Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: XSo5VcBiag99rRUnYAkRVtSLtjcCkI2dZ29cFIp6Vic=
Subject key identifier: 8F:EB:C0:B0:08:29:A9:13:7C:5C:F0:28:C7:D1:18:E6:FF:A7:F9:A9
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019D9BBEB2FF969F4C7578C71F412060027F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 13D6
Signing time: Fri 17 Apr 2026 14:00:59 +0000
Manifest this update: Fri 17 Apr 2026 14:00:59 +0000
Manifest next update: Sat 18 Apr 2026 14:00:59 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: lT/Lce8RmYDvgihdRO4GnB3pM81nXvJG1d+btBhEqxQ=)
2: QIDwH1Apv1IdS1zr47e95gfDzAw.roa (hash: KfrzWi1fwrRO4OS81VuEDcM52w79Q7KbGOwSe0GzMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b2:ff:96:9f:4c:75:78:c7:1f:41:20:60:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Apr 17 14:00:59 2026 GMT
Not After : Apr 18 14:00:59 2026 GMT
Subject: CN=8febc0b00829a9137c5cf028c7d118e6ffa7f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:95:4b:68:40:95:9e:0b:4f:31:74:c5:88:
35:44:cc:65:55:87:d7:1d:d5:5c:86:60:30:11:16:
d7:d1:40:9b:6a:27:2f:8e:8e:6d:7e:56:b5:30:e3:
0c:be:65:d3:17:8c:c4:06:f3:83:81:38:b9:aa:bd:
48:9e:12:2e:5c:05:15:50:8d:78:6e:43:31:a1:af:
cc:e8:9c:fe:bb:6a:ad:62:08:fe:55:c1:42:df:f2:
42:b1:49:76:a4:38:80:1a:c0:76:2b:63:ec:fe:39:
30:55:e3:f8:b2:09:87:7c:78:5e:50:ef:0e:93:29:
32:4d:c4:74:9a:30:a2:a8:9a:cc:fe:6d:98:9e:23:
b6:48:f3:62:c8:64:9a:64:78:ba:8f:b7:f9:2a:06:
ca:bf:07:e3:0b:c4:7a:79:40:60:41:f8:1a:90:dd:
a7:cd:4f:4c:af:87:38:06:2c:fe:29:84:4b:fd:25:
71:de:fb:b8:56:c8:d9:ee:0b:2c:ea:51:69:dd:74:
f4:db:d9:eb:b4:57:29:67:43:11:2a:3e:a4:e0:79:
30:1e:16:5d:94:3b:dd:83:5e:ab:53:1c:55:95:c1:
ba:ec:46:f1:40:85:7f:09:8c:68:40:db:c7:9f:9c:
36:19:60:66:3f:43:fc:33:11:ae:1e:d5:e6:8c:17:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:C0:B0:08:29:A9:13:7C:5C:F0:28:C7:D1:18:E6:FF:A7:F9:A9
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:06:fe:fa:27:b6:e6:40:92:ef:03:fe:b4:1f:90:cf:4d:
2b:51:07:cd:49:42:2a:7d:85:51:a2:93:88:a3:15:be:46:ff:
67:cb:93:2d:db:1c:70:2c:92:b5:02:7a:98:82:d7:23:de:61:
c7:9e:38:60:7e:62:18:44:fc:b4:e6:07:43:23:12:1b:4d:6b:
74:fc:f2:a9:56:9d:16:14:af:74:59:6e:4d:57:54:e2:89:90:
7a:5e:7b:c8:32:57:9d:31:05:e4:4e:bc:a7:8b:da:e1:f2:bb:
df:42:7a:ce:84:74:de:d0:01:cb:6f:97:c7:82:44:de:df:1b:
2d:ab:be:17:9e:18:de:2f:b8:70:f8:01:07:91:1f:eb:3b:00:
e4:c3:3a:0d:13:b0:d0:2b:a2:a7:4e:58:ce:88:a8:bb:b2:47:
9f:b3:31:e3:b4:43:18:f4:c9:1c:02:38:18:da:4b:b3:aa:3f:
e1:ec:fd:b5:b1:cf:94:a6:0b:6d:75:80:78:52:60:f9:ea:58:
cb:c8:ae:28:ca:b8:6c:df:44:a4:8a:0d:02:51:32:73:b2:31:
c0:84:d5:13:d9:bd:ed:2b:57:cf:5e:ae:c3:71:aa:a7:9c:44:
df:ce:9a:f4:39:15:b2:10:a6:be:9e:0d:70:91:5a:c7:69:a3:
d2:62:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:36 2026 by rpki-client