Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: XWc1GVsSihS7VtqLHfC/Ct0k7NJ7RXIwSv19NJYjgU8=
Subject key identifier: 0D:2C:E2:E5:81:0F:5A:B4:F4:0D:25:BF:13:F3:84:E7:90:92:5E:7B
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019DCCAADE382F94A78B1C34EF51E85AB1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 13CF
Signing time: Mon 27 Apr 2026 02:00:43 +0000
Manifest this update: Mon 27 Apr 2026 02:00:43 +0000
Manifest next update: Tue 28 Apr 2026 02:00:43 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: TXKt77KJitzXoIEwloErn+CpUfrqe/869iSF4UoLcJU=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:de:38:2f:94:a7:8b:1c:34:ef:51:e8:5a:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Apr 27 02:00:43 2026 GMT
Not After : Apr 28 02:00:43 2026 GMT
Subject: CN=0d2ce2e5810f5ab4f40d25bf13f384e790925e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:bb:7f:29:99:b5:6f:76:87:48:f6:6d:e9:
0e:d1:dd:3f:3e:71:95:90:8c:b4:85:b2:37:e5:35:
c9:e9:62:c4:8b:2d:0a:7b:e4:25:8c:db:fa:17:9c:
9e:97:e9:47:58:76:71:5f:5d:90:a8:a8:98:ee:ce:
42:25:21:58:2b:53:63:31:c5:12:b0:50:d5:e3:36:
ad:49:99:52:14:78:80:9d:3c:5b:76:02:d2:e9:3c:
94:ee:c0:52:f3:84:9f:3d:ff:b1:bc:79:98:e9:b1:
4f:20:c2:0b:11:49:18:9d:37:48:53:bc:35:7e:a4:
25:e2:10:d0:a3:6d:7f:15:7e:82:f4:ea:66:05:6e:
bc:38:5b:fa:e9:60:b7:e3:04:02:64:2b:4f:6d:03:
fe:9d:14:b6:f3:56:e3:c2:82:b5:99:f4:85:c9:2d:
0d:a2:4a:d1:b0:55:a6:e9:3a:ee:97:2c:8a:f6:f8:
91:00:88:38:14:31:43:eb:3e:af:47:62:fb:af:09:
11:c5:71:9e:c2:f0:c1:f3:0e:e0:60:3a:0d:10:16:
92:22:14:d1:c5:3f:9c:93:a3:1c:59:88:8b:15:5c:
4b:e2:3e:27:2f:6b:0f:f3:24:03:96:f0:30:5c:27:
bd:03:e7:fe:1a:66:3e:1d:97:bc:6e:ab:47:cc:92:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:E2:E5:81:0F:5A:B4:F4:0D:25:BF:13:F3:84:E7:90:92:5E:7B
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:06:12:d5:a0:4a:e4:5b:0f:8d:a4:c5:8d:e1:70:98:2c:7e:
ce:6e:59:71:30:b0:46:8e:87:e7:f0:99:a5:42:07:b6:df:32:
31:5f:67:c0:38:de:4b:79:6d:c4:a1:07:ed:c1:3f:e1:61:39:
7e:61:de:12:f0:25:a1:e8:cf:b2:b5:5a:00:e0:16:56:01:f0:
63:6e:5a:39:37:30:f7:1e:9e:26:d2:32:82:80:b0:90:2f:28:
1f:1d:44:56:e8:fd:66:91:cd:ea:dc:5a:c6:86:84:99:97:e1:
94:0d:50:eb:74:af:c2:a7:55:b5:a2:ad:75:26:fc:e8:0b:e6:
87:ea:f8:f1:8c:31:b5:17:c4:89:47:93:c3:31:1d:28:ff:8b:
e4:dc:bb:0d:a0:64:79:8b:c6:0a:db:e4:f5:1d:2c:81:81:a9:
b5:40:46:e9:db:e5:e9:56:ec:65:61:56:d8:b5:ef:32:7f:14:
47:19:38:74:db:30:fd:f0:07:ba:0d:8e:67:37:a1:56:8f:2a:
38:6e:bc:87:a0:91:7f:8e:3a:7f:de:53:72:a4:77:8b:47:61:
8e:2b:bd:91:7a:62:c4:13:8b:62:87:81:27:e2:41:a5:c6:22:
2f:a3:a0:82:d1:0b:59:d9:70:32:7f:7a:bd:6f:09:3e:79:84:
7b:41:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:06 2026 by rpki-client