:bd:49:b5:28:77:39:8d:4a:df:e2:d0:
ef:a7:bc:9b:30:a5:97:aa:99:04:2a:fa:9c:f7:fc:
e4:de:40:60:85:2b:20:a6:30:d6:f5:56:1c:a8:91:
88:f0:88:ec:f9:f6:f4:1f:b0:44:75:2e:9f:e1:ef:
e7:b6:e6:87:ac:25:83:61:ad:d4:6b:5e:af:60:27:
4e:ed:16:ca:91:d7:d6:e1:99:27:66:29:5d:05:b2:
e3:04:50:af:6e:0a:cb:37:82:b2:ed:0e:52:7c:68:
1a:4e:cd:d6:53:ef:00:24:3d:a6:a4:fa:2d:44:c7:
61:1c:ac:f1:e0:52:5e:81:cc:e2:52:fa:4b:44:8b:
72:59:89:d5:c2:08:97:65:0e:81:da:4c:f9:56:3f:
75:ee:f3:ef:22:32:2a:53:2c:8e:12:5c:25:e5:ee:
db:7e:b2:9d:30:50:53:13:8e:ed:12:03:e1:52:7f:
ce:a5:86:ae:8c:44:a3:9b:b0:62:8e:ff:b0:02:b0:
47:62:ee:16:57:3e:6a:b8:e7:69:6c:1f:31:88:e6:
99:bd:06:2e:65:2e:c6:c3:58:0b:11:d0:8a:1e:b8:
c1:01:8c:52:3d:02:b0:3c:61:2f:76:88:83:f6:a6:
9b:75:c6:a7:74:b1:08:27:95:b6:e8:a7:53:41:b7:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:0C:64:87:A9:D2:D7:6A:60:A9:D5:90:44:4F:16:D9:E1:FE:A3
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7a:88:3f:4a:3b:e7:4c:2d:11:bb:25:0e:e8:f2:bb:b0:ef:
87:cb:bd:f2:98:08:06:9a:23:b9:51:6b:51:aa:24:d0:02:76:
6f:ab:14:d6:c1:83:b4:4f:c3:23:21:5b:09:42:47:96:10:6b:
36:58:d3:0d:9d:88:ed:ad:d4:28:e7:69:12:10:5a:d7:76:ab:
a8:96:df:14:b6:0a:fc:8b:fa:05:29:e4:75:f3:69:80:cf:86:
97:ad:4e:b5:d7:93:c4:53:a8:3e:34:2b:d6:08:18:3f:c5:1a:
b5:a4:e4:be:cb:a7:7f:10:78:9b:33:ae:1e:88:2b:ad:81:44:
7f:69:fb:ed:ab:70:64:c2:c3:6f:38:cc:af:5b:9f:23:5e:81:
ae:0e:10:b0:a1:98:21:95:94:98:85:02:d6:cb:f8:ff:a3:a3:
a6:0b:de:49:c2:e2:75:22:da:f1:19:96:d3:ba:53:b4:ed:5b:
8e:6f:6c:ba:ca:be:9c:8f:ec:50:ba:e9:36:3e:0c:1a:17:74:
8a:9a:c2:f3:82:bd:4a:f3:34:b5:67:82:b7:a3:c6:55:6d:a3:
8b:45:e2:28:66:9d:66:e9:04:b4:92:5a:c7:13:06:3c:ea:eb:
44:cd:fb:89:9d:00:f5:82:26:ed:0f:d0:28:75:25:db:c5:88:
11:0b:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client