Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: gnTODgoQ3JHv/6GMUFy4dk6yMVpjfCPLtcf62KWEA3o=
Subject key identifier: F7:99:18:6D:BA:28:AD:B0:49:CD:51:E2:F4:B1:FB:4A:3C:DE:F7:C8
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019D9DACC4E7F9B7EA8D333153B2E0FCCE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: E5
Signing time: Fri 17 Apr 2026 23:00:38 +0000
Manifest this update: Fri 17 Apr 2026 23:00:38 +0000
Manifest next update: Sat 18 Apr 2026 23:00:38 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: eadvhVsmYFKDyD9wqsZldWqMX/dBM7ddtn3Imwswkmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:c4:e7:f9:b7:ea:8d:33:31:53:b2:e0:fc:ce:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Apr 17 23:00:38 2026 GMT
Not After : Apr 18 23:00:38 2026 GMT
Subject: CN=f799186dba28adb049cd51e2f4b1fb4a3cdef7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:0c:ce:1e:03:16:1f:10:04:22:05:68:a5:
cb:20:49:5f:fe:b6:b2:4b:ab:63:9d:76:81:d5:a4:
69:14:6d:72:6c:47:aa:43:e7:2d:9b:e5:a8:51:e0:
ef:0e:00:9a:cc:44:b5:71:07:10:e7:dd:b7:4b:d6:
fd:c5:19:78:52:3e:f1:fa:b1:2c:f0:42:02:0c:09:
ad:85:c9:eb:a0:31:eb:fe:57:43:4c:2a:0a:7a:12:
9b:a6:14:17:e1:61:45:7c:fc:3b:a1:df:ea:43:e6:
30:70:1c:2c:57:77:7a:32:cd:c4:cf:97:5c:8b:01:
9d:39:f9:27:85:d9:af:9f:2b:f0:ea:28:18:ab:80:
4f:56:c8:28:a9:90:92:9e:42:2e:35:1f:e7:2d:ac:
19:02:ba:f4:8b:5d:8d:59:b8:ef:35:23:e5:26:d9:
4e:b6:9e:98:4b:6a:8b:44:92:db:21:93:41:0b:63:
0e:57:ee:c3:8c:8b:d9:83:ee:e5:39:76:2f:a9:5f:
de:88:e5:38:25:62:35:c8:b9:1a:5c:86:f0:60:43:
2a:f5:c5:12:09:fe:e3:ed:82:1d:00:06:a5:6a:73:
8d:24:03:ef:c7:ab:ea:4a:9e:35:39:f5:c7:62:13:
f8:5d:9a:0b:04:1a:7c:f5:f2:0f:8e:fb:d0:9f:51:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:99:18:6D:BA:28:AD:B0:49:CD:51:E2:F4:B1:FB:4A:3C:DE:F7:C8
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9c:bc:be:c8:d0:d8:88:0e:da:c1:50:9b:a0:6b:5e:0d:e9:
db:c3:c1:ed:f5:62:b4:45:76:51:7f:54:04:00:01:25:dd:7f:
8e:fd:59:fe:94:85:51:ab:7e:c6:5e:a7:91:5e:99:14:00:77:
78:c0:97:ca:86:dd:c5:bb:ab:e4:81:81:5b:f4:c2:13:bd:ab:
56:18:ae:7a:1e:6e:da:a7:96:1c:b6:f8:51:36:5d:f4:5e:c6:
f1:72:aa:36:7b:26:8a:f4:74:49:28:47:3a:ec:c2:34:35:ad:
f5:ff:dc:16:18:e0:bc:66:1b:23:33:83:20:d9:2d:43:5a:42:
92:a0:9e:3c:63:6f:0b:14:72:40:99:57:42:7d:e7:a1:ee:ee:
ea:f4:a2:66:e9:a2:bc:e2:fb:c8:c9:b5:90:f9:ea:c7:ad:c5:
64:77:ea:75:4f:01:66:3d:c7:f6:98:46:a4:d2:08:36:ee:46:
6f:6a:15:6d:08:42:1f:c9:9c:ba:cd:28:08:7a:81:f9:bc:b3:
9b:af:ff:6f:74:4e:df:84:41:44:49:4a:1d:13:7d:dd:cb:65:
23:49:24:92:ef:43:f1:9a:33:30:28:15:de:22:7d:fa:30:f7:
ee:9e:25:b6:a7:bd:23:0c:6d:b0:8c:74:20:71:2d:e1:c8:23:
ae:c6:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:56:57 2026 by rpki-client