Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: +gvZT0wwin32W4AmQpaFd97ofXqaL4wTpZCGE/3dKa0=
Subject key identifier: DA:8B:9B:2B:D3:26:A4:3B:A3:8B:AE:15:1F:B7:ED:2D:4F:FC:13:12
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01A1829A1403EA28298D1515688C2F37A298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 13:01:38 +0000
Manifest this update: Wed 28 Oct 2026 13:01:38 +0000
Manifest next update: Thu 29 Oct 2026 13:01:38 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: rOdMkcpdv7l9VGevggBqc9ivfVeQxfscpKgLss4laUM=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:14:03:ea:28:29:8d:15:15:68:8c:2f:37:a2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Oct 28 13:01:38 2026 GMT
Not After : Oct 29 13:01:38 2026 GMT
Subject: CN=da8b9b2bd326a43ba38bae151fb7ed2d4ffc1312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:c6:75:a6:5a:40:b1:77:25:49:de:cb:04:
8b:5d:7a:e1:4d:57:63:28:4f:0d:99:e0:a4:1e:69:
2b:3e:47:0c:a4:63:6c:2b:9e:26:6a:4f:de:25:79:
bb:70:e1:7b:10:1c:0e:eb:92:91:68:5d:1c:24:1a:
4f:c0:39:38:41:91:f7:a9:51:14:c5:e7:30:7d:0b:
a6:6e:d6:8f:7a:c3:e7:ef:1b:44:c6:2f:1e:43:b2:
1a:1f:b9:8f:71:11:19:a0:b1:b6:d8:00:45:bf:bb:
c3:51:1e:58:67:9a:7f:65:62:9d:8e:a6:3f:bc:6a:
78:58:b9:d3:b8:db:ef:50:5f:eb:e3:66:da:ee:93:
94:9e:12:f8:48:c9:e0:fc:cb:93:04:84:a1:cc:23:
75:b8:df:ec:89:6b:65:f9:26:42:46:3e:e0:bc:54:
e4:39:e3:1d:42:2f:c7:2d:05:e7:27:f9:38:3c:a6:
ea:a4:2b:15:f1:fa:df:2e:72:fa:59:d5:02:b6:e2:
d9:71:85:12:6d:d0:aa:3b:36:40:63:38:0e:f0:35:
aa:fa:24:cd:31:ef:73:af:f6:44:79:69:bf:51:b9:
3f:c3:fb:82:9c:ef:54:60:ee:c0:12:56:4d:37:d1:
2c:2b:b8:d9:ef:11:64:58:9d:6d:25:10:26:9c:e3:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:9B:2B:D3:26:A4:3B:A3:8B:AE:15:1F:B7:ED:2D:4F:FC:13:12
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5a:54:81:e2:35:4f:ac:e6:94:90:4e:db:bb:fe:26:b1:d6:
8a:e5:27:f1:b6:f1:ea:cc:06:63:75:51:39:3a:0b:ed:c3:36:
40:71:99:87:fa:c5:a6:eb:0f:bd:a5:f9:81:4e:da:b4:8c:fd:
6e:06:5d:d3:9a:d8:65:62:65:35:d4:2e:27:32:8a:2d:46:51:
2d:c8:8e:e6:34:dd:79:46:ff:04:fb:c0:da:81:45:ba:57:67:
0f:7f:25:14:e9:63:b2:1c:76:61:e1:d6:bc:18:42:0b:9c:6e:
c1:71:e1:6b:80:e2:d1:f1:79:79:03:fd:5b:7c:c2:0e:38:ac:
ec:0b:a2:92:ec:42:f3:b9:37:3f:dc:1f:9b:5a:88:c0:49:35:
61:3a:f2:da:71:52:0b:aa:d8:bc:f8:e9:7e:86:e3:24:b3:17:
f4:65:cc:af:01:fc:18:3d:26:33:7a:3e:26:75:34:f3:e8:61:
ef:35:c7:fa:2b:ad:fb:b6:7e:c2:43:29:9c:c7:70:47:b3:f2:
7f:85:b1:22:a7:16:7e:c6:b5:38:0a:71:d4:58:b7:ff:e6:e9:
fe:aa:47:e9:5c:24:53:bb:64:57:e6:09:31:fd:c3:8f:ae:e4:
13:55:b3:11:a5:b3:f2:29:95:bb:13:91:7f:d9:75:0f:a3:07:
db:2e:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:21:43 2026 by rpki-client