Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: TvctVJdFM1AuxYxcfym0U+gMKtlpx41VeFWxtUZS3+c=
Subject key identifier: 69:11:18:B4:33:41:97:0F:4D:04:8B:1B:61:76:F4:49:E8:CD:E4:E9
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019CAC4755DEA1B96E6C44F9840587C783B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 135A
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: cBBfWgT7aBVzGWwCGHDKPqHLubIXpOSqtD5ytMcNom0=)
2: QIDwH1Apv1IdS1zr47e95gfDzAw.roa (hash: KfrzWi1fwrRO4OS81VuEDcM52w79Q7KbGOwSe0GzMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:55:de:a1:b9:6e:6c:44:f9:84:05:87:c7:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=691118b43341970f4d048b1b6176f449e8cde4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:2a:5c:34:ca:52:77:95:9e:0f:c1:f4:5f:
36:83:76:b9:b0:08:ce:4c:d1:7f:c8:b3:83:91:1f:
53:43:8c:ec:b3:c7:be:78:7d:89:2f:b6:e3:5c:fc:
18:bb:41:52:aa:c3:bf:fc:25:a0:2a:15:69:f0:97:
2e:2b:f4:c9:55:a8:0e:ca:1d:8e:9f:b7:1f:bf:77:
2e:07:9a:3d:e0:d5:f1:68:3b:1d:17:1c:ec:5d:a7:
57:84:8b:db:b3:97:3c:24:2e:b6:39:0c:a8:ec:fa:
dc:c7:65:4c:e3:4c:e9:f1:52:89:a1:a6:0a:02:89:
94:e3:7e:c6:fa:93:cf:40:59:38:56:07:f3:ab:0b:
95:d6:d9:df:25:1a:3a:ca:94:0b:64:f4:27:c5:65:
81:b3:05:48:db:9f:03:34:e6:ae:a3:4e:9a:94:3f:
5a:82:aa:29:bb:6a:5b:72:13:1d:24:d3:ce:f6:e4:
ef:ad:7f:c5:f0:a4:d5:58:f1:5f:5b:90:ad:57:ff:
cf:9d:34:87:1f:fc:aa:0f:e6:22:21:09:83:8b:c7:
aa:91:70:d0:96:a8:b3:8c:24:a3:39:ee:8e:43:74:
5c:af:bc:9c:2f:7b:cf:99:29:62:65:41:f5:3e:cf:
90:1b:de:63:4e:84:59:a9:c7:ca:e3:8a:a5:18:56:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:18:B4:33:41:97:0F:4D:04:8B:1B:61:76:F4:49:E8:CD:E4:E9
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:d6:6c:7b:ed:d6:64:27:38:53:1b:6f:6a:f5:31:06:5c:
ee:8b:42:68:a9:f9:69:53:1a:71:3f:99:56:a9:bc:d5:d5:5a:
91:79:52:70:00:b4:a3:58:d2:7d:27:8d:34:15:df:f0:4e:8c:
16:9c:bb:02:76:76:21:b9:11:b8:52:d9:78:94:98:27:a9:55:
e1:b3:bc:42:62:77:72:62:9e:56:48:05:b5:33:76:f3:17:be:
32:b8:bb:4f:5d:fa:74:fe:f4:8a:7d:15:aa:da:8f:1c:e7:50:
04:f7:6d:a7:1b:cd:a1:84:9b:70:a3:97:ee:d7:ad:92:e7:16:
ae:00:d4:ff:9e:dc:54:64:0a:5e:33:b2:db:4e:15:f6:ea:e4:
91:dc:78:c4:12:8a:3d:36:30:33:20:9e:92:12:c6:7e:22:bb:
ba:bd:f8:c8:4e:5b:82:cd:e4:ba:dd:ac:68:82:a6:78:9f:d8:
b5:90:a5:55:80:e3:ce:cb:78:8f:3d:5b:3f:a1:45:25:6a:d2:
76:f1:57:cf:d3:ac:42:45:25:e6:d3:b1:93:d6:6d:f3:e1:aa:
6e:48:f2:11:1f:78:ee:9e:c3:d0:61:97:02:4e:80:b8:37:be:
2e:9b:e7:2a:34:27:e1:20:07:df:55:ad:8b:99:39:ec:b5:30:
11:00:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:10 2026 by rpki-client