Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: QxSScy0ncmEWGtZkBnuQcPKroRplujwxpV9EqIQGBFw=
Subject key identifier: 90:BD:E3:A2:6A:1D:C0:94:4D:D5:69:1A:CA:50:D9:EA:70:07:77:85
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 01A1BD9B707911DA844F58CA0C811C69D4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 022B
Signing time: Mon 09 Nov 2026 00:00:42 +0000
Manifest this update: Mon 09 Nov 2026 00:00:42 +0000
Manifest next update: Tue 10 Nov 2026 00:00:42 +0000
Files and hashes: 1: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: zZ9DxmfFMhOoueTaIZU3gf27wIyW1QLNAcK3mQAgf5s=)
2: fmAI-ELfR8es8rqjY_C_NRVbf38.asa (hash: hf1HYNu1FITfWnRrkmBLRmIEQwPhNWwa07xK+1K/E/4=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:9b:70:79:11:da:84:4f:58:ca:0c:81:1c:69:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Nov 9 00:00:42 2026 GMT
Not After : Nov 10 00:00:42 2026 GMT
Subject: CN=90bde3a26a1dc0944dd5691aca50d9ea70077785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:1d:2b:ec:3d:79:be:c7:bd:dc:f1:40:e9:
80:75:ed:f4:db:2c:72:75:0f:87:7d:5a:53:e6:c8:
22:2f:e6:4f:32:63:c2:01:11:81:7d:de:ae:dc:af:
8f:af:f0:c3:45:7e:12:58:ef:6f:ca:ee:b7:61:71:
6a:b7:8f:85:85:93:3b:12:0b:52:dd:98:fd:79:28:
6f:00:d6:ac:92:6c:45:ea:f7:b3:da:bc:db:29:1b:
e3:5b:b4:08:74:ed:9c:d6:e3:01:09:36:53:e9:e8:
00:4e:7f:85:d1:e6:54:9a:1e:29:93:e8:e7:fc:e9:
9f:97:19:66:5f:66:a4:7e:0f:2d:52:e0:b4:c6:9b:
ca:74:81:27:cb:8f:bb:42:f0:b5:cf:39:c7:d7:92:
a3:6c:92:91:5d:64:b5:32:3b:f9:19:b4:32:cf:b2:
15:81:5e:d2:3b:dc:a2:55:7a:84:8f:5d:a5:94:90:
1c:00:43:22:0a:f6:d7:89:a9:6e:72:8b:38:db:30:
a1:19:eb:23:1e:ea:d9:c6:4b:44:16:8c:96:44:ac:
26:76:1c:2f:2e:22:20:28:ea:c1:6b:db:7a:2c:d0:
3c:86:0c:e5:3e:26:eb:61:1b:aa:d0:7c:22:a6:04:
11:57:b9:a8:77:bf:95:5a:f6:c9:33:9a:f5:bf:2b:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:E3:A2:6A:1D:C0:94:4D:D5:69:1A:CA:50:D9:EA:70:07:77:85
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a1:63:20:99:6c:ea:d5:d6:61:e0:87:66:f3:0e:6c:5b:9d:
7c:2b:c9:7d:b4:13:5e:94:8b:73:6b:ca:ea:a5:b7:22:cd:93:
a5:71:d3:5c:93:38:c0:48:ec:45:28:a7:09:55:4e:a7:2a:ea:
4c:d8:6c:09:cc:87:b2:ac:e5:cb:4c:b2:b6:ab:24:6c:72:96:
e8:85:01:6b:d7:c8:d8:43:e7:3b:93:fc:ca:f9:7b:42:fb:85:
f3:98:fd:d3:98:48:df:bc:fc:4c:1d:e0:b7:f9:2d:76:3b:2c:
ed:f1:47:6e:3f:48:62:91:7f:6f:c6:db:a1:cb:2f:65:19:fe:
9c:af:06:f3:8d:68:2a:e3:a8:80:d5:a4:12:b4:c4:e7:cc:9d:
d6:6d:82:48:2f:b2:f5:fc:11:34:6b:12:87:b0:a0:1d:3f:8a:
ff:8a:e2:a0:76:c0:1c:eb:ea:c1:c7:7a:59:53:26:7b:4e:75:
63:a1:5c:e0:e2:bd:18:e6:be:eb:d8:69:8e:99:23:45:76:49:
d0:22:ea:3f:da:49:c0:21:8f:68:3a:79:dd:79:67:75:25:36:
5d:f9:97:79:14:bc:41:4b:79:01:45:68:d7:62:64:2f:de:20:
e3:e9:77:0b:2d:c0:77:bf:94:da:f3:09:43:f7:ea:97:6c:84:
d8:cb:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:07:47 2026 by rpki-client