Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: 8fwCmb85XE+y75lCyi9OPxGb3BD4VlpQC680jxol1do=
Subject key identifier: 30:C0:97:E7:E0:23:CF:1E:11:05:E1:E5:1D:9C:00:A4:AA:0D:F1:D8
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019D382E19512D4F896912DD955F55E363FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 113F
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: VehAHfxyIpT3Tn+zC+vbwQcnIvZSdyWLGtagT0iVgWE=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:19:51:2d:4f:89:69:12:dd:95:5f:55:e3:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=30c097e7e023cf1e1105e1e51d9c00a4aa0df1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:5e:e2:43:23:ed:94:cc:c1:17:15:2a:c4:
73:9c:b0:ce:b9:42:6e:60:1e:88:61:56:22:9b:14:
1d:70:f1:99:92:18:42:da:b0:29:6e:40:24:f0:8f:
13:c7:9f:92:fe:58:0b:8d:24:37:4e:7a:31:2e:db:
54:9f:56:0f:de:bf:0c:0d:a4:cf:93:bf:5c:0c:a2:
ec:d8:f7:63:3a:23:3a:55:00:6c:8e:04:78:0a:6a:
e4:d5:21:42:80:d0:66:24:e9:a3:7e:51:3d:9c:c1:
5b:ed:57:4f:ca:ef:a6:de:88:e8:91:ac:84:ce:f6:
59:cc:61:8b:33:3f:10:43:6f:58:34:74:62:b8:98:
58:6d:8c:de:67:a7:38:3c:f4:47:ef:5c:b1:d8:1d:
e0:f2:b4:9f:af:4d:1b:1b:c3:13:f4:e2:f5:02:61:
11:25:50:ac:a0:3b:f7:8e:0e:de:50:53:a5:e6:3f:
16:81:01:6d:6d:7b:67:1c:b9:41:10:30:9b:58:2f:
d1:e9:a3:05:a7:ff:02:c5:65:90:12:c2:f5:51:24:
6b:d7:91:e5:08:8c:72:6e:be:09:0d:bf:e7:0b:20:
58:7a:5b:ab:47:cf:f7:7c:0c:68:b4:66:fd:f0:26:
e7:b8:02:e1:f8:7a:8d:bd:58:08:d6:5c:1d:6c:ff:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:97:E7:E0:23:CF:1E:11:05:E1:E5:1D:9C:00:A4:AA:0D:F1:D8
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:4b:2e:52:02:b1:df:aa:b3:a8:11:03:e4:d7:2a:70:b5:
e0:2c:a8:6a:49:35:8a:37:f7:39:a1:ea:d7:0b:80:6e:b0:9a:
b2:06:f6:78:cb:37:6c:73:57:38:18:78:32:36:54:70:63:cb:
7b:c8:7f:19:ed:0a:88:f2:44:d6:af:6f:7f:b8:8d:85:65:31:
84:9f:cf:fc:29:6e:75:1c:bb:86:80:42:7a:a4:6e:b0:25:00:
98:ea:ee:9f:92:38:7f:88:15:14:8a:28:ee:9b:c1:a9:db:dc:
88:0e:56:ad:30:da:5d:de:68:5c:39:5c:66:90:b0:82:b7:ce:
74:40:90:8f:37:87:66:1a:e7:d5:c3:ad:35:4f:3a:9b:78:26:
58:06:f4:f8:69:19:b5:83:f3:5f:4d:85:f7:a4:b3:bd:89:24:
16:50:dd:0e:32:f0:e0:e7:63:b1:63:11:de:28:a5:15:26:d9:
d0:e9:8f:fc:03:7f:28:8b:dd:40:9a:73:9c:73:b2:e9:58:80:
f6:66:ea:d5:02:f5:24:53:24:df:52:90:a3:09:c8:f0:da:61:
fd:18:09:2b:26:82:e7:32:7b:20:9d:92:a8:76:83:66:25:02:
7e:a6:69:68:ed:31:06:1e:c7:b0:89:ca:5b:49:a2:0d:18:1f:
8c:2e:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:53 2026 by rpki-client