Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: 109CxzvzC8ZesMdHOt84MFrqBsLVNpTWxurDbUqmDUQ=
Subject key identifier: 9D:29:65:55:E2:C2:86:17:5B:41:50:94:94:95:F1:AA:5A:64:41:8B
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019E7CD5D3E91DFDB1C5D460539EA4D3E791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 03D6
Signing time: Sun 31 May 2026 07:00:48 +0000
Manifest this update: Sun 31 May 2026 07:00:48 +0000
Manifest next update: Mon 01 Jun 2026 07:00:48 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: sjV+IAPGYGZfet2ZGOjcRbMA7KSU2JnRfdwWxoexyBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:d5:d3:e9:1d:fd:b1:c5:d4:60:53:9e:a4:d3:e7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: May 31 07:00:48 2026 GMT
Not After : Jun 1 07:00:48 2026 GMT
Subject: CN=9d296555e2c286175b4150949495f1aa5a64418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:f0:f7:b2:5c:fa:d7:51:f2:6a:cd:ae:5b:
b8:5a:9b:3b:58:37:4f:22:8c:84:14:1a:41:66:bb:
4e:ac:8e:11:fb:e2:bc:95:e8:e2:04:55:9a:52:b9:
4e:36:6c:ce:a4:cf:c8:f0:f1:cf:1a:31:01:78:d3:
6b:56:2d:72:97:8e:35:05:d4:b4:d6:34:84:70:bb:
19:7f:23:18:b6:47:f0:9f:22:b0:97:82:7a:d9:95:
ff:1e:5f:67:fd:9b:81:d9:9e:40:78:31:74:f6:8c:
80:35:1f:a3:c8:6f:2c:73:8f:9a:69:00:cd:7e:ad:
a1:64:63:4b:84:05:c4:3b:29:90:39:fe:de:ab:e7:
32:c0:52:74:4e:cc:52:4a:4e:fd:f8:22:d4:66:d9:
f8:1f:25:73:20:5b:16:0f:06:9a:08:63:fc:c9:a9:
5a:0d:bc:ec:98:83:f8:53:5c:63:4d:48:e9:2c:75:
17:a7:eb:2b:1a:51:e7:ea:21:6b:db:cc:0f:44:0a:
46:c4:7c:03:e0:50:6c:5e:4b:73:1c:16:36:02:a4:
ca:5e:3e:03:17:d2:e9:bc:1a:5b:74:a6:c9:2b:53:
fc:4f:05:11:1a:e9:4c:b3:cb:41:5e:47:ce:3c:9a:
87:9c:fa:f6:5a:7b:f8:90:a8:8a:5b:23:2c:2e:cf:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:65:55:E2:C2:86:17:5B:41:50:94:94:95:F1:AA:5A:64:41:8B
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:0d:b0:b1:99:ca:b3:79:2c:4f:29:2d:34:52:5e:b5:d4:
ca:5c:48:f5:4c:46:7f:d3:e1:46:b8:cb:da:a9:6a:c4:03:86:
55:a6:ba:9b:f4:cc:4b:b6:21:69:0d:08:ee:53:bd:6c:66:93:
e5:fb:0f:dc:79:e4:44:8a:3f:ce:2a:a5:66:d7:34:ea:c8:31:
79:bd:99:ce:52:64:8b:f7:fc:08:76:7e:ba:75:c5:aa:88:35:
9a:30:6d:51:5d:0a:67:07:4f:10:b1:a1:7d:a1:7b:09:7a:1c:
f7:00:66:d7:88:c8:20:d4:ec:69:14:89:c7:e2:67:af:2e:d5:
80:f6:29:27:cf:86:54:b8:64:cd:af:11:c4:6d:11:d8:fc:07:
85:ad:a1:8b:21:ef:08:01:4b:da:9a:3f:db:97:3e:20:34:45:
d5:5e:14:bc:ad:fe:2a:1b:25:26:b5:14:6f:36:3a:83:f7:d5:
e6:90:e1:7c:ca:6e:e7:7a:6b:83:3d:e7:c0:6c:44:ff:3f:f0:
03:ce:e0:ea:00:98:82:66:33:d4:f3:1d:1c:a3:16:cf:b8:75:
72:c4:99:6a:3c:02:06:e7:e1:21:40:91:34:33:4a:bd:b4:6a:
a6:c8:96:eb:c5:0b:fe:9d:60:1c:db:4f:e0:a6:26:ab:64:41:
95:00:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:42:17 2026 by rpki-client