Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: YZtLFjtHGj6Fhexm5DVE/HZlQSnTvRnUZ++2PASmaVM=
Subject key identifier: EC:3C:B0:DA:5B:59:5D:C0:82:AE:34:8B:F3:29:A3:80:A8:5A:A8:38
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019D38660833C018CD2DFB094AE9AD246182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 032E
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: 4S9yCUbBvKVQCix17xdzLZxZg7E3QSePbDIk2+myBYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:08:33:c0:18:cd:2d:fb:09:4a:e9:ad:24:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=ec3cb0da5b595dc082ae348bf329a380a85aa838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:19:40:af:c4:36:1e:42:7e:79:5c:08:51:
f6:a7:0e:36:98:61:00:d1:65:36:5d:e5:9c:1a:03:
56:60:0f:25:63:d7:c1:b0:05:44:ad:d6:1f:5e:2d:
72:32:09:d3:27:37:11:24:49:91:07:e0:c4:d4:0d:
38:a4:a3:29:12:fe:42:d9:11:09:ca:f8:37:f2:8e:
ce:08:df:9f:ba:a5:c9:1a:b9:03:b1:e8:ea:e0:95:
9a:3c:86:11:73:a2:05:9e:1f:bc:4d:16:ce:2d:46:
0b:b7:45:7d:c1:07:36:ed:86:95:ef:15:eb:8a:cd:
96:94:46:c4:85:a4:ec:a9:9d:33:6d:d9:68:d9:a4:
54:4d:4a:23:c6:0b:fb:ce:77:20:e6:a8:25:cc:87:
f4:43:f2:d2:42:60:05:c8:d3:4a:7f:55:dd:25:40:
70:29:78:87:b8:f8:b5:0d:c6:ca:ca:27:7e:35:a1:
87:55:88:89:4b:d3:33:b5:fa:3a:e8:2a:56:d4:24:
6d:a2:9d:b6:34:82:ce:c4:94:21:f0:12:5f:fe:e9:
a1:ea:e8:ef:42:3e:a3:73:f8:8e:78:7c:84:ef:8f:
13:6f:2e:2d:1a:f1:26:d5:7c:36:27:65:de:c1:96:
08:74:0d:83:ca:f4:35:69:5a:99:6f:fb:cc:ef:91:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:B0:DA:5B:59:5D:C0:82:AE:34:8B:F3:29:A3:80:A8:5A:A8:38
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:74:f7:f3:8f:0c:cb:48:06:89:56:98:04:aa:4d:a5:b3:
35:ab:f9:32:0c:07:29:b1:89:f1:1b:5c:b6:3a:71:0d:9d:9a:
71:06:3d:87:6b:24:13:5a:75:c9:8b:ea:49:6c:53:8f:41:bd:
4b:31:4e:d4:59:48:df:b6:c5:fc:8e:d5:b9:e1:c7:7e:ba:39:
69:67:34:1a:71:c8:be:eb:74:e9:2f:09:8f:a2:63:c0:0e:5f:
a3:24:6a:fd:4a:01:88:ec:55:96:32:7b:d6:c2:7a:2e:fc:96:
b4:5d:43:6f:46:66:c3:09:2e:5d:48:a3:e4:7d:63:70:fa:3b:
f5:20:6f:41:76:0f:92:58:f7:b0:05:84:a2:2f:5c:d3:08:2c:
0d:6a:05:be:d1:c2:d5:dc:e3:7e:2a:9a:20:e7:8f:f7:16:05:
0f:4b:74:38:9d:6a:f2:72:46:38:f6:6c:bb:62:09:9e:cb:d7:
2e:d6:85:4c:40:09:20:6b:80:6b:26:54:b3:95:bb:2f:70:d3:
47:26:4e:49:86:d6:46:68:49:4e:5a:aa:d6:e8:16:fc:0e:6e:
6e:9b:8d:08:78:bc:d5:a0:ee:5b:df:82:af:a2:00:f8:4f:9c:
95:34:4f:8d:72:6f:98:cd:f4:d7:fd:b9:98:2f:79:04:e0:5a:
c3:b8:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:27 2026 by rpki-client