Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: TxpZ82+gRyKhESeOR/meCk9dR91m6htla6ASBRuML4E=
Subject key identifier: 8B:C8:0D:5E:B6:E9:B1:4A:23:93:BA:16:C4:B3:80:43:D4:C2:7A:00
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 01A0C4EA09E316E9FA3CFF6D423FA908894E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 0287
Signing time: Mon 21 Sep 2026 17:01:07 +0000
Manifest this update: Mon 21 Sep 2026 17:01:07 +0000
Manifest next update: Tue 22 Sep 2026 17:01:07 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: Zlrsv8AZ+dg3YUpE1/peJiR9DkVZ6QGKn9deaDoLP0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ea:09:e3:16:e9:fa:3c:ff:6d:42:3f:a9:08:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Sep 21 17:01:07 2026 GMT
Not After : Sep 22 17:01:07 2026 GMT
Subject: CN=8bc80d5eb6e9b14a2393ba16c4b38043d4c27a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:50:a7:0a:c1:fc:42:f6:fe:90:65:1a:98:
78:fb:e3:f0:97:51:5e:ed:f5:75:47:ee:48:24:15:
ea:bc:14:9d:9f:2f:38:3b:0c:00:1a:d7:fa:be:bb:
f9:69:be:20:92:19:69:e5:94:7e:f9:5f:b9:a7:20:
ae:f7:e4:03:6d:13:e6:fb:ad:4e:21:74:c5:37:63:
15:49:20:4e:ae:f4:35:7d:2e:9b:ff:66:a8:ec:82:
7d:f0:1a:c8:74:d0:8c:de:cc:b3:b7:63:1b:6c:f3:
14:28:c5:5d:18:14:ed:65:9d:0f:ab:be:55:31:f9:
6a:00:d4:e5:09:61:45:90:76:e7:a2:59:7b:69:c9:
0e:64:3f:6b:2c:63:6e:27:0a:8a:b6:93:1c:17:23:
8f:7f:40:28:36:a2:d0:23:ef:13:c5:e5:75:a8:11:
06:f8:10:36:b2:2d:fa:ea:61:ef:f3:ad:78:d7:7f:
d2:54:c2:4c:a0:e6:6c:74:89:4a:d2:13:be:12:2c:
c1:43:47:e3:98:12:6a:7a:19:00:a5:7b:f5:07:a5:
3c:e4:e2:ee:2b:9e:1d:fe:79:d2:71:d1:e8:04:7d:
5c:5b:38:e6:56:6a:ca:43:dd:e9:9e:65:f9:f9:f4:
2b:fe:d8:d5:45:3d:64:76:c7:5b:54:e4:d4:5b:45:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:0D:5E:B6:E9:B1:4A:23:93:BA:16:C4:B3:80:43:D4:C2:7A:00
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:ed:d1:b7:2e:ad:c5:f4:3a:c6:10:66:69:ce:14:2b:a2:
0d:8e:f2:fa:1e:50:52:f0:dc:38:74:07:ea:cc:f1:76:de:fc:
b0:54:43:e4:c0:c3:37:ac:04:12:ea:b9:3d:c2:0d:b8:2c:b8:
10:d3:d4:67:f4:0e:ae:ab:3a:d5:13:53:ef:e1:14:4e:64:86:
d7:3d:0a:72:f4:d7:8d:21:5b:5b:65:05:fb:99:ab:b5:40:9e:
2e:f1:23:43:95:a4:18:02:c7:e1:b6:1c:fb:81:91:75:b4:50:
5c:3c:05:84:38:66:67:4c:3b:db:7b:d4:47:32:d9:d3:22:44:
a7:97:16:3c:f8:f1:01:b9:c1:62:d5:2c:d0:15:95:a9:a6:a7:
a9:88:0a:97:aa:18:ef:64:f1:97:50:9d:a2:39:5c:15:f8:a2:
4e:62:80:c8:03:59:98:2f:d0:33:3d:95:0f:6e:51:08:81:e6:
93:c9:56:e9:e8:84:84:f4:e1:af:f7:65:db:c5:76:87:01:29:
8c:52:70:1c:ff:f8:5d:3b:3b:cf:c1:da:e0:52:96:6c:03:59:
39:2c:ed:5b:de:9c:2d:d7:86:67:a7:29:8c:fc:07:fa:c4:81:
96:76:c2:bd:9a:0a:85:ca:23:ad:0a:75:50:09:20:7d:a7:05:
47:61:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:31 2026 by rpki-client