Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: Fb1hJbgJEICu6uhEEZEUQNBuzqh0c9z6sCvXRBahAJY=
Subject key identifier: DA:3D:FC:93:F3:55:F0:8F:7E:B2:2C:28:B0:A3:01:69:4D:40:83:E1
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019EC148DDB97579E4B43A84CD5F374897B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 017C
Signing time: Sat 13 Jun 2026 14:00:38 +0000
Manifest this update: Sat 13 Jun 2026 14:00:38 +0000
Manifest next update: Sun 14 Jun 2026 14:00:38 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: FUaa7e7bkty96MeG8CO8kPRKarXHXJ4ucSMJdsqjzkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:dd:b9:75:79:e4:b4:3a:84:cd:5f:37:48:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Jun 13 14:00:38 2026 GMT
Not After : Jun 14 14:00:38 2026 GMT
Subject: CN=da3dfc93f355f08f7eb22c28b0a301694d4083e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:14:3c:58:34:f5:e8:b0:9b:f0:1e:5a:40:
2d:99:48:9b:b6:d2:ab:c0:37:6a:cf:c6:34:33:ba:
cd:dd:a0:42:c8:08:41:1f:2c:0d:58:57:31:00:a9:
64:3c:1b:3c:5c:ef:52:55:64:da:e1:bd:8e:08:da:
0f:a4:14:ca:d2:cb:41:15:db:98:ce:f2:26:39:32:
f9:ed:7c:ed:7a:f0:e5:fe:e0:b7:2e:27:a7:db:a1:
61:10:36:3a:87:e6:65:e8:9e:f8:74:9b:89:0e:f6:
15:a6:84:ed:f9:e1:35:10:94:e3:b2:e6:55:85:61:
f9:a7:9c:7a:7e:82:c9:f5:7c:07:f9:a0:4d:0c:45:
bf:49:1a:69:67:3f:4a:26:bc:45:54:65:6a:8f:2a:
43:97:6d:0d:d9:bc:d3:aa:5f:10:4b:9a:56:cf:cc:
d8:42:80:42:50:05:24:b1:d3:35:d6:2b:45:ab:37:
2d:ef:e8:85:29:4d:f8:d2:89:0c:ae:4c:60:59:61:
99:0c:10:4c:c2:b9:07:a3:4a:f4:85:19:98:cc:15:
26:f0:b9:88:cb:69:ef:3e:17:fc:ac:ca:43:66:41:
23:80:e2:46:74:15:97:56:5a:ca:26:f7:d6:26:75:
c3:20:a6:6c:e4:c3:1a:7d:9e:54:b1:2f:e2:92:82:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:FC:93:F3:55:F0:8F:7E:B2:2C:28:B0:A3:01:69:4D:40:83:E1
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:1e:6a:b6:45:a1:0a:43:27:19:56:41:8a:b9:1c:5b:5c:
40:f0:03:77:92:b4:b6:cc:4b:2f:c2:26:21:80:6b:cf:b4:cd:
b5:e1:78:8a:f4:96:7a:81:5c:01:fa:c2:c6:9c:89:94:1e:d4:
ed:ba:2d:42:f9:19:40:f1:cf:b7:80:b8:7a:32:3b:b3:73:23:
41:3c:55:cd:39:1d:b1:f2:9d:55:bd:a8:4a:5f:a0:69:f8:48:
2d:2b:67:34:a4:a9:76:fe:45:60:4f:08:80:c0:d5:64:94:1f:
9b:e9:2d:fc:59:37:42:b3:07:00:0a:80:0c:d6:c8:67:60:52:
97:7a:97:8d:9f:f6:71:23:06:a4:22:ea:25:09:4b:fb:f4:cb:
19:15:2f:46:be:dc:e2:91:c5:17:e1:2c:1c:e7:93:19:02:c7:
f3:c6:00:a8:a5:55:4f:8a:51:5e:27:34:5c:3e:8e:04:8d:59:
2c:ed:5b:74:13:3b:1a:2d:0b:4f:53:a9:4a:70:1a:26:d7:37:
3a:1b:ea:de:33:7d:e0:21:b4:23:fa:dc:85:c9:1d:c5:5b:74:
d5:04:79:b6:b8:e7:c0:8c:7d:0c:c8:ab:d3:0b:ef:a6:55:65:
6e:3c:c6:6b:62:e3:e7:af:45:5a:d7:37:96:dc:34:48:75:d0:
3c:5f:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:45 2026 by rpki-client