Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: jZQT3l3Vcj8mbDCr5GGJGNZg7FXQQPdkjgK6r5jH9qk=
Subject key identifier: A7:4D:F9:C3:F9:4F:51:49:11:61:A5:0A:7A:DB:6D:3B:34:56:F7:52
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019CACEB8838B13BE57014ED8D89C356A6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 133A
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: evhipYct3lElUY0UUlqsNQbD4lrvSO9rkByia1gJ8qs=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:88:38:b1:3b:e5:70:14:ed:8d:89:c3:56:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=a74df9c3f94f51491161a50a7adb6d3b3456f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:30:fd:ab:2e:59:91:3a:0f:d5:9c:6c:60:
7e:97:1a:f7:76:9b:f5:7c:f6:0a:97:08:6a:8a:49:
f8:6d:5b:56:c4:4a:14:00:e7:0d:e9:28:e6:da:17:
7b:45:18:a2:b3:c1:e1:d8:55:a1:e3:cb:e0:da:98:
7b:33:4e:f1:cc:84:7b:2a:f6:2e:b7:74:60:36:7a:
cb:05:15:2a:34:64:52:8a:b1:b6:26:c3:c6:a2:69:
e0:3d:11:0f:c9:91:c0:96:c3:da:e2:a6:d8:8e:17:
32:83:ed:62:d2:7e:d6:62:e3:6c:59:5f:14:d9:06:
31:41:72:cf:38:8a:f9:2c:67:ea:97:0b:b4:af:e1:
7b:88:23:40:b9:9e:2e:36:ac:03:05:d7:42:24:44:
37:92:bc:40:6a:b8:42:cc:b4:62:e2:08:ce:5b:16:
9d:e4:93:fb:59:89:50:b9:fa:90:25:66:3d:d5:4f:
1f:6e:2b:85:e2:1d:50:13:aa:a7:69:72:89:24:cc:
7f:1a:74:1c:42:2a:47:81:01:6e:78:fb:6d:57:fa:
47:58:6f:03:dd:b8:89:4b:81:3f:3d:b5:f0:18:ac:
ec:1f:90:38:61:55:3c:36:0e:9e:08:73:71:bd:49:
29:bd:28:59:7f:04:e5:ba:ec:1c:5c:2f:65:9c:42:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:F9:C3:F9:4F:51:49:11:61:A5:0A:7A:DB:6D:3B:34:56:F7:52
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:08:6b:4c:a8:e2:36:dd:02:ce:7d:08:ed:ab:3d:51:55:
bb:21:50:f7:1a:6f:f5:c5:08:0c:f9:3a:00:68:fd:3c:17:e8:
c1:03:41:ed:2c:b3:1f:8b:54:db:40:27:b7:9a:ba:c2:66:c7:
02:6b:5e:7e:2e:a3:9b:79:f6:0f:d1:ce:ac:0d:6c:67:8c:23:
45:12:60:a3:7e:ff:74:fb:61:29:54:02:95:0f:99:b1:de:6d:
23:e8:65:16:26:2f:85:67:90:0a:1c:ed:ea:b4:5b:d6:f9:5f:
73:53:a4:8a:b7:c2:31:78:ec:5c:ba:e7:ef:88:be:8f:fd:f9:
e1:65:b2:a8:7d:ba:6e:30:6e:12:ea:c2:54:54:ee:ec:41:c1:
51:5a:56:45:89:90:45:e3:60:ab:f0:8b:76:e6:a8:05:ee:65:
b0:1d:66:12:f7:50:ab:b1:8d:ee:e6:50:17:09:2c:4c:50:11:
04:36:6e:65:74:3f:28:f5:52:9c:46:55:0a:29:92:70:f9:bb:
21:15:32:fb:bc:6d:ec:3b:2d:f1:16:97:c3:d5:7f:f2:8a:26:
ba:52:0b:56:9e:b5:81:46:ff:4b:16:32:bc:f5:13:7e:02:9d:
47:0b:a4:05:f2:78:53:5f:88:8e:6b:1d:92:35:04:fc:ea:28:
d4:d3:0a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys64g4sTvlcBTtjYnDVqbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjYwMzAyMDUwMDQyWhcNMjYwMzAzMDUwMDQyWjAzMTEwLwYDVQQD
EyhhNzRkZjljM2Y5NGY1MTQ5MTE2MWE1MGE3YWRiNmQzYjM0NTZmNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAcw/asuWZE6D9WcbGB+lxr3dpv1
fPYKlwhqikn4bVtWxEoUAOcN6Sjm2hd7RRiis8Hh2FWh48vg2ph7M07xzIR7KvYu
t3RgNnrLBRUqNGRSirG2JsPGomngPREPyZHAlsPa4qbYjhcyg+1i0n7WYuNsWV8U
2QYxQXLPOIr5LGfqlwu0r+F7iCNAuZ4uNqwDBddCJEQ3krxAarhCzLRi4gjOWxad
5JP7WYlQufqQJWY91U8fbiuF4h1QE6qnaXKJJMx/GnQcQipHgQFuePttV/pHWG8D
3biJS4E/PbXwGKzsH5A4YVU8Ng6eCHNxvUkpvShZfwTluuwcXC9lnEKxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdN+cP5T1FJEWGlCnrbbTs0VvdSMB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTkIa0yo
4jbdAs59CO2rPVFVuyFQ9xpv9cUIDPk6AGj9PBfowQNB7SyzH4tU20Ant5q6wmbH
Amtefi6jm3n2D9HOrA1sZ4wjRRJgo37/dPthKVQClQ+Zsd5tI+hlFiYvhWeQChzt
6rRb1vlfc1OkirfCMXjsXLrn74i+j/354WWyqH26bjBuEurCVFTu7EHBUVpWRYmQ
ReNgq/CLduaoBe5lsB1mEvdQq7GN7uZQFwksTFARBDZuZXQ/KPVSnEZVCimScPm7
IRUy+7xt7Dst8RaXw9V/8oomulILVp61gUb/SxYyvPUTfgKdRwukBfJ4U1+Ijmsd
kjUE/Ooo1NMKcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:50 2026 by rpki-client