Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: a367eSa51ol5v2n+CHmo7n4h6A9AoP16IDodsSy+l4A=
Subject key identifier: CD:A5:44:1D:8A:46:2D:B2:A0:A1:ED:C0:A8:BE:4E:41:26:1D:F9:6D
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 01A06E026DDABF807C1D2D2459653A911725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 025A
Signing time: Fri 04 Sep 2026 20:00:47 +0000
Manifest this update: Fri 04 Sep 2026 20:00:47 +0000
Manifest next update: Sat 05 Sep 2026 20:00:47 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: B6Ja4aq08O9UArWD0wuMPNkxQ8TWu1rtGv0a2Ghb2VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:6d:da:bf:80:7c:1d:2d:24:59:65:3a:91:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Sep 4 20:00:47 2026 GMT
Not After : Sep 5 20:00:47 2026 GMT
Subject: CN=cda5441d8a462db2a0a1edc0a8be4e41261df96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:a0:52:2e:c8:12:df:95:04:6b:eb:8e:f0:
b4:98:0a:2c:44:10:2f:69:66:5d:1a:6d:f1:b6:d1:
79:43:e1:80:43:b9:f6:ba:1e:13:62:1b:42:84:14:
7d:be:ef:29:38:09:8a:8f:6e:f6:94:4a:f8:9e:8b:
e2:0f:90:3a:7b:3a:8b:2f:d7:ac:b4:e0:06:bd:08:
7b:8f:0a:87:99:33:a6:e7:37:ac:6d:98:0a:8c:68:
f2:3f:a5:8d:29:05:54:61:68:d2:41:9e:11:42:45:
5d:29:79:a0:27:2d:73:70:22:36:fa:46:ca:29:e2:
f8:e2:87:5a:73:14:4f:19:ac:3b:c9:ab:7e:01:4f:
64:9f:41:68:89:3c:e3:29:f0:ed:60:2a:09:be:92:
0f:15:3b:89:33:0c:7e:61:2d:93:f0:09:6c:1e:78:
9f:47:c4:56:f6:de:44:47:4e:99:49:6f:f7:d3:ec:
c2:01:9b:b0:16:e9:21:15:f9:70:6b:7d:9d:2c:e2:
00:62:29:43:1c:09:b0:b8:25:60:41:ab:04:1b:df:
c5:7f:9d:6b:b8:4b:7e:dd:92:96:03:6e:11:18:7c:
b8:b3:30:71:b0:2c:8f:a1:83:f8:5c:60:14:2b:d7:
83:65:f6:e5:cc:13:54:38:82:44:b2:fa:d8:fb:b2:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A5:44:1D:8A:46:2D:B2:A0:A1:ED:C0:A8:BE:4E:41:26:1D:F9:6D
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4c:6a:04:8c:9d:58:9c:09:a8:f8:80:9c:9b:33:5d:56:78:
ff:c0:76:6e:b4:ed:26:93:8d:75:16:ff:27:8c:9a:fe:2b:4b:
f6:6b:36:87:52:c7:43:f1:46:67:85:15:96:88:49:c4:21:59:
c0:47:73:9e:c6:fa:cd:54:c4:f2:8d:08:8f:3e:cf:25:f0:30:
41:44:b2:a2:45:98:d6:b2:d6:93:c9:52:8e:6f:d2:59:e5:98:
b9:ce:30:df:32:18:19:e4:62:0f:79:39:95:03:55:55:1a:7a:
b7:70:f4:4f:13:02:52:f3:3e:de:5e:5d:51:e5:80:1b:47:a2:
1d:4d:f9:47:79:cd:28:48:50:ac:89:d0:77:a9:98:26:57:0a:
cf:e2:a2:10:d0:75:36:93:55:ec:c5:27:7b:48:5e:de:cc:22:
38:d8:69:3d:93:b4:0a:9d:6d:ea:bc:f9:6a:0d:5e:00:9c:7c:
14:d7:5a:d0:06:6c:82:ac:b6:0f:dd:73:47:c7:14:b0:3d:c7:
dc:d5:04:fe:67:d3:4c:ac:00:c5:89:d4:46:d7:5d:92:09:76:
bf:ff:0e:69:82:fc:7f:a9:fd:a7:f3:3d:1a:4b:2d:75:25:bd:
d0:9e:c1:13:f9:1c:4b:db:3a:16:fe:29:d5:92:f0:a2:7f:48:
2c:fc:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:12:16 2026 by rpki-client