Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: Emt6tUWvMLuLUUqrhbg6PqQD0sFnZmfNrM1nd+11jDg=
Subject key identifier: 4A:C7:FE:56:D2:5E:6F:8C:C4:9A:1A:05:E9:88:61:0E:61:27:1F:98
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01A17EBD19798716732DC6929260D79A6D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 19:01:24 +0000
Manifest this update: Tue 27 Oct 2026 19:01:24 +0000
Manifest next update: Wed 28 Oct 2026 19:01:24 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: umC+PN5zoMXiYQjBNroBYRYsIG16i01XbCYD89k1Lx8=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:19:79:87:16:73:2d:c6:92:92:60:d7:9a:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Oct 27 19:01:24 2026 GMT
Not After : Oct 28 19:01:24 2026 GMT
Subject: CN=4ac7fe56d25e6f8cc49a1a05e988610e61271f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:03:87:28:9b:69:6a:37:c6:7d:bb:09:b2:
ea:27:3d:c6:e3:f3:38:3f:df:c0:4e:8b:04:78:76:
c6:30:09:8b:d2:9e:e1:3c:ef:eb:37:5d:2c:ef:14:
cc:f8:c1:30:d8:4c:c0:7e:10:22:5c:b1:6f:28:22:
80:e0:88:de:6f:1d:03:c9:aa:10:31:6d:c8:56:57:
d3:8a:76:35:75:4c:b8:94:62:70:52:4e:91:8a:52:
7f:37:eb:4e:b8:94:1b:f9:46:b0:03:ee:17:7f:2d:
eb:ef:28:4d:81:ac:82:dd:41:6c:8a:67:c4:b6:44:
9c:b4:ab:dd:63:db:be:89:a7:1f:99:12:5e:de:c7:
14:20:e9:fe:f9:67:1f:9a:eb:47:50:26:e7:71:c7:
db:c5:80:fa:5f:36:92:2a:a1:f2:4e:83:d3:e4:e0:
da:fd:24:a3:39:df:6a:c3:e3:29:75:e6:93:7d:f1:
26:6f:2e:91:f9:80:cb:80:cc:6b:49:26:68:64:aa:
32:e2:08:b5:e9:39:63:9f:93:46:9c:41:eb:8b:0b:
b3:72:64:65:a8:4d:3f:f4:ba:2b:a6:2e:af:c6:f6:
79:7f:f2:81:73:bb:74:68:f3:51:40:8c:13:ae:8d:
a1:ea:b7:cf:62:8a:fc:43:06:7e:62:c7:52:08:60:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:FE:56:D2:5E:6F:8C:C4:9A:1A:05:E9:88:61:0E:61:27:1F:98
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bb:65:79:9d:6f:04:b9:ea:14:5b:b6:95:0d:12:2e:3c:d0:
c3:45:67:29:4f:25:09:1e:ad:99:b5:d0:88:40:aa:3d:68:38:
ed:c9:f7:7e:fc:f9:66:37:5f:00:cf:9e:bb:7e:8b:c9:dd:74:
6c:8d:9d:3b:21:6f:ee:00:ea:5d:fa:b6:06:f7:9d:76:5c:6f:
1d:dd:78:16:4d:c3:e2:82:c5:f2:b7:12:a1:72:1a:41:d0:60:
49:58:ca:f9:7c:b9:ed:05:36:29:22:84:1f:22:d8:1f:38:d9:
58:30:d1:13:27:83:be:71:11:a5:11:ef:67:2a:1c:1b:c2:97:
f3:55:1f:8f:07:d8:c6:fa:81:4f:6b:f6:a4:4b:ae:23:f0:9e:
1a:ca:01:f5:71:a7:0c:39:91:30:3a:47:10:2d:24:c8:11:5f:
49:53:e9:c0:6a:83:5c:29:b5:ae:f3:1b:1e:8e:48:c9:ce:d3:
4f:d5:05:46:5a:db:f1:1a:5f:ca:75:67:e0:2c:4a:cc:21:8b:
6b:ee:49:74:9c:f8:42:d3:fc:73:34:70:97:1a:b7:4c:1d:50:
0a:7c:e5:4b:16:a2:d9:c3:d3:9b:ab:0a:1c:1c:8c:f3:13:c1:
c2:48:52:08:2b:f5:cb:07:c3:9c:cd:94:d0:68:6a:19:0e:98:
b4:c0:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:44:40 2026 by rpki-client