Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: wrH8ofsoyvsa260vykTKlbnFqOZG9nc/nkjKsg/RKSw=
Subject key identifier: 9E:C2:2D:0D:49:B9:C7:4F:89:6A:70:98:F2:73:65:58:2A:6C:1F:87
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019EB6578C7C9D7F1A3703FF72A75D7370BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1448
Signing time: Thu 11 Jun 2026 11:00:51 +0000
Manifest this update: Thu 11 Jun 2026 11:00:51 +0000
Manifest next update: Fri 12 Jun 2026 11:00:51 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: OtQjEqEXd/U9nqqM1cU2QtWYXeVcKxcBNgaJYUwmnwE=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:8c:7c:9d:7f:1a:37:03:ff:72:a7:5d:73:70:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jun 11 11:00:51 2026 GMT
Not After : Jun 12 11:00:51 2026 GMT
Subject: CN=9ec22d0d49b9c74f896a7098f27365582a6c1f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:52:2c:77:68:81:45:e9:05:13:47:47:62:
f7:90:b5:99:1c:2d:37:49:8c:ca:89:9a:cb:48:31:
23:c0:66:c8:b1:30:64:ae:ab:c6:fc:13:16:35:d0:
86:73:ff:b3:2f:10:3a:8e:11:b3:2d:8b:b5:76:4e:
5a:60:1c:af:d2:d1:73:f0:ea:6f:7a:ee:7e:c0:e5:
fd:03:89:be:30:55:0a:9f:d1:80:63:f5:0e:41:41:
12:b8:57:49:cf:79:d2:35:40:0c:97:5e:e5:2a:d4:
bb:63:3f:b1:ac:a3:10:f9:73:9b:e0:bc:5c:0b:50:
ab:d1:7a:4a:d2:2f:a2:b7:9e:19:7d:2a:6b:4e:03:
1e:5d:b1:21:f6:53:f2:a5:3f:88:b5:d3:34:08:2e:
b0:c3:23:a7:3a:13:7e:a0:a2:f6:83:66:dd:f3:b1:
05:73:f1:be:9c:b8:bd:7c:45:c0:16:fe:1c:c0:a0:
69:65:ce:8b:a0:21:f9:e2:8b:cb:47:10:ae:56:0b:
e6:21:1f:89:9d:fd:c3:fe:57:2a:dd:d0:0b:44:09:
20:fa:bd:dd:46:aa:ad:fe:ab:ee:44:ae:b6:07:6e:
a8:bb:ef:be:48:2f:ee:18:60:6a:2a:6d:0d:cc:28:
4f:4a:6d:fc:7f:bf:00:00:84:d0:c4:97:04:3e:f3:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:2D:0D:49:B9:C7:4F:89:6A:70:98:F2:73:65:58:2A:6C:1F:87
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dc:4a:0b:58:87:db:8a:5c:c9:45:60:6a:86:4c:5e:cc:65:
7a:89:bd:39:35:87:4f:4f:f5:ed:53:ef:6a:85:ea:0e:43:47:
ba:98:f8:90:57:75:6a:b9:d1:c8:52:e4:6e:97:50:1e:fb:36:
2c:b9:dc:4e:8a:b8:93:66:dd:e3:5e:ec:23:72:9e:40:ac:03:
5c:62:59:e3:5f:da:90:d1:1c:73:9e:02:d7:dc:6f:d6:8a:33:
c3:34:8d:06:69:fd:98:69:21:b2:03:4c:39:7e:6b:5b:7f:8b:
13:be:d2:90:7b:cf:4d:77:80:e1:c3:82:70:c2:3d:e4:e3:54:
d8:45:cc:b5:61:75:8a:e7:e2:73:48:99:62:1f:62:35:c5:7f:
43:d5:c0:97:ae:23:14:91:92:f5:37:d3:8a:54:73:49:cf:4f:
96:f6:b6:ae:23:de:29:fb:6c:75:f4:7c:89:47:ef:d5:7c:21:
38:a4:09:73:19:b2:ca:93:33:fb:d2:14:ac:f0:6e:65:9e:e1:
37:75:f2:25:cd:de:5d:67:24:76:51:68:e7:ce:82:0a:51:7c:
49:a6:57:43:b8:e0:d2:4c:38:ad:34:db:38:a3:8f:3e:57:19:
3d:2e:7d:9d:ab:b8:15:8d:04:09:a0:1f:e3:6c:37:a0:ef:20:
18:62:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:46 2026 by rpki-client