Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: 0gdyempbZuWKor0j+c29FGI+8/P90STp/QKgnmUqXrU=
Subject key identifier: B9:EC:DD:A2:C6:58:78:0E:9E:69:46:C0:A1:D4:AE:2D:23:72:C6:30
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 01A1773A46349AC3A6C5D32D73F6831DE9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 15B5
Signing time: Mon 26 Oct 2026 08:01:10 +0000
Manifest this update: Mon 26 Oct 2026 08:01:10 +0000
Manifest next update: Tue 27 Oct 2026 08:01:10 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: lsp8bSfPueab65JLRVcaUVGB3gevX3k4TO9t+MR0oP4=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:46:34:9a:c3:a6:c5:d3:2d:73:f6:83:1d:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Oct 26 08:01:10 2026 GMT
Not After : Oct 27 08:01:10 2026 GMT
Subject: CN=b9ecdda2c658780e9e6946c0a1d4ae2d2372c630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:5a:8a:aa:3e:a5:d4:e7:43:87:cd:b0:bd:
8d:1e:f8:23:20:43:b4:7b:a0:96:25:e9:bc:e3:0f:
f4:6e:f1:1e:ab:87:30:30:a1:0f:7a:56:98:4c:1f:
91:81:cd:fa:ab:1a:72:e4:22:35:27:64:03:e9:55:
31:e9:ca:c9:60:79:b2:a4:60:b0:7d:26:7d:3a:dd:
d3:8f:67:78:06:d8:cb:d8:b7:19:9f:4f:9f:7c:d4:
df:ed:05:be:c9:9a:63:80:cc:ca:fd:b7:d9:1d:71:
04:26:86:d8:83:65:50:54:04:fa:01:56:0f:2e:e0:
1c:f9:b4:fc:ab:0d:a6:78:bc:ed:a6:ae:a0:75:0f:
a1:9d:96:f2:5f:82:33:21:4a:1f:6b:ea:12:c2:c4:
db:a7:09:e6:cf:6e:ad:1c:bc:d7:14:20:bf:01:5e:
01:90:3d:fa:b5:57:a8:fb:25:33:74:d4:9a:50:92:
85:37:35:1a:81:db:ab:66:74:d7:0f:40:54:e9:65:
bb:b8:38:c3:8c:d6:5b:95:90:be:50:d0:09:90:24:
8f:c2:36:4b:82:57:ff:50:8d:9a:d7:25:12:52:75:
2b:6b:aa:c4:03:2a:be:19:1d:7d:27:71:83:d3:94:
4d:e9:be:05:ce:63:20:0a:70:f8:3d:fa:b7:4d:89:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:DD:A2:C6:58:78:0E:9E:69:46:C0:A1:D4:AE:2D:23:72:C6:30
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f0:69:bf:6f:51:6b:d9:95:a2:2f:fb:d7:a7:55:91:db:b7:
bc:05:cf:85:98:57:95:37:c9:96:2d:a6:5a:fa:40:5c:cf:f3:
90:64:e7:c7:09:14:5f:fd:bf:0e:f9:51:cd:93:95:1f:8d:52:
71:7a:a9:7b:71:32:b7:b4:dc:a8:02:c3:ad:8e:27:22:fa:52:
e2:26:a9:b6:54:05:b7:c7:c4:33:3e:65:c6:a1:48:84:72:41:
8b:6f:9f:91:79:84:d1:e4:07:a0:e3:5e:7f:b2:e7:93:02:98:
71:2d:33:d8:28:43:ea:02:99:3b:0a:76:f5:b8:b5:0e:f9:07:
08:55:6d:92:de:59:4a:1f:4c:40:17:d4:8f:51:4a:21:dc:b6:
b9:8c:5c:26:31:c0:db:27:e4:28:01:69:1c:4e:13:ad:78:f9:
5b:2d:28:d4:e7:46:25:6f:db:24:e8:bb:f9:fe:9c:53:02:df:
4c:12:d1:4e:bd:72:67:bb:f9:6f:c5:f8:b8:db:b3:dc:57:2f:
ce:e3:a3:36:ea:4d:d2:67:ec:2d:8d:21:ee:0d:00:4a:95:65:
85:29:e7:b0:e1:38:99:b0:0b:fe:38:fd:ed:1a:c2:3f:68:d9:
43:cb:21:79:46:4a:76:e0:03:99:fc:73:f9:df:0c:ae:8d:5d:
4a:e4:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:46 2026 by rpki-client