Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: bINQzkDlG8lEDEfWgaapJNXOGqieGK2t1E5BGJeO6pI=
Subject key identifier: FF:14:7E:71:B4:EF:C5:FE:45:06:95:BA:2B:D8:59:E2:D3:4A:AC:E5
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 019DA528B1BAD24F2744A251F8FC69B510A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 0A
Signing time: Sun 19 Apr 2026 09:53:20 +0000
Manifest this update: Sun 19 Apr 2026 09:53:20 +0000
Manifest next update: Mon 20 Apr 2026 09:53:20 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: /yzyGqOGjddMYabEPJkYR4qO51y7+hQ78t+3zOxLAB8=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:28:b1:ba:d2:4f:27:44:a2:51:f8:fc:69:b5:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Apr 19 09:53:20 2026 GMT
Not After : Apr 20 09:53:20 2026 GMT
Subject: CN=ff147e71b4efc5fe450695ba2bd859e2d34aace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:8b:d8:1a:b0:4b:47:e5:e4:26:39:11:16:
18:5d:24:fc:1d:ea:d7:31:f9:34:e4:88:f7:94:12:
cc:49:ba:9d:2b:7c:16:b3:ee:2d:62:1a:54:86:00:
c6:80:eb:37:04:97:ae:58:75:d8:c3:63:fe:e1:c7:
7f:38:a9:63:a2:0d:5d:1b:67:82:96:0b:16:73:02:
86:d8:a9:90:a6:32:d6:a2:21:e1:9f:61:3b:7f:df:
3c:b0:7d:6e:54:5b:2e:2f:d5:2c:bf:2f:64:63:c0:
ce:c6:cc:50:ba:e7:5d:8d:4e:b2:71:f6:2b:f2:f3:
c9:0b:a9:bc:fd:15:15:37:a2:8a:f2:72:58:81:7c:
08:9d:a4:79:48:e2:f1:8f:bf:e3:e3:ba:b9:3c:59:
75:40:94:e2:25:4c:a4:38:d0:89:b8:54:62:3a:54:
80:d4:d2:75:fb:b2:1f:d7:88:7b:d3:e9:40:e6:29:
91:d5:9f:ab:57:03:17:2d:16:60:a5:74:76:02:05:
6f:5f:56:74:09:5e:5c:e7:c9:d9:47:37:e6:0c:f3:
bf:16:da:e6:f8:b3:20:fa:4a:40:4d:a1:44:48:c0:
ab:fa:05:b6:70:de:dc:09:24:0e:f2:13:a2:47:64:
47:7f:eb:e7:d2:1e:93:a2:7e:81:a1:cc:86:db:01:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:7E:71:B4:EF:C5:FE:45:06:95:BA:2B:D8:59:E2:D3:4A:AC:E5
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:6a:f8:56:b1:9f:f5:54:74:78:eb:53:2d:57:99:d6:fd:
a8:cf:bd:9b:89:22:51:3d:e8:20:e9:59:8c:e6:ee:ad:1b:92:
f3:36:5f:25:9a:39:c4:68:df:e7:a2:8f:8a:b2:14:81:51:95:
c4:04:70:04:49:b6:24:39:80:95:1f:27:a0:4a:c0:3e:78:3a:
c2:7d:17:74:67:b3:56:c2:ac:39:e1:17:4c:69:de:00:40:ab:
90:2d:10:ec:f2:69:e4:96:9f:52:19:c9:30:95:2e:c1:18:d1:
2a:e6:b7:b7:c2:6a:0a:12:51:0f:75:c5:3b:fa:5d:99:74:b7:
49:5d:e5:83:27:31:b6:73:27:84:92:5f:6d:72:1b:39:30:8d:
ec:be:0a:da:f3:d0:af:8e:98:41:ac:3c:65:f6:b8:29:33:01:
63:9f:d4:94:17:3d:ee:d9:b4:75:b3:93:14:db:04:ab:c1:2c:
bd:9b:15:e3:48:90:23:0f:e6:6a:0a:d2:67:a9:0e:88:ea:9d:
23:ac:38:2a:34:ec:43:90:2e:ed:b6:26:a9:b7:be:c4:46:82:
66:81:43:80:1b:94:b5:ea:a5:3a:8f:4e:28:6a:50:d3:2b:34:
b6:64:9d:91:b9:bc:5f:fe:e9:6f:38:47:77:36:c0:6a:2f:33:
8c:37:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:19 2026 by rpki-client