Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: tXImtlFljT6Cu/KVAgebWOl7rKW4CA6BKmTYUZFHJos=
Subject key identifier: FA:67:FB:EB:F2:BB:DF:0B:09:08:65:B1:42:F6:33:50:63:9F:88:6E
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019D9A7499E90A8352F884E3E4E2289B64B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 13B5
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: p0sSjeXMIi/727XzGhFd8Y8GMvtVNo+rutdvP15KlVY=)
2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:99:e9:0a:83:52:f8:84:e3:e4:e2:28:9b:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=fa67fbebf2bbdf0b090865b142f63350639f886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:20:fe:76:ce:e3:d4:4d:f0:79:bd:30:28:
e2:38:26:9c:c8:c4:61:ed:54:d0:f7:d7:3b:e4:a5:
54:f7:a5:69:d4:6c:9c:59:2d:dc:55:fc:e8:e5:08:
67:56:0a:d5:24:5f:bb:a1:48:ee:aa:85:3c:37:16:
42:d7:7b:5e:51:6b:84:44:76:00:c2:1e:34:e5:91:
55:30:7c:fd:51:96:4d:d7:de:b2:f3:9f:29:1a:9b:
1c:67:f4:c3:2e:1c:a0:15:18:3c:f0:dc:5f:8f:a2:
d7:ca:af:a6:1a:88:50:8c:42:2c:35:22:8a:a0:d1:
37:cb:e7:e4:c2:b2:18:4a:6a:8b:8c:ae:51:54:b4:
bc:6b:1c:56:27:f1:1f:92:76:81:12:18:2a:6b:d9:
c6:ee:68:3d:dd:5f:f4:fc:be:6d:4d:a0:dc:cd:d6:
87:a2:a7:97:41:40:be:4a:a0:0a:e7:21:fa:9e:2b:
80:01:8f:ac:d0:9e:16:a7:66:cc:dc:25:06:25:87:
68:7a:c0:17:04:b1:17:be:6b:3f:51:f5:35:88:8a:
02:9b:24:8c:8b:2e:20:ac:6f:11:95:8f:67:32:1d:
e6:a1:d8:fc:a3:81:4f:a3:cb:c5:b6:ab:32:e1:69:
af:d3:54:ec:4b:60:e4:e4:a7:f3:d6:e9:93:86:f4:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:FB:EB:F2:BB:DF:0B:09:08:65:B1:42:F6:33:50:63:9F:88:6E
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:9e:5e:06:21:84:21:dd:75:48:be:bb:d4:83:d9:91:df:
a3:93:db:18:2b:6f:64:9f:8c:38:15:75:5e:17:ab:a1:dc:ad:
2b:e3:e7:fd:9c:e3:5e:3e:10:1e:e2:76:e4:a6:69:6f:f4:c9:
26:1d:71:2d:d0:a2:ae:f0:fb:ea:ff:b7:ed:a9:1b:fb:42:dd:
55:63:96:12:7e:7c:9b:18:b5:5f:43:df:bc:4c:5b:2a:eb:ae:
e0:a6:6f:e8:31:76:2a:66:4d:ea:e3:75:16:ed:60:b6:14:99:
ab:12:65:31:08:28:41:be:a8:7d:08:4f:a6:e9:e1:c6:cc:ea:
4e:9d:0d:ee:76:ae:9d:7e:e3:43:cc:5c:fb:67:99:3f:ef:3d:
eb:ed:44:af:ba:42:6e:4d:0e:8e:4a:98:b7:8a:03:77:83:b3:
8f:df:f5:b3:85:f7:48:ff:b8:33:cb:b6:0a:50:86:f7:00:a3:
9c:ee:8e:06:3e:b9:20:79:21:8e:57:7c:41:45:81:65:22:04:
99:e2:6f:a3:a2:c5:e5:06:1c:8a:ce:57:91:c5:b9:b4:93:45:
01:35:77:72:86:12:50:1d:30:d2:75:18:03:d4:e2:73:64:16:
c1:af:c6:f9:3c:92:c3:b3:57:00:d8:2c:86:15:99:10:27:00:
a0:8d:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:52 2026 by rpki-client