Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: V2lPnyHPY4r/4ZNHMKnkwSlhkd3j7XZfSx74gjtoRKU=
Subject key identifier: 07:95:F0:4E:5D:BB:48:BB:20:C3:0A:EF:B0:85:6C:73:12:B1:81:05
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019FA3A9C08B6B957A7F819B6C3D4E5F2B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 13:00:38 +0000
Manifest this update: Mon 27 Jul 2026 13:00:38 +0000
Manifest next update: Tue 28 Jul 2026 13:00:38 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: SC2jkNbIWmRja+240WZHTWulj2Q9Mc/1yYAOg4gOqyg=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:c0:8b:6b:95:7a:7f:81:9b:6c:3d:4e:5f:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jul 27 13:00:38 2026 GMT
Not After : Jul 28 13:00:38 2026 GMT
Subject: CN=0795f04e5dbb48bb20c30aefb0856c7312b18105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:5d:1f:74:49:6a:da:e5:96:07:a7:49:f4:
45:79:63:a8:11:c9:81:ad:90:a7:59:29:97:60:82:
2b:79:38:0e:da:88:ab:6b:9b:8d:a6:ae:62:f0:3f:
3b:f7:ae:93:1d:67:b5:c8:de:7d:71:a1:8f:4c:40:
43:e1:0b:57:12:76:6c:61:20:8d:dc:70:11:6e:43:
67:1d:ff:c5:59:f6:99:bd:00:68:6e:cb:4b:08:20:
08:2d:6c:5f:25:56:bb:22:f7:55:f6:9c:1a:c3:cd:
e6:92:5a:53:55:8d:d3:f9:ca:41:6d:16:25:d5:fc:
72:71:97:10:28:be:84:92:a7:eb:07:d9:45:31:e6:
13:d9:5c:8a:4c:49:c2:00:65:55:6b:4b:d9:a1:3d:
87:34:ae:26:4a:4f:22:fd:85:25:fb:08:15:b2:5f:
9f:fb:50:fa:83:25:6f:48:39:10:c7:c9:93:08:45:
35:dc:24:18:56:68:04:be:9f:38:df:d6:9d:c6:e5:
05:dc:41:cf:9b:16:52:ec:9b:89:37:8c:3b:3e:12:
83:c5:d6:2c:0d:f2:84:f0:c7:8a:33:2f:a7:6c:35:
fb:3a:ef:60:c9:24:7b:69:a1:13:87:90:a3:80:92:
97:8b:66:c5:d1:58:9e:a0:31:c0:0d:1e:54:7b:e3:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:F0:4E:5D:BB:48:BB:20:C3:0A:EF:B0:85:6C:73:12:B1:81:05
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:4d:89:89:eb:db:49:5d:47:9b:d8:e3:da:81:95:99:b8:7c:
83:49:7d:f3:26:d0:78:6f:7e:4a:cb:13:d9:b5:00:00:04:d4:
b6:58:9a:29:7c:fb:1e:0e:15:14:56:fb:33:e7:e1:02:4a:53:
78:44:5b:e8:f5:61:38:e6:6a:13:a1:0e:2d:b0:8a:19:56:f4:
c8:9b:46:b8:f4:52:00:5e:cd:6c:d0:63:ca:26:e9:7e:4b:c4:
2a:56:fe:e9:08:78:0a:e4:2a:2f:4d:34:55:52:51:59:49:75:
df:65:00:55:b2:e6:1e:97:01:58:8d:46:24:62:1f:5b:7f:42:
ff:3f:eb:34:5e:fb:84:eb:71:d7:e7:d9:33:46:93:f3:f9:04:
19:0f:a2:93:2e:c5:58:54:ad:02:80:cd:25:2f:5d:c8:a0:a3:
9a:da:fb:26:db:86:b3:44:65:69:aa:36:72:97:be:a3:66:e5:
db:b0:f9:50:0a:68:1f:75:b8:61:1e:b5:67:ea:16:e3:c3:a7:
2d:a6:55:17:95:53:8d:b4:ca:5f:bc:af:b1:f2:33:57:19:8a:
49:90:a6:ea:98:9b:71:7c:f0:a9:22:cc:cd:82:d2:62:56:5d:
a2:7e:ac:1e:13:16:91:16:2a:30:36:0d:d5:c7:de:62:20:dd:
57:7b:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:04:10 2026 by rpki-client