
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: fox68NuH2ln8sqEhI0RQBRN62y3cFBR64BdKkR4awx0=
Subject key identifier: 9A:A2:66:D3:5D:6E:59:8E:3B:BC:93:10:11:83:60:AB:4E:4A:59:57
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019EBF5B3C68B398CBC8E592A4AAF160AFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 017B
Signing time: Sat 13 Jun 2026 05:01:27 +0000
Manifest this update: Sat 13 Jun 2026 05:01:27 +0000
Manifest next update: Sun 14 Jun 2026 05:01:27 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: YytHpcNrHmyb85DT7Zd7oT7hWDeu8h1GkTWvDM6ixYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:3c:68:b3:98:cb:c8:e5:92:a4:aa:f1:60:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Jun 13 05:01:27 2026 GMT
Not After : Jun 14 05:01:27 2026 GMT
Subject: CN=9aa266d35d6e598e3bbc9310118360ab4e4a5957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:83:49:6d:40:2b:27:33:5c:77:47:4f:e5:
5b:85:32:f2:e8:fd:12:ee:f6:9f:13:b2:a2:c7:a1:
db:b9:97:34:db:c3:31:2b:7b:72:e4:89:5c:07:be:
72:c8:76:08:ec:9e:01:6d:d9:7b:cd:13:31:3c:eb:
8e:fa:07:84:73:09:bb:ae:ca:c7:0a:43:41:84:2c:
00:07:ca:c5:f5:51:4f:1a:30:57:00:07:32:02:ea:
25:1f:6b:34:44:c7:f2:bd:dd:24:d0:c5:c9:ab:09:
7c:9f:9e:19:cd:b3:7e:aa:48:15:5b:00:89:53:bb:
3d:34:e8:83:cc:8c:04:e3:d5:01:11:5a:49:8b:14:
7e:0f:b8:2b:3b:d9:a5:5d:9a:ba:68:58:6a:f2:0e:
5b:fb:0e:81:65:c7:06:26:e3:52:ba:99:27:c9:da:
25:b0:39:da:83:8b:d0:cb:f8:c8:62:76:5b:de:de:
69:0a:21:13:ac:74:ed:cf:02:a1:8e:9b:2a:72:31:
59:7e:43:6e:42:20:40:84:5b:68:24:fd:1c:99:b3:
08:ae:45:f2:45:90:e7:89:66:1c:d7:13:7a:55:ba:
b7:bb:37:67:ff:58:0c:b7:fd:bf:00:7d:4b:90:20:
5c:42:84:cd:a5:d0:ce:7c:be:8b:41:2f:e4:aa:56:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:66:D3:5D:6E:59:8E:3B:BC:93:10:11:83:60:AB:4E:4A:59:57
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:54:b2:e9:b2:50:16:94:ee:19:c8:72:3e:8b:91:94:0a:7d:
95:a4:08:d8:d9:ac:ce:d2:bf:30:73:b0:a9:66:9b:28:8f:fb:
4f:8e:d3:4f:bd:0d:8c:93:0b:0e:25:f5:39:e7:61:24:51:0f:
23:e3:e0:aa:8c:38:79:43:88:10:e3:46:5d:2a:fa:1b:4b:51:
87:0b:c2:35:e6:b7:d3:ed:39:c1:9a:e5:49:d9:9c:c5:42:c7:
4e:22:8e:36:c8:a0:8f:2f:2e:46:bd:07:b8:e4:3b:29:9c:f0:
82:6a:12:61:b4:b4:2e:42:d7:5a:8a:7c:05:c4:f0:f2:5c:c4:
38:bd:a4:81:57:f2:27:83:87:e5:cc:16:af:22:bd:bf:85:ec:
52:d4:1c:41:50:73:71:5e:93:76:20:7f:a0:1f:a3:12:15:9a:
5f:1c:35:0e:39:d6:41:76:b1:63:37:6f:77:f5:65:82:50:40:
dd:4e:ec:3f:2b:0a:02:e1:87:a2:0a:fb:e6:f0:c7:ea:7b:35:
ce:1f:f9:39:5d:5a:83:ba:84:47:2c:8c:cd:1c:1f:6c:22:99:
9f:fa:1c:8f:86:07:b0:77:ff:f7:ee:05:cb:c0:bc:e6:49:51:
88:06:5e:ea:f5:a9:f1:19:37:3e:7f:9c:9f:a0:d4:77:b4:43:
b6:f1:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:52 2026 by rpki-client