Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: tE1D3UMFxRX7JsINSirEbCS9UfXMLcC5EW5k7XI5b3M=
Subject key identifier: 62:73:6D:84:E8:A5:EF:D0:E0:D0:89:F2:2E:AA:F1:7C:2A:01:FC:34
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 01A16FEE9F9610A3DDA8F310FEC3EC8C7B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 055D
Signing time: Sat 24 Oct 2026 22:01:11 +0000
Manifest this update: Sat 24 Oct 2026 22:01:11 +0000
Manifest next update: Sun 25 Oct 2026 22:01:11 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: mxp5SadnTy29VFVW5oQYJPYKKJ7jjfVhDcPGRRhDQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:9f:96:10:a3:dd:a8:f3:10:fe:c3:ec:8c:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Oct 24 22:01:11 2026 GMT
Not After : Oct 25 22:01:11 2026 GMT
Subject: CN=62736d84e8a5efd0e0d089f22eaaf17c2a01fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:a9:7d:f0:7e:ea:88:21:d7:5f:c1:fd:59:
88:82:d3:a1:d7:b3:bf:6c:cc:36:ee:9d:84:0c:c2:
25:5a:e0:b2:3f:38:19:ad:d9:6a:58:6f:88:4f:06:
c5:01:46:8d:d4:a2:99:fc:49:5e:65:d8:61:ae:89:
b0:07:04:e3:81:0d:41:58:e4:0d:f9:c6:2c:79:40:
50:1e:50:32:ab:15:11:5f:cc:73:8d:f8:a1:42:15:
32:75:bf:57:93:e9:f3:e3:85:77:85:95:db:9b:33:
fb:0c:0b:7a:38:07:a2:13:79:3b:c9:b7:d3:a6:16:
3f:4a:cf:fb:0c:57:b7:78:e3:ff:62:b8:cf:a6:5d:
1f:5b:eb:91:56:a3:60:42:18:37:f5:21:68:da:41:
f4:71:1f:a0:7e:e5:65:1d:4f:4f:d1:8c:ed:75:e1:
5b:82:86:41:21:0e:5b:c1:bd:f3:ff:10:07:9c:ff:
67:4d:18:dd:d5:f8:16:e7:bb:39:af:ee:e0:73:d9:
ff:d4:f9:b9:d7:7b:5e:69:33:16:4d:c8:44:71:72:
aa:73:dc:5d:56:6f:fc:92:09:ee:2d:ed:86:5c:1b:
9e:9c:f6:7b:fc:c4:75:b8:ee:96:11:09:6a:3a:00:
7b:14:d3:10:42:d4:13:a4:35:6c:89:83:e0:1c:00:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:73:6D:84:E8:A5:EF:D0:E0:D0:89:F2:2E:AA:F1:7C:2A:01:FC:34
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9c:55:06:df:38:60:9f:8b:14:a5:35:c0:0e:db:97:58:15:
70:e5:af:b5:57:89:19:09:d4:03:76:4f:2c:79:0c:04:06:69:
ef:b7:0e:55:0a:50:bc:7e:68:a1:77:08:57:72:8d:41:c6:c6:
29:6a:4b:4b:c1:af:77:8a:29:f3:0d:4d:40:57:a9:36:86:af:
5e:47:31:80:15:c8:9b:ab:53:40:bb:bf:36:96:34:03:2f:a1:
f7:75:3b:e1:87:91:ad:99:72:b2:32:17:97:1e:05:f6:2a:63:
a8:f4:90:d6:12:49:a6:d6:a9:e1:6e:8d:eb:92:28:36:d1:1c:
31:cf:d7:75:de:8b:6e:76:18:71:90:81:0b:c3:b7:3b:36:b4:
4f:32:e3:80:eb:01:00:54:c9:6f:61:31:fc:b0:a0:17:dc:f4:
39:86:c3:6a:7e:a5:d5:8e:c4:58:34:c3:c4:c3:82:3f:20:28:
c8:7c:69:0c:2a:bb:e2:cd:d1:93:30:c9:a7:b9:ea:a8:7e:7b:
b1:7f:ad:4b:f9:80:82:96:02:12:0f:1c:99:2d:55:1a:82:76:
35:2f:bd:35:75:d9:80:97:7e:8b:74:4d:62:00:ac:9c:60:80:
75:79:92:43:b1:9e:da:02:71:94:d8:a2:bd:84:a2:e0:15:50:
fd:2d:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:56:49 2026 by rpki-client