Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
File: LsJnz2xrO4jpahG_KemnOlWMXkA.mft (raw, json)
Hash identifier: E13/6UQRHu30IvVN3sFDCw6Ap23v2omNQiWYNMaXH5Q=
Subject key identifier: A4:9E:04:92:BE:6E:67:00:80:58:3E:1D:D5:43:FD:D0:27:40:12:D0
Authority key identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
Certificate issuer: /CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Certificate serial: 019CABA232AA8F49615A62644CC337FCD1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
Manifest number: 17D5
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: LsJnz2xrO4jpahG_KemnOlWMXkA.crl (hash: CKsqvWtjofyKYRSr9ZfKS6lGMmSuCUpySh8dXN2Te6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:32:aa:8f:49:61:5a:62:64:4c:c3:37:fc:d1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=a49e0492be6e670080583e1dd543fdd0274012d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:14:a1:39:3e:67:73:8e:84:7f:c9:72:f7:
87:85:59:52:2d:bf:ff:0a:6c:ed:c1:32:d5:d1:f8:
9e:21:35:f8:29:8a:1f:bf:d2:ee:7c:b6:ef:b2:b1:
51:52:75:55:4f:0b:78:84:34:6f:94:9f:32:19:1b:
dd:6a:1b:8a:5f:31:cb:53:6b:56:fe:9c:a2:e6:1f:
cd:fb:57:c7:92:c8:17:16:5b:49:7d:cb:47:d3:ca:
d2:e3:c5:b7:e7:57:46:0d:67:eb:66:88:f3:65:8f:
5f:d4:47:01:69:22:77:6c:30:df:d6:f4:87:5a:5a:
c0:12:01:e5:ad:5c:d4:40:c5:3f:26:63:cd:7b:cc:
79:76:f0:25:71:da:79:83:4c:b9:ab:61:74:15:0d:
f1:ea:ef:23:2b:1d:75:15:dc:8a:4f:fa:be:23:31:
a5:47:43:cb:d4:74:32:42:78:4d:e7:f4:63:ce:05:
21:0f:b2:5e:eb:8d:f9:4a:ba:9b:27:0a:e5:c5:37:
5f:23:19:13:ca:e0:6a:0b:52:19:84:be:ed:4a:aa:
80:b0:32:37:56:f2:f6:00:fa:ea:c1:dd:d2:d8:1d:
88:ba:12:f1:c9:a6:7a:52:36:19:b5:0d:54:b1:f7:
d6:21:44:1b:0a:3e:e2:39:26:5c:80:89:24:2d:1e:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:04:92:BE:6E:67:00:80:58:3E:1D:D5:43:FD:D0:27:40:12:D0
X509v3 Authority Key Identifier:
keyid:2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:a4:64:e6:f8:48:d1:ea:09:be:48:f8:19:58:ef:c3:bd:
79:39:49:6a:2e:a7:69:fa:d8:1a:08:e6:4b:7e:06:6d:fa:69:
9e:f3:88:12:68:47:40:52:90:73:7c:6f:79:49:8e:07:63:df:
b9:a6:7f:fc:c4:0d:19:65:ab:0e:84:72:50:f3:ab:36:e0:97:
05:b2:b5:50:dd:ec:00:7f:ff:95:cf:24:ee:cd:bc:fa:42:5a:
0a:1f:35:a0:36:0e:a3:cd:2a:ba:69:ee:16:c2:63:e1:04:67:
f2:06:d2:4c:d8:cc:67:80:f8:74:0e:3b:ac:ac:59:7c:3a:9a:
a1:2c:ae:07:72:37:0d:4d:0d:d9:1b:8a:c9:a8:ce:28:6d:74:
c2:95:a7:67:f9:ac:d3:ba:f5:d9:21:c9:0b:03:6f:aa:3b:58:
f1:67:e6:b7:f2:15:66:bc:50:2e:49:f6:51:ae:14:2f:9d:55:
9e:1d:01:7c:ac:a0:4f:a0:e9:e4:ac:61:05:db:33:b3:d7:34:
66:56:ce:89:38:a9:d7:c3:12:cb:c6:ee:84:13:98:49:05:80:
5a:c8:22:16:31:a3:a6:d8:a1:ea:ed:27:15:92:80:85:cc:16:
d1:12:5e:6f:9d:93:1e:b2:c3:87:01:1f:98:57:c7:57:22:e9:
3d:90:05:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojKqj0lhWmJkTMM3/NGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzI2N2NmNmM2YjNiODhlOTZhMTFiZjI5ZTlhNzNhNTU4
YzVlNDAwHhcNMjYwMzAxMjMwMDU5WhcNMjYwMzAyMjMwMDU5WjAzMTEwLwYDVQQD
EyhhNDllMDQ5MmJlNmU2NzAwODA1ODNlMWRkNTQzZmRkMDI3NDAxMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SEUoTk+Z3OOhH/JcveHhVlSLb//
CmztwTLV0fieITX4KYofv9LufLbvsrFRUnVVTwt4hDRvlJ8yGRvdahuKXzHLU2tW
/pyi5h/N+1fHksgXFltJfctH08rS48W351dGDWfrZojzZY9f1EcBaSJ3bDDf1vSH
WlrAEgHlrVzUQMU/JmPNe8x5dvAlcdp5g0y5q2F0FQ3x6u8jKx11FdyKT/q+IzGl
R0PL1HQyQnhN5/RjzgUhD7Je6435SrqbJwrlxTdfIxkTyuBqC1IZhL7tSqqAsDI3
VvL2APrqwd3S2B2IuhLxyaZ6UjYZtQ1UsffWIUQbCj7iOSZcgIkkLR5AFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSeBJK+bmcAgFg+HdVD/dAnQBLQMB8GA1UdIwQY
MBaAFC7CZ89sazuI6WoRvynppzpVjF5AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNKbnoyeHJPNGpwYWhHX0tlbW5PbFdNWGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZWEwMWItZWU5NC00YTAyLThkNjIt
MGRjMDFmYzg4MTQxLzEvTHNKbnoyeHJPNGpwYWhHX0tlbW5PbFdNWGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jZWEwMWItZWU5NC00YTAyLThkNjItMGRjMDFmYzg4MTQx
LzEvTHNKbnoyeHJPNGpwYWhHX0tlbW5PbFdNWGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslSkZOb4
SNHqCb5I+BlY78O9eTlJai6nafrYGgjmS34GbfppnvOIEmhHQFKQc3xveUmOB2Pf
uaZ//MQNGWWrDoRyUPOrNuCXBbK1UN3sAH//lc8k7s28+kJaCh81oDYOo80qumnu
FsJj4QRn8gbSTNjMZ4D4dA47rKxZfDqaoSyuB3I3DU0N2RuKyajOKG10wpWnZ/ms
07r12SHJCwNvqjtY8Wfmt/IVZrxQLkn2Ua4UL51Vnh0BfKygT6Dp5KxhBdszs9c0
ZlbOiTip18MSy8buhBOYSQWAWsgiFjGjptih6u0nFZKAhcwW0RJeb52THrLDhwEf
mFfHVyLpPZAFdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:02 2026 by rpki-client