Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: dUMLAYx4T0eX5P8Ox6SZNAuT+uPrMqn/ZztsiaMrsMM=
Subject key identifier: 53:C8:ED:85:CD:21:53:CA:4B:0D:13:09:12:E0:9F:61:3E:6B:27:9B
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019F8644AE6D6FBE4B9D93E46F6485341621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 01E2
Signing time: Tue 21 Jul 2026 20:01:15 +0000
Manifest this update: Tue 21 Jul 2026 20:01:15 +0000
Manifest next update: Wed 22 Jul 2026 20:01:15 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: 8a+v/UnL9eOBrlGQ/NVRQMJyG/8UBDUxjp6X2LxwvtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:ae:6d:6f:be:4b:9d:93:e4:6f:64:85:34:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Jul 21 20:01:15 2026 GMT
Not After : Jul 22 20:01:15 2026 GMT
Subject: CN=53c8ed85cd2153ca4b0d130912e09f613e6b279b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:9b:89:37:c3:1c:d5:a4:75:d1:29:bd:80:
a9:24:18:24:77:9a:77:b6:8c:af:34:5d:e7:79:3a:
af:4b:ca:2f:08:a8:d4:55:cc:01:c4:50:72:7b:5c:
cb:89:6b:27:67:23:74:8b:31:94:a4:4e:d5:2b:47:
08:cf:ec:3b:f4:ae:28:ef:a5:ea:9f:86:a4:03:93:
93:cf:6e:b1:08:3d:bd:df:f9:fa:97:0e:1f:15:ac:
c6:5f:cd:9d:13:81:1d:8c:03:82:b9:40:38:af:3d:
b9:dc:55:2f:b9:0c:c6:70:f6:d5:78:0f:fc:e5:99:
8e:59:7d:df:15:69:6e:fd:40:71:4b:f4:55:e9:77:
cc:36:7d:c0:00:03:7a:a7:c3:da:29:84:f1:b3:34:
2b:81:46:80:3a:bf:f4:e2:a7:28:bd:02:41:b6:69:
0b:11:d1:60:f1:63:d6:9d:cb:38:29:0f:c9:aa:fe:
56:58:1f:b9:c8:13:9e:b0:7e:ce:0e:52:c3:7b:71:
21:0f:df:b1:dc:c1:68:1a:ff:f5:98:de:c0:bc:ae:
24:bb:82:b7:12:2a:83:2c:27:0a:98:9f:ab:2e:dd:
db:96:24:e2:33:f2:34:23:e4:aa:22:b8:bc:e6:f2:
bc:f3:ba:91:da:9f:a6:2f:bd:18:e3:1e:da:ec:99:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:ED:85:CD:21:53:CA:4B:0D:13:09:12:E0:9F:61:3E:6B:27:9B
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b5:86:ef:75:24:6a:f0:23:85:7c:d7:57:a9:49:f1:01:c9:
47:f0:26:37:2a:34:62:20:35:02:71:c3:74:b1:54:87:3b:e3:
60:3a:1b:de:4c:39:31:0d:f5:ba:5e:8b:6f:4e:c0:a1:1f:2b:
65:40:a5:ad:94:6e:d6:9d:ee:97:8a:c4:57:e4:70:5c:c2:1b:
eb:fc:5b:d1:1e:83:d9:df:1c:ca:24:71:2f:31:93:ab:0f:65:
67:37:d4:f4:cb:1d:b3:ee:89:07:9f:e6:53:c5:82:24:23:f9:
b6:71:ce:4d:db:a0:a5:24:5c:68:34:a0:11:a8:7b:87:7d:72:
bc:9c:8c:2d:23:0e:fe:83:b8:6b:6e:1f:d9:cb:80:9b:37:a4:
c3:0d:56:d9:c4:3a:9c:91:37:9e:10:4c:57:2a:96:c0:45:99:
35:45:dd:3a:41:1a:db:c2:8e:19:00:39:03:1c:43:62:49:ad:
08:3c:eb:fb:03:89:2f:76:5a:78:98:75:00:72:75:81:8e:d3:
02:a3:84:5b:d0:9c:f1:c8:f2:e5:28:15:2c:4d:a0:7d:e0:b6:
20:f0:ce:e4:35:12:14:d0:00:34:5c:a2:85:72:3f:0c:d8:f2:
13:37:5e:6e:3a:bf:5f:8e:3d:48:d8:39:80:e6:77:09:8e:d7:
2e:4b:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:13 2026 by rpki-client