Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: PZfYSIgU6lEdPsu1fZSZ6wU7Hoormdca7b+n3dHK8bY=
Subject key identifier: 2C:7D:19:CD:32:63:CA:00:06:88:09:F1:53:62:5D:CB:0A:85:E4:E5
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019F9E155DC92C149AC5D6364244F504AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 14C0
Signing time: Sun 26 Jul 2026 11:00:28 +0000
Manifest this update: Sun 26 Jul 2026 11:00:28 +0000
Manifest next update: Mon 27 Jul 2026 11:00:28 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: EY1SJknsFB/5kiB5Zp/GQ7agiYOvvy/BiubD7YX6+4E=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:5d:c9:2c:14:9a:c5:d6:36:42:44:f5:04:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jul 26 11:00:28 2026 GMT
Not After : Jul 27 11:00:28 2026 GMT
Subject: CN=2c7d19cd3263ca00068809f153625dcb0a85e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:e7:a6:b3:d1:52:4d:68:39:04:c1:59:d1:
bf:fb:89:d3:b1:e5:ea:85:17:60:80:fc:d3:2f:64:
ef:22:99:f2:4a:3e:a6:59:78:9f:91:3a:08:fe:f7:
0a:1e:97:df:9c:c2:9d:5f:5a:ed:9a:5b:35:a7:91:
5a:6d:76:0f:4d:d1:86:54:19:f8:a3:34:a6:35:48:
be:36:e9:b8:01:5a:8a:ef:88:24:12:4e:4d:e0:65:
58:1b:df:83:07:4c:34:6b:38:a4:d6:8f:e7:67:87:
8c:b4:c3:51:88:62:51:84:5a:28:5b:21:d1:d4:0f:
58:aa:78:36:2e:72:de:3b:69:af:41:02:23:c7:82:
16:3d:22:25:3c:dd:65:68:bf:7d:67:d2:fd:24:2e:
66:a0:49:2b:f9:bb:97:cb:4f:9f:50:be:5e:39:62:
08:87:ec:24:ec:1f:66:f2:94:2c:49:8c:3f:54:c9:
63:3d:5f:7c:ad:ae:cc:af:54:ea:76:83:52:e9:43:
6c:4c:7d:c3:6e:6e:05:af:74:5a:c7:58:e0:53:1e:
be:94:3e:99:9e:ca:54:a3:48:e4:e5:6c:e9:24:13:
78:a6:9f:db:6d:fd:fe:7a:d1:90:28:c7:2b:5b:82:
7a:88:1c:13:1d:3e:29:91:9a:ab:d1:9e:b1:40:4e:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:19:CD:32:63:CA:00:06:88:09:F1:53:62:5D:CB:0A:85:E4:E5
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b5:74:77:df:25:e0:70:4d:e3:f9:be:3b:52:a5:78:41:bb:
aa:de:07:e3:4e:a1:0c:5a:2f:00:dc:83:17:9b:1e:8a:03:54:
0f:14:0c:f6:03:39:42:9c:3d:09:cf:e3:ea:70:0a:5d:e5:d9:
35:79:b3:ff:f0:48:88:e8:a9:f1:25:49:0f:e2:f6:e8:e7:54:
8a:12:b0:ad:ed:99:93:50:dc:fa:21:48:a9:a5:31:16:5f:4f:
f4:8e:ee:45:5a:de:69:dc:dc:ce:fb:9b:25:bc:87:d4:9d:6e:
ec:07:e3:06:df:ff:bc:0b:34:87:2c:9e:c5:c8:d1:23:34:35:
41:ad:91:79:fb:59:c3:22:6f:28:9b:a4:14:e6:66:05:39:ba:
12:f9:6b:80:ad:25:cc:14:af:08:38:de:82:d4:64:74:df:35:
e5:d1:54:83:ec:6e:b4:37:e3:ef:89:db:5c:49:2e:24:3b:64:
22:4a:8d:e9:68:81:77:f7:de:f8:f0:d3:de:b6:06:44:5b:cc:
f3:0f:9a:dd:10:4a:06:f4:18:89:23:a7:9b:45:4a:d0:b0:1a:
58:75:3b:40:b3:4e:67:4b:6a:76:ba:75:28:94:b9:c0:fa:f0:
d0:f3:32:fb:e6:c3:08:c3:1c:0a:ed:32:b0:86:c3:d7:93:21:
35:08:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:19 2026 by rpki-client