Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: T6UwTOV++E/yjAC7FHYzpN/Xk/1YhHarTJeU4hqEKos=
Subject key identifier: 4D:B7:1D:57:1E:28:8B:02:0B:12:40:5D:E2:18:81:47:03:EF:8C:CE
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019D98F43E09009B3753990A67B7C2B153FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 1045
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (hash: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w=)
2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: arAzmrTVgE7B487AKIBhpT4qiT97T8Dx8q37o7YEF3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3e:09:00:9b:37:53:99:0a:67:b7:c2:b1:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=4db71d571e288b020b12405de218814703ef8cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:85:8f:4f:a2:51:bc:23:22:5b:8b:6c:f5:
90:9a:e5:3d:73:79:8b:7a:c9:4d:82:54:cb:d7:9a:
77:a9:7e:ed:25:67:3a:d1:ea:dd:18:f8:20:e1:95:
c9:14:63:f9:65:2c:e7:db:68:37:04:05:1a:19:2d:
f1:1a:36:cc:f3:30:f1:2d:a0:20:64:e0:ae:82:f7:
ca:7c:2c:66:6f:bf:f6:ec:9b:08:ba:1c:6e:ff:71:
d6:18:61:03:6a:bb:d8:19:a1:6b:02:c0:6b:8f:b1:
74:83:b2:5e:9e:3b:7a:9c:c2:aa:fa:85:8a:35:56:
d9:71:f9:be:9d:40:9b:7c:9d:97:32:ea:22:57:51:
ba:b7:5a:cd:24:2a:b8:b6:44:cd:ee:1f:57:98:bb:
8d:86:08:ec:25:2e:80:d2:b5:f5:10:eb:e7:81:8a:
7f:82:56:6b:71:6e:98:6c:48:f4:dd:fa:9e:d6:59:
66:eb:05:17:62:b5:66:13:d8:2d:14:83:68:94:99:
12:10:0c:2d:2e:3f:51:e6:bd:92:5e:85:ab:6c:1b:
56:23:2c:4b:db:ef:e5:d8:29:e8:d3:f6:2b:14:67:
4a:d3:2a:71:76:09:3c:12:73:21:5c:ba:dc:20:54:
3c:b6:bd:60:b7:1f:71:7a:f0:16:56:23:ce:86:6f:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:1D:57:1E:28:8B:02:0B:12:40:5D:E2:18:81:47:03:EF:8C:CE
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:9f:d3:f2:98:89:b5:7d:14:b6:30:ed:37:c7:13:6f:2d:
ac:f4:c1:c3:1e:a0:57:8d:49:9e:05:56:43:9d:7f:fd:18:b4:
d0:ba:2f:19:0d:37:ae:39:7d:90:e6:14:a4:e8:1e:51:60:c3:
34:89:92:e6:5f:52:fe:35:b4:2e:af:97:d9:66:02:62:0e:fc:
a2:ea:69:69:0e:9d:fd:6e:92:7a:35:23:af:12:be:46:6e:83:
0c:c6:ee:69:48:5b:86:cf:bd:74:88:13:4f:bd:98:d4:9b:20:
ee:25:fe:25:12:7a:04:16:68:ca:50:b4:00:31:21:76:28:b8:
09:d2:0e:f4:17:c6:f9:24:8d:80:49:f9:8a:a0:60:aa:35:0e:
19:6e:56:f2:9c:a0:44:28:09:b3:e7:f1:13:25:6c:6a:f0:6b:
ac:09:71:2a:e2:a9:63:c5:18:2f:98:84:ad:8b:64:48:67:b8:
61:48:a5:dc:f9:e2:19:25:c8:d3:83:13:c6:0b:72:38:80:3e:
28:bf:d6:f2:15:5f:15:55:ce:98:e5:86:38:87:97:06:a7:50:
b1:50:0c:a6:f8:4d:d3:ec:7c:5e:4e:d6:ab:24:0c:6e:a8:92:
8a:91:d8:b0:a6:ee:67:ac:dd:aa:43:14:32:9d:b4:60:da:41:
b1:89:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:34 2026 by rpki-client