Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
File: LsJnz2xrO4jpahG_KemnOlWMXkA.mft (raw, json)
Hash identifier: UJC8x9CD3jxxiqmO2m1UAvPq5n3j5eVaPhXHVPIJMm4=
Subject key identifier: CE:72:29:42:58:EF:4D:F4:05:50:EC:1B:7A:30:12:B6:70:F2:9B:E4
Authority key identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
Certificate issuer: /CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Certificate serial: 019D992AF9662B05B5C28961A99CE6DB83D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: LsJnz2xrO4jpahG_KemnOlWMXkA.crl (hash: FF5CJc7TYa2Pm3sp15M35xCmuec1g9rpefh9noYXa1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f9:66:2b:05:b5:c2:89:61:a9:9c:e6:db:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=ce72294258ef4df40550ec1b7a3012b670f29be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:68:fc:77:02:08:ee:c0:4c:13:ee:37:7c:
36:aa:1e:3d:4d:ca:a8:99:96:5a:d3:82:04:83:cf:
df:b7:aa:c3:1f:d0:52:12:7b:f9:f8:8e:b8:5e:1c:
c8:82:71:b6:66:0c:23:a8:48:7b:d0:6e:14:fb:ac:
cb:87:ea:70:1e:76:73:72:96:90:a7:77:31:67:4f:
2a:03:57:90:e5:48:8d:96:ed:c9:54:6e:76:b8:d3:
7d:04:5b:94:d6:b2:0a:f1:40:ca:36:d2:70:13:35:
7a:69:67:cf:fb:c0:51:37:e9:ec:f7:1c:75:c3:76:
5a:3f:5f:bd:1c:ba:cf:88:a6:8f:11:c8:dd:26:31:
e5:35:e8:42:d1:2e:36:1b:42:7d:3f:c3:dd:4e:20:
fa:1d:8c:d7:df:3e:ee:58:87:2e:ce:6a:30:ba:a8:
98:a3:a9:47:37:15:02:fb:0b:26:46:e5:67:3b:d7:
6c:69:8e:8e:53:1f:b9:69:79:73:7f:96:3c:cd:63:
28:e7:83:45:ff:e1:27:24:94:b9:ad:7a:5b:92:56:
67:09:46:c6:a5:d2:aa:15:e0:50:9e:95:e1:d8:14:
70:92:54:c0:70:40:9b:87:cf:5d:14:c6:0c:07:fa:
d7:2d:a9:7d:d7:5a:26:55:1c:6d:bd:cc:0d:6d:29:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:29:42:58:EF:4D:F4:05:50:EC:1B:7A:30:12:B6:70:F2:9B:E4
X509v3 Authority Key Identifier:
keyid:2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:1e:48:6f:32:7d:64:de:27:94:f4:75:f1:0f:4f:9b:9b:
46:98:a5:bb:0f:f8:14:8e:a2:49:fa:3f:53:a3:6c:67:9a:f3:
ad:96:3b:70:b6:09:15:7b:cf:45:ab:97:a6:91:4b:80:7a:de:
53:33:9d:26:5a:93:4e:10:9a:36:29:28:a7:e0:92:33:87:dd:
f3:e8:58:59:ab:90:ce:50:71:18:55:4f:b4:98:87:04:8c:33:
21:b2:0f:36:cd:c5:59:7a:7c:a6:f4:12:c7:3c:8f:f5:15:11:
ff:58:83:69:b7:fd:eb:a2:73:70:a7:00:7b:73:48:40:b0:e4:
9f:cf:13:dd:c3:34:a9:6f:f1:b0:ac:96:d1:53:15:64:5d:84:
31:c9:ae:2f:e1:95:6c:3a:2f:ab:5b:87:c4:85:f7:d6:9d:54:
35:cc:e6:1b:cf:89:84:a0:89:b6:48:d4:fe:d9:e3:18:3a:c4:
a0:26:f9:d6:e2:0e:f5:a3:69:d8:82:74:ac:42:69:a9:c7:12:
88:69:88:4d:69:e5:0c:46:b6:6a:13:40:4f:00:98:67:2a:c8:
42:9e:2e:12:19:d5:20:1c:a5:0c:82:f0:9c:75:73:ba:39:8d:
7a:81:7d:16:53:18:07:35:c3:7a:0a:48:76:1b:d8:98:3e:1a:
6c:4b:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:09 2026 by rpki-client