Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: c9L/IZBvMof94qpy3YBAK2gK65rh50/xt6oXeAHyaEM=
Subject key identifier: FF:A1:1E:40:34:F4:C8:96:2C:84:75:D4:FF:7B:25:6D:D1:6C:E2:46
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019D0FA030A274A9D7C8A78B5CFCFDAB0F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 16C9
Signing time: Sat 21 Mar 2026 09:00:49 +0000
Manifest this update: Sat 21 Mar 2026 09:00:49 +0000
Manifest next update: Sun 22 Mar 2026 09:00:49 +0000
Files and hashes: 1: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: vtLLDiV4r8v4Pi3VYInlYhsX9meIwMKvZotiBBmlb+c=)
2: s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa (hash: 3dNcn5nfQCOn3nOuz9gztwsMAWS61sZQeaI9Kk8/SgM=)
3: y4V7z4zgAZ-xkRHwN15WVILbdEA.roa (hash: 9JMbptZqg78oPgN1kW4Etd7vu4uHSobcSaTHaJbvEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:a0:30:a2:74:a9:d7:c8:a7:8b:5c:fc:fd:ab:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Mar 21 09:00:49 2026 GMT
Not After : Mar 22 09:00:49 2026 GMT
Subject: CN=ffa11e4034f4c8962c8475d4ff7b256dd16ce246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:88:1f:12:c7:fd:02:b3:49:80:9a:fe:c1:
b6:db:13:b5:e5:3f:0a:4d:02:51:86:85:d1:c9:ba:
0c:71:64:62:9f:36:f4:fc:03:86:79:0d:f2:3f:5f:
ff:66:7a:a9:0e:19:11:aa:bb:66:7a:72:d1:5f:4d:
e0:51:5b:30:7a:e7:18:1c:ac:93:54:e2:02:d3:9d:
e6:42:94:27:78:69:0b:b4:1b:1f:fd:c2:16:16:5a:
c8:24:6d:54:a6:06:11:5c:0a:f5:2c:ed:ed:7b:b5:
8c:f7:1b:fe:59:5d:1a:51:39:c1:95:a9:ea:22:79:
47:94:6f:e1:69:54:b9:e6:b9:e6:39:8a:d3:2f:d3:
7c:2d:da:62:bc:48:5e:b2:4b:30:b1:85:6e:5f:52:
77:3b:e7:0f:25:06:94:28:67:d6:3c:3b:52:34:53:
1a:38:20:7a:c5:9b:24:da:fc:83:80:f8:e6:2f:24:
8d:2c:2e:55:84:41:13:70:0a:35:df:24:57:02:63:
2d:40:0c:3f:5d:02:34:28:e8:1d:b3:9d:e3:0d:53:
6e:10:ce:b6:a0:54:83:4d:24:5c:81:67:b9:da:4e:
0a:4e:3d:9a:18:2f:52:e7:ae:70:a6:4b:33:91:5c:
83:6b:01:37:26:df:c5:bf:fb:68:84:dd:a6:2e:b5:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:1E:40:34:F4:C8:96:2C:84:75:D4:FF:7B:25:6D:D1:6C:E2:46
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:39:86:c1:c7:93:ac:a1:38:39:66:85:5d:66:e4:09:b4:5e:
44:88:1f:a8:b5:ab:c0:ca:06:71:2e:ba:f7:92:42:2b:0c:38:
c2:3b:f8:20:1a:d8:e1:78:b8:a2:e5:26:ba:ad:52:66:f3:d0:
18:65:6e:4e:76:7b:f2:88:ca:2e:f7:ac:18:f6:b8:5d:d5:2a:
d3:ba:d4:43:57:47:e1:fc:a1:1b:5a:83:97:2a:71:49:ce:2d:
48:ca:1a:8f:d5:94:20:67:50:fe:9b:cb:97:d3:e9:8a:d6:c3:
24:67:22:ac:6e:ba:fb:6b:eb:2b:de:63:18:bb:da:75:b6:f8:
9c:d5:59:82:9b:10:68:a3:40:fb:b5:60:9b:d8:e3:47:56:fc:
5e:5d:04:f1:0e:65:64:76:1f:f2:fc:ba:c8:2f:d8:24:46:58:
fe:44:a3:51:c1:9d:98:3e:85:d0:9c:a6:95:21:02:c1:ca:b8:
a4:86:85:d4:d3:53:14:c4:61:f1:3c:e0:32:10:75:65:d0:f7:
de:9d:47:1a:ee:23:9f:d7:7e:88:2e:96:0b:32:bc:28:49:ab:
4c:e9:e0:33:79:b1:79:9b:73:43:88:7b:fc:d5:54:f0:16:27:
aa:3c:9a:91:a1:af:8e:93:4c:ad:5e:5e:7a:e5:dd:a5:69:c2:
74:8b:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:52:23 2026 by rpki-client