Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 0A7mz+U+axpNfvHruUvDwp9HCNHdQowVTRdXWIf+TZs=
Subject key identifier: 12:E0:EE:9A:39:40:AC:93:C9:08:C5:2D:48:D1:82:70:25:21:21:FF
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019DCDBE1BDA8D87B2E2EBDD22F8DBE5D33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0F88
Signing time: Mon 27 Apr 2026 07:01:21 +0000
Manifest this update: Mon 27 Apr 2026 07:01:21 +0000
Manifest next update: Tue 28 Apr 2026 07:01:21 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: myYFVb+KIQZM1Om8r+SyLPcwnAnc6V7jSrgSIhtfnTM=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:1b:da:8d:87:b2:e2:eb:dd:22:f8:db:e5:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Apr 27 07:01:21 2026 GMT
Not After : Apr 28 07:01:21 2026 GMT
Subject: CN=12e0ee9a3940ac93c908c52d48d18270252121ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:7b:a8:08:04:79:50:49:c2:ba:2f:7c:1a:
12:44:3b:92:34:e2:44:8b:fe:1d:ce:52:63:91:3c:
a8:b7:31:33:83:15:2b:d8:29:9b:73:67:e7:f7:ea:
0d:75:88:6e:9a:99:02:b3:0b:71:f5:c2:1b:bb:41:
a2:bf:3d:c7:3d:99:07:51:f0:b8:09:d1:e5:7e:9a:
39:39:91:7c:bd:db:61:42:23:64:32:45:ea:72:3e:
4b:74:16:95:a8:41:25:fe:e2:8e:63:bf:c5:58:7d:
e0:65:db:b7:09:c9:f1:29:f5:5d:88:40:d9:7a:51:
f8:fa:bb:fa:7a:0e:4c:88:01:b2:6a:93:43:26:bb:
f8:b8:c2:d1:03:83:c6:0d:d8:9a:ec:6f:7e:0e:5b:
0c:91:0d:e5:6c:ea:42:4b:f7:f5:28:83:cc:6a:a7:
28:b0:d1:90:67:d2:71:56:61:a8:e9:a7:47:44:72:
b4:90:af:90:2c:55:75:84:3e:62:9c:93:2d:35:12:
aa:e2:97:d4:dd:d8:67:28:ac:85:57:24:72:e7:4b:
4c:6a:9d:48:d4:0f:67:10:28:99:9f:b4:8a:a4:98:
4c:2b:3b:9e:97:fa:38:31:bc:63:53:a3:54:1f:53:
6f:ed:1a:1d:78:74:db:65:4c:cf:3d:38:61:e4:83:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:EE:9A:39:40:AC:93:C9:08:C5:2D:48:D1:82:70:25:21:21:FF
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:88:97:6b:b5:3d:7c:5d:1d:3e:4b:57:58:07:19:fd:30:86:
4e:be:e1:6f:01:a5:f9:56:58:9a:cb:14:aa:90:18:81:c3:c2:
26:06:7b:fd:aa:63:39:6d:26:96:f9:6c:15:6d:e5:32:8f:39:
1d:b6:e3:19:a2:57:b3:b3:b3:d5:51:0a:de:ee:c3:e2:c2:1f:
11:4c:25:52:df:5d:ef:47:8c:04:a4:d8:fd:55:c5:b1:01:0e:
6f:43:08:7c:4c:c8:2a:b3:c2:7f:92:49:6d:00:a9:20:bd:a1:
36:66:85:74:b1:17:68:75:ae:08:69:61:a6:8a:23:35:2c:7d:
e0:5b:86:71:92:e9:79:c0:49:9c:da:b4:bf:cf:e1:a6:92:07:
0a:df:14:b9:68:e9:c5:5f:07:1e:21:9f:84:e5:66:f1:d4:82:
7d:1a:46:17:50:4e:ab:c3:bb:c2:f2:1e:40:0c:05:b0:ea:51:
59:61:39:30:4b:50:33:05:7b:55:b7:71:38:15:f0:3b:1a:c6:
a0:9c:eb:00:ae:fd:c7:f1:71:c6:b6:6a:73:bd:62:47:34:01:
e2:0b:2a:b2:51:72:a3:6e:0c:48:31:69:73:7d:2a:ce:2d:5b:
3f:f3:53:2d:b1:a6:24:94:61:ec:90:bb:56:f8:80:4d:6c:88:
45:8f:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:06 2026 by rpki-client