Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: 0cW8xTMJkDmc+qncv1K96V4vjdF23hB4L5OgvcJSc68=
Subject key identifier: FA:09:92:B9:99:4A:81:25:AC:00:21:4D:A8:E7:F8:C4:C9:33:19:F1
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01A08D5698183D898B83924486DC622E3207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 22:00:57 +0000
Manifest this update: Thu 10 Sep 2026 22:00:57 +0000
Manifest next update: Fri 11 Sep 2026 22:00:57 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: xrSGy+1uyikixYbaoxNJxKhPcDSernU9jLpUgTPv10k=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:98:18:3d:89:8b:83:92:44:86:dc:62:2e:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Sep 10 22:00:57 2026 GMT
Not After : Sep 11 22:00:57 2026 GMT
Subject: CN=fa0992b9994a8125ac00214da8e7f8c4c93319f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:a2:fb:ef:d1:e8:35:9e:a7:94:bc:d2:2b:
38:cd:c6:91:29:12:5a:0c:8d:bb:97:73:ac:91:7f:
88:82:b9:01:43:a4:f3:33:e9:fb:65:71:41:75:4f:
f3:8b:ea:ff:9e:c2:c4:a3:dc:48:79:35:41:8f:f8:
2a:19:8a:85:9d:dd:9f:3d:94:0e:90:5f:9e:23:f5:
0e:4a:a3:bc:9d:23:2d:b3:eb:82:b4:c6:56:80:d3:
34:d6:e3:9a:d9:44:98:94:35:90:73:85:2f:32:ee:
ff:c1:73:f0:61:e9:b7:45:1f:bd:bf:a6:bf:64:76:
f5:a5:b1:79:d3:7d:6d:94:60:3d:9a:95:2f:0c:f3:
80:b1:cc:e2:02:1b:d4:42:fb:00:ef:ba:c0:85:03:
6b:8c:9f:0a:70:93:37:61:55:f3:b4:8a:1d:57:73:
c9:52:52:d7:47:21:a4:5c:f8:66:24:b5:63:47:b2:
ee:f0:56:01:79:ef:a4:0c:76:cf:d0:cf:58:c8:f1:
0d:96:af:9e:a6:cf:60:83:41:d4:4d:49:49:4c:12:
2f:b8:75:dd:cc:bf:df:fb:61:38:63:92:2c:d8:36:
a9:9a:01:dc:33:a3:8d:83:e3:b5:9f:bb:0d:ed:5b:
15:9a:62:db:39:cd:fa:32:a8:e4:28:1d:36:ed:bc:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:92:B9:99:4A:81:25:AC:00:21:4D:A8:E7:F8:C4:C9:33:19:F1
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:00:4d:c4:4b:4c:da:1f:83:68:df:96:80:a9:67:51:41:
c3:f5:a5:74:9a:14:72:9c:e7:5f:cd:fa:b9:d4:47:f0:6b:48:
a4:e0:9d:16:45:00:48:e6:f2:76:db:86:1c:c7:38:ea:cc:69:
54:5e:46:bb:2d:4c:42:14:5c:0a:d0:a0:2a:4d:73:82:26:23:
61:93:7b:77:03:a7:d8:1b:6c:8c:b5:21:4b:26:79:06:00:50:
0d:7e:2a:bb:b1:44:2b:d2:4f:53:1e:07:07:38:db:79:84:08:
66:78:8f:90:4e:4a:8f:69:20:80:d3:64:e4:2e:76:b4:48:ef:
5d:5c:d8:3e:ab:0e:22:04:43:74:83:49:9a:b0:e5:6f:13:54:
0b:84:fa:e2:75:d4:9f:3c:c7:a8:10:84:0c:f9:ec:29:69:83:
e9:99:63:ef:32:df:26:b5:31:25:64:d5:6d:47:0b:95:63:45:
51:5f:11:18:61:b3:ad:45:bb:b2:7f:af:2d:62:f4:fd:36:96:
e5:e5:8f:b8:09:1f:c9:97:bd:99:2c:59:2c:6b:2f:c3:e0:00:
53:40:42:71:27:de:6b:35:4d:6f:1a:2d:76:88:0d:41:db:ef:
b4:1d:8a:2e:f7:f4:b2:a1:69:dc:2d:44:9c:46:6f:18:b5:3f:
01:8e:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:06 2026 by rpki-client