Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
File: LC2INEn2etRwnVyrtAbqi8OHNCE.mft (raw, json)
Hash identifier: PpI31G41wo7r269Wf2946nxeEMlK9Ei2qfl7Sd6Rn2I=
Subject key identifier: 55:3B:29:30:30:DE:08:6B:74:D9:10:1D:0A:C0:15:80:1F:0B:2E:1E
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 01A0C28E00533862266D737088B288F35014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
Manifest number: 01A7
Signing time: Mon 21 Sep 2026 06:01:21 +0000
Manifest this update: Mon 21 Sep 2026 06:01:21 +0000
Manifest next update: Tue 22 Sep 2026 06:01:21 +0000
Files and hashes: 1: 6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (hash: jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=)
2: LC2INEn2etRwnVyrtAbqi8OHNCE.crl (hash: a7jx/AHtrnvO0iuXnQ5YNik/DY/PkkoI08EORCQ1gmU=)
3: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (hash: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:00:53:38:62:26:6d:73:70:88:b2:88:f3:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Sep 21 06:01:21 2026 GMT
Not After : Sep 22 06:01:21 2026 GMT
Subject: CN=553b293030de086b74d9101d0ac015801f0b2e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:63:bf:c9:98:d1:30:18:c8:ad:a5:0f:15:
8f:8e:79:63:8c:0b:37:4b:13:b5:ef:f8:f1:f1:dc:
76:15:18:be:58:68:90:bc:bf:3e:39:0f:29:66:f6:
40:e2:46:e2:67:4a:f7:62:46:34:b9:c6:d7:c4:53:
af:c9:92:a2:54:c7:7b:9c:ba:2f:17:6b:79:d7:4c:
84:53:f4:86:ff:a6:31:0c:ff:ea:c7:6c:42:8c:89:
21:30:89:a5:fa:a1:7c:7a:6d:a3:fe:44:3a:62:68:
60:02:b9:c3:ec:17:2d:42:e0:7f:4d:cb:ce:68:53:
bf:37:4e:c7:13:dc:e0:f8:45:d8:1c:ef:3c:91:fe:
21:7c:d9:47:2d:e6:34:fc:0e:8a:e9:36:c7:03:10:
60:46:a0:4f:ff:db:61:27:6e:ed:4c:62:d6:05:53:
db:b9:5c:31:fb:8e:ce:ee:bb:82:1a:62:fa:a5:be:
da:21:30:ef:41:b5:71:5a:2b:23:e0:e4:e1:64:7b:
35:4a:75:95:74:f2:e3:85:cd:15:f2:c9:78:f9:fb:
a2:9b:8b:15:e9:53:86:b1:ba:49:84:f4:e1:f4:35:
21:b7:72:81:b9:23:2b:0a:0e:dd:f5:fc:a0:ad:05:
54:91:fa:9a:04:8e:bb:fd:04:7d:f4:48:9a:0c:92:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:29:30:30:DE:08:6B:74:D9:10:1D:0A:C0:15:80:1F:0B:2E:1E
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:65:bf:c3:95:c5:d3:4f:61:f1:a2:cf:47:75:80:70:1b:db:
4a:9d:45:fc:e7:e6:66:3e:7b:a5:c2:31:76:28:9c:49:70:a3:
36:23:45:ef:2a:d7:b3:5c:b5:67:86:e9:0a:05:f6:e9:8b:6c:
a7:57:d8:70:ff:5f:77:d4:d4:70:2a:8c:60:4d:33:c8:fb:4b:
7d:e4:ec:10:1f:0a:c5:87:6b:2d:2c:e8:cc:68:fd:8f:ff:c1:
c2:ea:9a:66:79:6c:76:b1:29:ad:f6:d9:3e:69:59:1c:d6:c4:
6a:b5:1d:03:57:27:1c:6f:ab:0d:72:ad:e6:5d:e1:8d:28:b9:
43:61:f7:20:9d:10:55:1a:75:0d:62:9c:8e:42:3b:9b:b3:bd:
dc:f5:a8:84:f2:50:64:fe:d7:59:1e:ed:ec:d1:6b:e2:3e:bd:
22:1e:20:8f:6f:15:75:53:84:8c:e5:8f:9e:2c:a5:4b:66:70:
82:ad:61:4b:d3:f6:af:ea:5b:16:fa:b6:f6:f3:a9:94:be:6c:
59:ae:80:95:53:0d:57:9f:da:0f:ed:66:1b:9e:2b:d8:f4:88:
61:44:02:a1:cd:59:78:b3:cd:2c:43:3e:11:62:a3:95:9f:04:
6c:51:2e:0e:6b:71:bd:83:57:bd:27:7d:d3:4f:d3:63:e2:8e:
eb:9b:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:25:17 2026 by rpki-client