Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: JiLi2UxQTc0lIovBlEdSntHRShHMHbOmm15szWdk1LI=
Subject key identifier: 91:EF:C8:5D:98:61:88:8F:E0:23:8D:4A:9E:58:D5:57:39:A8:C6:20
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019D389BF7047A61715E3B7E9B7EC7488E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: B0
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: Lj6y-FZHBk0nXBCvZAVa90vB490.asa (hash: LRhgAzghWUw9wnefJgk4F6ixrePoE4mvfQqraKNwKAQ=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: ET5wCMnOekG3lOUk/pHfOR35SqtALCUGGYz947PfCZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f7:04:7a:61:71:5e:3b:7e:9b:7e:c7:48:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=91efc85d9861888fe0238d4a9e58d55739a8c620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:f3:e2:32:f9:6d:50:db:cf:fc:25:35:bb:
4b:90:89:0c:8e:9a:66:a4:fd:f4:86:15:41:18:f6:
0f:2d:ef:d4:09:e1:90:d5:16:1a:69:93:65:15:44:
42:74:69:3b:17:2b:99:cd:ca:36:55:86:81:70:a1:
31:79:02:d9:1e:06:99:de:2e:cb:81:e8:09:d7:62:
a9:91:b5:08:d1:3e:0b:76:a2:dd:f7:ea:7f:9e:24:
1b:6e:d8:19:2d:05:54:ee:2e:af:bd:c6:79:41:c7:
c1:4f:ef:c4:fa:ea:95:c5:2f:75:25:56:67:b0:5a:
ea:8d:b3:84:64:84:f7:70:66:00:54:89:5a:06:b3:
90:8c:e8:4c:e8:28:ad:91:eb:b0:2b:3e:36:b1:0d:
3e:d7:5d:90:1c:d5:d8:fd:b4:27:d9:f0:14:4f:7c:
0a:6a:91:06:f8:91:9c:58:c2:71:f2:7e:6f:8b:77:
2a:0d:e4:a3:a6:0f:35:33:2b:35:64:06:c4:22:52:
a4:a6:fb:8c:6a:92:80:3e:7e:d3:67:ce:be:42:dd:
2f:7e:75:79:b2:ef:d8:6a:f1:07:23:79:8d:b8:97:
8d:d5:53:8f:65:79:58:5e:b6:23:41:49:c4:7c:6c:
8f:a7:f3:d1:25:5a:9f:48:dd:16:54:16:1d:8e:d2:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:C8:5D:98:61:88:8F:E0:23:8D:4A:9E:58:D5:57:39:A8:C6:20
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1a:77:8f:03:fb:e1:60:d9:53:eb:16:ce:ae:59:a4:94:6b:
66:00:82:de:46:3e:bf:9a:c9:41:e8:34:ba:91:28:34:e8:76:
0f:10:cd:22:24:d0:a5:c0:27:3b:ff:b2:c8:0d:29:b3:89:ef:
29:7f:a6:ae:8b:6c:1d:1d:f3:0f:69:67:ad:8f:76:20:f1:44:
ea:96:15:bf:6c:70:a0:92:91:59:47:e9:6d:16:8f:ef:6a:09:
05:0f:c7:93:bf:3b:86:99:19:7a:e6:8d:4f:fd:bc:f3:bb:c2:
01:dc:85:2f:a4:bb:e0:70:fd:17:ca:af:36:3b:cf:c5:5d:41:
42:e2:4f:cb:a5:8c:e6:27:f9:19:20:40:0d:7a:82:bd:c7:91:
07:c5:fa:47:14:77:f3:80:44:62:79:bc:89:4d:8b:c0:d9:5c:
12:45:5a:5c:02:2c:61:6c:fe:cc:98:a4:3f:09:7e:98:5d:d0:
64:4a:f0:08:af:b6:c4:ad:0d:99:56:a0:89:96:81:4a:3a:39:
27:59:09:f9:16:f5:a5:c5:1c:63:56:eb:08:11:2f:0e:61:bc:
20:05:2a:e8:11:72:26:67:6f:21:89:cd:e0:87:44:04:3b:a0:
fa:3d:63:61:e6:00:2f:d3:7d:55:c2:77:90:0b:5c:61:0b:a0:
79:0f:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:09 2026 by rpki-client