Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: 0LPnXcLkz3I5gbV8xOQUO7mOJFPme43mLkMrRxNol1k=
Subject key identifier: 8F:F6:AD:08:84:B5:94:DD:73:32:59:BF:11:EF:05:0C:BD:A7:DF:5C
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 01A16269F800463E5B62D131E811DCA01F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0556
Signing time: Thu 22 Oct 2026 07:01:14 +0000
Manifest this update: Thu 22 Oct 2026 07:01:14 +0000
Manifest next update: Fri 23 Oct 2026 07:01:14 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: v63Wc+pAD0boSADd2CuQT2zesWbso5Ev02QHIE/PRSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:f8:00:46:3e:5b:62:d1:31:e8:11:dc:a0:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Oct 22 07:01:14 2026 GMT
Not After : Oct 23 07:01:14 2026 GMT
Subject: CN=8ff6ad0884b594dd733259bf11ef050cbda7df5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:be:58:13:45:f5:5a:61:a2:0c:5c:e3:ef:
e9:2a:83:d8:73:0a:e2:51:6f:30:48:6e:27:a3:cc:
a5:c6:17:f4:7b:3a:06:ed:1c:14:85:c8:6c:39:25:
b8:c4:52:bf:cc:8e:5b:a2:46:ad:a8:45:0b:e6:8e:
7a:fe:07:dd:05:62:4e:05:4f:f1:25:60:50:ac:a9:
a4:b2:7d:1d:f0:7f:b1:ba:9c:a1:fc:ab:82:e9:94:
10:9f:f9:85:a4:29:24:94:65:10:0e:f8:91:56:48:
3b:b3:d4:52:17:fc:60:a9:38:f1:5e:08:0a:f9:21:
6a:b7:dd:5d:9d:a4:40:71:d5:7e:98:d1:03:89:f8:
0e:09:43:51:79:a8:2d:d3:26:df:bc:91:ad:98:aa:
4a:bf:76:3c:e4:00:20:ad:2d:5e:0b:06:ce:e9:c5:
fa:f2:a8:83:b0:4f:d1:aa:3f:2f:64:a5:44:ec:f9:
ae:6f:df:f3:fc:4f:a5:43:22:da:99:7a:1f:57:8a:
79:bb:68:c6:45:70:f4:13:e0:3f:7b:c5:90:2b:2a:
1f:ab:b7:fe:5f:98:6e:a0:75:71:60:77:e6:70:d5:
01:01:9c:31:2f:d5:b0:f9:d3:a9:1c:12:43:38:5c:
27:da:2d:d2:49:ea:ff:20:8a:be:12:fd:30:50:a3:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:AD:08:84:B5:94:DD:73:32:59:BF:11:EF:05:0C:BD:A7:DF:5C
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ad:f3:ba:8a:02:07:aa:79:76:6b:18:2e:17:24:99:e0:1d:
6a:83:6e:04:82:86:38:7b:dc:6d:81:18:70:27:65:25:56:46:
8c:f2:a5:4d:0c:5b:1f:76:c7:1e:c9:3c:10:5c:39:4f:a4:2d:
ae:a4:54:38:bf:ce:7d:cf:3d:7b:b4:c0:a1:af:42:74:58:31:
d1:02:53:86:03:28:99:7d:b1:39:6f:2a:7f:90:d2:4a:2d:92:
3d:cf:6d:60:94:6d:09:0e:04:01:44:15:9f:96:c3:f4:c0:21:
dc:a2:2b:a5:85:2e:07:e3:03:e2:cd:f3:c2:56:03:81:3c:78:
6f:25:11:88:d6:39:fb:e3:16:25:c4:67:da:8c:ee:5e:12:2f:
09:07:c9:0f:db:e2:19:1d:c0:e3:bc:5b:74:74:57:25:7e:80:
2e:ce:54:8d:81:9e:78:90:86:bf:ef:9d:88:3c:39:f3:cc:5e:
ff:b2:5e:a9:4e:cd:7d:3a:78:c2:c7:5d:4f:a8:31:e4:42:61:
a0:85:e0:4a:77:b6:87:28:be:09:b1:10:a3:28:a8:6c:ea:fa:
0a:14:2b:34:46:8b:c0:b3:96:5b:98:04:9f:35:42:d9:ed:59:
a4:6c:56:79:3f:52:1b:43:aa:65:9c:6f:85:bd:9b:e0:10:ee:
47:a7:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:09:21 2026 by rpki-client