Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: dNT6Ct2exXggEw6nOJ08Z4RtevCWysIhetValD+388o=
Subject key identifier: BB:9F:4D:DE:16:9D:DA:24:5C:BD:70:BD:7A:C7:F1:94:84:DC:28:DA
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019D389C56F07789478D820347C6AD5E7816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: A_68etnfks3PakbL9Hb45owYZ-w.roa (hash: 8UV8lYEu6iu3XIgtRfYywNlrJ6Qvyca/nSSa6hHK38E=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: vkzI61sIarHcp2JDpRKXM7oNu/HPb39BOuuuoIgVLp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:56:f0:77:89:47:8d:82:03:47:c6:ad:5e:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=bb9f4dde169dda245cbd70bd7ac7f19484dc28da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:2b:b1:5e:da:52:a0:ad:c2:e6:e3:0b:8e:
ac:f2:cb:f6:f8:e0:95:78:eb:00:43:fd:4d:11:7e:
59:85:11:da:bc:bd:68:ec:c6:3f:55:42:4d:6e:46:
16:8a:23:e1:97:2e:2a:b2:49:7d:99:cc:0e:a4:37:
b9:6f:48:9c:90:16:2d:ea:ea:13:e9:86:bb:8b:57:
04:e0:bc:71:74:3b:7e:56:d1:2e:3f:99:dc:46:40:
85:52:a9:2c:c3:c8:a5:89:2c:d7:6e:70:aa:33:07:
e5:87:ad:1e:cd:01:ee:54:02:da:5b:99:dd:a3:22:
10:df:9e:ba:95:71:b6:9d:2f:00:66:b2:23:e8:65:
50:da:8d:26:ee:eb:b8:19:3c:0a:11:ac:34:3e:a9:
78:ce:1d:9d:8b:81:27:ed:d7:60:c1:a7:b2:cd:75:
17:70:52:c0:8f:2b:e3:96:4b:94:80:fe:6f:30:cd:
88:18:c1:1b:fb:a0:e8:30:1e:7d:e0:bf:e3:43:1f:
94:52:26:19:25:3c:61:f5:18:a3:a5:5d:67:9c:17:
0e:db:23:de:ad:c2:da:31:41:84:1e:27:98:23:cb:
3b:50:2a:a6:98:a6:66:87:4d:df:b6:02:f0:71:c2:
64:1f:b9:22:62:59:bc:71:85:0d:32:cb:95:96:1f:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:4D:DE:16:9D:DA:24:5C:BD:70:BD:7A:C7:F1:94:84:DC:28:DA
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:80:eb:15:db:24:df:41:ee:ca:1b:a6:68:cf:56:7e:ce:5d:
5c:f7:0a:4b:6f:12:94:1c:6f:7c:e4:4d:f5:63:b7:84:5a:ca:
fd:d0:e2:6d:5f:40:30:73:38:b6:6c:40:3e:42:66:60:dc:1c:
53:dc:95:b4:60:66:f3:6e:89:12:c2:c5:48:53:db:a4:a4:00:
37:74:0b:ba:3f:69:95:69:0c:98:95:17:73:0c:2f:e2:36:c0:
e9:10:ad:27:7c:a9:a7:89:48:19:7d:14:9a:d3:10:b9:18:79:
a5:96:1d:ff:6c:d8:1a:9f:f8:ce:f5:bc:c4:ea:6a:93:59:ff:
76:b6:2e:b0:4c:78:3e:1f:75:c2:01:a7:7c:2c:dd:ec:1a:54:
c6:26:89:61:d3:30:22:56:7f:f0:6b:de:33:ac:a7:a5:db:a9:
d0:94:e1:60:c5:d5:9c:2f:66:3a:19:39:12:df:ba:fd:28:6c:
bf:48:ac:5a:d7:c6:0a:2d:a6:7b:a5:55:55:86:31:14:eb:1c:
a7:71:28:93:2a:0f:f4:f9:11:fa:99:70:30:db:cb:78:4b:90:
13:a7:69:6a:fe:72:7a:4c:8a:03:1b:66:fa:7b:4f:17:6f:38:
86:06:77:28:a4:9d:fd:8a:9f:94:8a:69:bb:17:f0:71:c6:90:
ff:e6:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:02 2026 by rpki-client