Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: 660VAf+DHm2F3RW2fZdWc5kaD0gcRfIetI6Sbd3PtyY=
Subject key identifier: 19:3A:DD:88:8E:E2:EB:F4:6D:14:03:5A:90:F4:C1:71:85:7C:06:29
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019D3977EEFC9322B528BB41AC88ECD2B336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: +Jzq/oRz8ooOX3sT0xN6RnzoCwOy7SC4aBVHfsjQdYg=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
4: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (hash: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ee:fc:93:22:b5:28:bb:41:ac:88:ec:d2:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=193add888ee2ebf46d14035a90f4c171857c0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:f1:c9:40:8f:c4:00:54:33:51:e7:b9:74:
e0:f5:fd:16:e4:c5:56:d7:8c:ee:23:59:72:57:1e:
3f:ae:21:0b:85:5d:14:6a:3e:34:8b:f4:b3:33:7e:
64:e2:8d:84:d9:ff:ac:1a:2b:28:d7:bf:21:94:bd:
96:f7:f8:ca:a8:cf:f0:65:d4:7a:cf:5d:52:1d:70:
32:84:f0:20:6a:dd:23:c9:54:82:b4:15:6e:a8:af:
47:ec:4c:fe:7c:88:1e:85:b7:51:da:34:e5:6b:6d:
8c:70:1d:4a:25:6e:f0:d3:6c:19:81:65:ad:f0:d9:
34:2c:d7:31:22:4a:3d:f4:fa:70:f1:4f:f4:7b:a0:
95:96:65:8e:3c:32:8d:e8:e5:17:5b:e7:4a:e8:e5:
9e:5b:86:af:12:07:fc:c8:25:ce:8b:67:00:0f:84:
5c:ce:7f:38:e1:f6:28:91:f1:1e:4c:d2:10:bf:4e:
4d:23:30:99:ce:12:aa:6d:64:48:c9:17:4a:8f:d2:
03:67:9d:41:18:d8:37:ba:02:cd:0d:a6:79:5f:0f:
0e:02:23:6f:63:54:d9:ea:20:e9:92:e1:77:72:d5:
4f:8f:9a:f0:3f:2f:8a:fd:a1:ae:5f:38:01:3f:b1:
d3:19:9e:06:7b:9c:57:3b:79:02:ad:b2:e2:f1:3e:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:DD:88:8E:E2:EB:F4:6D:14:03:5A:90:F4:C1:71:85:7C:06:29
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:53:16:41:93:cd:1b:dd:14:20:a0:1f:cc:62:cf:dc:57:
42:02:f1:80:5b:72:73:63:5a:d8:27:6b:61:c8:c6:e5:fb:29:
c2:06:7c:0e:94:fd:fb:0d:cf:b6:6f:16:d1:02:ac:ed:98:30:
20:66:57:91:d8:56:73:db:7c:53:f1:2b:71:2d:81:76:ad:1b:
11:e4:85:b2:6a:4f:2c:02:5c:b7:e7:8d:9f:63:70:58:20:23:
6e:e0:0c:86:56:ec:fc:98:4f:f7:e2:09:69:e0:90:74:d2:a5:
d6:6d:b5:66:80:4a:f0:b9:74:1b:a3:a4:68:7a:7c:77:c3:c6:
94:ed:ab:e5:67:f4:1b:ed:97:c6:23:c7:6d:08:d2:54:d0:e4:
76:8d:02:94:25:09:17:0f:18:65:05:55:ce:37:79:01:97:3b:
3a:16:bd:4b:21:c3:34:c6:bd:82:b2:e4:1f:fb:02:17:64:94:
fb:86:f5:ff:59:b4:bc:1d:61:66:ec:b2:1a:e0:48:61:57:c2:
1e:fe:a6:fb:5a:49:05:5b:9c:c1:bf:85:28:f2:0f:a3:2f:aa:
b2:5e:32:b0:86:e2:4a:33:bf:a6:36:1a:be:26:95:fa:6a:98:
e4:f8:8b:f6:a9:ec:3e:a1:69:b9:1a:2a:23:9d:fb:60:54:ac:
f7:60:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:51:03 2026 by rpki-client