Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: d80eMcEZUH0xZljqZQ1Z2BGv4o3Ihoy2jcgrOK5PKAE=
Subject key identifier: 8A:6E:72:FA:8A:DC:B9:A8:C7:80:D7:0B:52:D2:6C:9F:FC:AA:95:D2
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019CE4EC95497E58D68B1DF3695EF067BE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1357
Signing time: Fri 13 Mar 2026 02:00:35 +0000
Manifest this update: Fri 13 Mar 2026 02:00:35 +0000
Manifest next update: Sat 14 Mar 2026 02:00:35 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: esTXEywnO89jNHJ5zNOE371yM8D62crtxaHIhs8Bp+E=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:95:49:7e:58:d6:8b:1d:f3:69:5e:f0:67:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Mar 13 02:00:35 2026 GMT
Not After : Mar 14 02:00:35 2026 GMT
Subject: CN=8a6e72fa8adcb9a8c780d70b52d26c9ffcaa95d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:f7:5c:92:e6:29:30:a4:00:d5:3a:e9:2b:
8d:81:89:90:31:e2:98:bb:21:4e:19:d8:66:a8:62:
c2:95:64:03:2c:40:77:38:09:3d:14:82:74:d4:24:
b2:91:46:97:06:ee:13:53:38:b5:a2:5b:27:dc:ab:
36:3b:42:29:97:fb:aa:89:98:83:f7:7c:af:0b:d9:
01:a3:0d:4f:e6:8a:ef:7d:cb:4c:ae:dd:2a:ae:37:
99:eb:f4:57:7e:ef:de:b6:15:d3:fe:fb:51:79:b6:
76:cf:8a:fe:de:f3:00:80:14:17:6a:07:d7:d3:b5:
0e:3e:4f:6d:6e:dd:10:da:b1:fe:e3:81:8f:86:07:
08:ef:e0:11:35:20:10:70:35:ee:36:27:d0:8f:85:
46:77:d6:37:6d:2e:ef:e0:7b:67:2a:b3:f8:b6:1b:
19:0b:1c:33:49:25:16:cc:6d:6c:11:70:06:be:9b:
63:67:19:8c:8b:7c:2e:f3:90:82:9d:39:7b:ac:96:
75:c3:0b:05:48:c1:87:f4:7a:fa:ad:31:55:a5:7a:
06:dd:d2:63:44:5d:95:90:b3:22:3d:e1:04:41:c2:
07:3f:cd:79:f8:16:48:da:15:34:72:97:76:fb:37:
1f:e4:b8:29:9e:ea:fa:7a:93:a0:7f:6c:15:c0:56:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:72:FA:8A:DC:B9:A8:C7:80:D7:0B:52:D2:6C:9F:FC:AA:95:D2
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:0d:8c:e6:a4:23:44:9a:7b:98:8d:54:d1:f3:59:dd:f1:
7f:83:2d:7d:21:ae:db:39:82:cf:05:ff:26:c7:b9:e6:5e:0f:
ab:b3:eb:34:56:ae:77:54:4d:e0:bc:bd:52:b5:ad:f6:3f:33:
e4:70:bb:a6:0f:6d:c3:df:8d:43:66:41:80:dd:3b:96:01:e5:
22:8c:20:57:b7:5a:83:4d:f7:5e:ee:bf:4b:e7:89:88:47:9b:
f6:d4:f3:32:da:47:bb:d8:73:77:e4:2e:68:5b:3c:ee:27:09:
a5:4d:44:13:65:ad:09:85:d1:3b:65:3f:7a:50:ec:e2:0d:4c:
30:05:48:c4:7d:00:17:3f:73:84:9a:1f:6b:a9:85:a4:d0:0d:
35:08:aa:b1:aa:3c:f3:76:82:a9:88:e8:fc:b1:bb:a2:30:a1:
fb:ef:ac:c0:3c:5f:44:9e:6c:17:eb:8c:43:1f:8a:d8:ff:b7:
99:49:fb:74:38:eb:3f:36:55:39:65:2f:8c:2d:ab:a1:e8:f7:
0b:1f:10:46:c8:b7:eb:ef:7a:5f:ba:ab:28:a2:55:bb:cf:eb:
be:86:f8:08:12:26:39:62:a5:42:27:2c:d1:97:1b:3e:fa:21:
33:1d:b1:0e:53:29:ca:9e:a0:5a:b7:a8:db:71:c2:63:13:21:
4c:2a:be:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7JVJfljWix3zaV7wZ76dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjYwMzEzMDIwMDM1WhcNMjYwMzE0MDIwMDM1WjAzMTEwLwYDVQQD
Eyg4YTZlNzJmYThhZGNiOWE4Yzc4MGQ3MGI1MmQyNmM5ZmZjYWE5NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo333XJLmKTCkANU66SuNgYmQMeKY
uyFOGdhmqGLClWQDLEB3OAk9FIJ01CSykUaXBu4TUzi1olsn3Ks2O0Ipl/uqiZiD
93yvC9kBow1P5orvfctMrt0qrjeZ6/RXfu/ethXT/vtRebZ2z4r+3vMAgBQXagfX
07UOPk9tbt0Q2rH+44GPhgcI7+ARNSAQcDXuNifQj4VGd9Y3bS7v4HtnKrP4thsZ
CxwzSSUWzG1sEXAGvptjZxmMi3wu85CCnTl7rJZ1wwsFSMGH9Hr6rTFVpXoG3dJj
RF2VkLMiPeEEQcIHP815+BZI2hU0cpd2+zcf5Lgpnur6epOgf2wVwFY/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpucvqK3Lmox4DXC1LSbJ/8qpXSMB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyMNjOak
I0Sae5iNVNHzWd3xf4MtfSGu2zmCzwX/Jse55l4Pq7PrNFaud1RN4Ly9UrWt9j8z
5HC7pg9tw9+NQ2ZBgN07lgHlIowgV7dag033Xu6/S+eJiEeb9tTzMtpHu9hzd+Qu
aFs87icJpU1EE2WtCYXRO2U/elDs4g1MMAVIxH0AFz9zhJofa6mFpNANNQiqsao8
83aCqYjo/LG7ojCh+++swDxfRJ5sF+uMQx+K2P+3mUn7dDjrPzZVOWUvjC2roej3
Cx8QRsi36+96X7qrKKJVu8/rvob4CBImOWKlQics0ZcbPvohMx2xDlMpyp6gWreo
23HCYxMhTCq+kw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:46 2026 by rpki-client