Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: byejhX9+SEhV+tL+558A4yb7iPZimqn8d+CA0j/noG8=
Subject key identifier: 96:9F:CD:2E:34:99:5A:4A:23:6E:B8:0D:0B:92:C0:6F:65:7A:92:4A
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019D394150B36DBB7E4AECEE54EEB9F920F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 13A3
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: j9pCTLREOPxUI/sxkOLrGA/qDgURylusMPB/Aw+B7bU=)
2: QIDwH1Apv1IdS1zr47e95gfDzAw.roa (hash: KfrzWi1fwrRO4OS81VuEDcM52w79Q7KbGOwSe0GzMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:50:b3:6d:bb:7e:4a:ec:ee:54:ee:b9:f9:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=969fcd2e34995a4a236eb80d0b92c06f657a924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:25:12:ed:64:62:dc:9c:2b:56:33:3d:06:
8d:8a:77:42:0f:ae:59:bb:d3:2e:ab:c2:6e:b8:20:
e9:cc:de:4d:b6:6d:61:20:1a:e6:7d:e0:8e:4e:31:
91:c2:d4:3d:db:ee:aa:9a:16:e6:34:7a:9f:38:88:
45:d5:8e:4f:e8:2a:f4:57:7d:34:1d:0a:ea:3d:52:
b1:53:1b:c8:02:30:31:df:9c:0c:ce:8d:09:5b:95:
32:8c:55:52:6e:ac:cc:33:a4:84:1a:09:0d:a5:d7:
04:6d:2a:a0:a6:b3:fa:22:9a:2d:5e:26:a5:0c:42:
c6:0a:88:40:29:9d:77:35:71:77:c0:a4:13:51:9b:
64:2d:1d:bb:54:0b:de:cf:8d:b3:12:b9:51:18:cd:
1b:8c:f0:ba:4e:22:8b:49:47:44:a5:61:42:85:66:
25:c4:5a:91:b8:11:c5:2f:73:63:13:f9:1a:6f:da:
e1:0e:9d:b8:5f:55:b2:b4:1d:48:73:e5:49:a8:e6:
d4:cb:81:13:e2:ba:c9:74:c6:1c:c3:b5:96:52:90:
2b:47:18:4c:30:c1:2f:f6:ea:c3:11:bf:41:73:6e:
08:40:0e:50:f1:61:6b:1e:43:2e:ab:de:ec:b2:69:
aa:d5:b3:a4:11:fc:3e:bb:6e:cb:2b:d3:13:94:85:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:CD:2E:34:99:5A:4A:23:6E:B8:0D:0B:92:C0:6F:65:7A:92:4A
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:af:0b:de:ce:cc:b6:96:10:73:3c:a5:8f:aa:7c:d8:a0:55:
e3:8a:e0:c7:ee:82:ac:7b:89:18:69:b3:23:aa:fc:35:2b:29:
bc:db:47:1c:b4:23:7e:c8:d7:af:55:fe:1d:70:bb:98:cb:2b:
55:d5:c6:39:c6:ae:93:3a:af:06:a5:32:59:b4:82:a6:5e:d4:
cc:1b:da:c5:31:bb:1a:b1:5f:b2:2d:80:40:b5:02:77:8c:dc:
23:c5:48:96:01:12:28:3c:17:11:4b:1a:88:d9:f5:2d:b5:67:
aa:38:82:41:c0:46:45:53:bc:4e:ad:ca:32:39:60:76:8f:4d:
cb:41:d4:ca:c2:f5:cc:8d:6b:6d:e7:27:dd:ad:b9:58:b5:f2:
68:a0:40:fa:d2:e3:52:4e:26:b9:95:32:e5:61:71:54:14:48:
80:d9:bd:39:55:09:f5:b7:73:3f:d4:44:23:cb:a6:82:a6:85:
4b:7b:51:51:57:81:b7:cf:30:d0:11:3b:08:14:a6:65:c6:77:
a0:65:78:8f:58:6d:25:76:62:ba:a5:a4:57:80:c1:0b:d8:95:
6d:34:84:3c:26:24:3d:5c:b7:01:49:14:99:1b:8c:a0:15:11:
9a:56:f6:8b:35:f6:2a:88:3f:08:80:47:fd:e4:94:9f:9e:7d:
24:58:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:35 2026 by rpki-client