Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: jY7UJ6hk79fn5v6YjdcY2pplO68GcxRcZ8zRNcHuOWI=
Subject key identifier: 14:5B:02:3D:49:5D:2D:73:90:BF:65:3E:B7:C8:EC:39:5A:D1:74:D6
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019EB9FCEBB4CFC978899BAD1946E5216B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 04:00:20 +0000
Manifest this update: Fri 12 Jun 2026 04:00:20 +0000
Manifest next update: Sat 13 Jun 2026 04:00:20 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: KG6F1rrIqH4923DVIbLp/0ym70Htv2GMNIY45Bjw1TY=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fc:eb:b4:cf:c9:78:89:9b:ad:19:46:e5:21:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jun 12 04:00:20 2026 GMT
Not After : Jun 13 04:00:20 2026 GMT
Subject: CN=145b023d495d2d7390bf653eb7c8ec395ad174d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:6d:aa:7e:1c:ef:59:3d:c9:36:c8:20:ea:
ac:82:5b:a0:34:fe:5f:a0:db:07:33:eb:79:26:0a:
35:e6:05:79:ed:0f:a4:27:5d:7a:39:da:09:56:29:
6e:5b:37:70:33:f0:68:35:65:1d:d5:79:74:fa:3d:
04:50:ee:38:3a:1a:a0:73:fb:db:76:fc:17:28:4b:
97:22:e7:38:e7:e5:a2:a5:98:bd:e8:70:89:4c:9b:
2c:f6:15:40:7d:78:02:49:13:18:26:da:96:30:a8:
03:bb:8d:8d:3a:ed:83:60:ee:86:38:a5:ae:53:56:
60:48:c6:58:12:8c:33:37:7c:02:68:8f:93:3f:21:
05:ec:00:1a:cf:9f:6f:e2:16:bd:9b:97:20:fd:ee:
c8:93:9d:75:87:7b:28:1c:09:5e:6f:f3:59:88:c9:
09:16:b0:c1:5b:39:f3:5c:23:3a:1e:b1:6a:38:49:
67:fb:7a:8c:ae:03:fd:a6:4a:0f:6d:d9:73:b2:c4:
78:5f:5a:d6:39:57:ad:49:7e:51:29:3a:62:d0:a7:
1c:12:ec:64:66:da:b6:e8:bb:06:62:7d:42:ed:09:
49:3d:be:c9:13:db:42:3d:a1:0b:56:41:75:9e:0e:
89:3e:e6:c6:77:73:ea:e6:2e:e6:08:29:18:a7:af:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:02:3D:49:5D:2D:73:90:BF:65:3E:B7:C8:EC:39:5A:D1:74:D6
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6a:46:8e:e5:43:0b:af:aa:a2:e0:0c:3e:fc:e9:34:9d:32:
1b:af:e7:87:d5:85:cc:59:f2:9d:82:7b:6c:18:fa:30:19:aa:
1d:78:e2:da:ae:e3:7b:1c:f9:15:85:07:d8:4f:b2:5c:9f:c1:
5a:6d:01:9e:a3:1d:02:b6:5c:53:f7:e0:4c:fe:28:a7:dd:e9:
7d:a2:04:2f:d9:96:82:34:c2:6a:8c:9b:e3:40:7f:80:b0:1b:
0d:18:62:52:40:53:4d:70:e6:fd:6a:41:fb:16:4a:65:49:f1:
d6:53:19:c1:8a:57:26:30:9d:78:df:6c:8f:57:b3:27:88:5f:
7d:e1:0a:f6:90:84:b2:95:b4:05:01:67:bf:61:be:d8:2f:92:
55:f0:58:65:17:29:c5:a1:31:88:46:25:64:86:e7:c6:64:3d:
ae:e2:78:f1:eb:39:6b:9a:f7:d9:b1:c2:f3:80:d5:9c:c6:55:
4f:6d:a0:13:f2:17:c1:40:2c:4e:0b:25:18:32:06:34:96:69:
2f:6d:2e:79:3c:d9:1c:22:32:22:86:3c:9c:d7:16:bc:10:21:
b9:02:c0:e5:91:af:49:36:aa:f6:1d:e4:cb:b0:f3:e6:33:02:
32:1e:40:9e:4c:49:b0:4f:10:ea:aa:54:2b:f8:d2:c5:4a:6a:
41:89:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:11:51 2026 by rpki-client