Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: oNmc/PN7iLxFRKf426hLIARxax6r0k8IasvKjWepeGI=
Subject key identifier: 6A:25:5C:32:D0:09:90:35:ED:EC:47:CC:59:93:AB:8E:1F:05:6B:A8
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019EC06DCD497600AA488691956CF78E4A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 03F9
Signing time: Sat 13 Jun 2026 10:01:21 +0000
Manifest this update: Sat 13 Jun 2026 10:01:21 +0000
Manifest next update: Sun 14 Jun 2026 10:01:21 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: tKXNdqy8pub/g1S6qdHLFPrqHWq8WGtItew61CSHHP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:cd:49:76:00:aa:48:86:91:95:6c:f7:8e:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jun 13 10:01:21 2026 GMT
Not After : Jun 14 10:01:21 2026 GMT
Subject: CN=6a255c32d0099035edec47cc5993ab8e1f056ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:4a:cd:b6:50:04:b4:dd:9e:e8:f7:39:6b:
7e:78:f8:6e:ae:e8:88:0b:6b:59:d1:fb:f2:cb:02:
5f:cf:8d:a6:48:4b:26:57:4a:3c:63:27:93:f3:16:
4e:fd:bd:36:bd:e2:2c:d2:0b:ed:8d:b5:27:8e:2f:
98:4a:ba:ab:4d:50:65:63:e3:a0:d3:f3:de:e6:cf:
b8:0c:7b:6e:72:17:52:ba:28:38:61:99:1c:39:57:
f5:8b:ec:f9:77:c8:84:3c:30:30:45:1d:6b:45:74:
61:48:2d:f2:30:7d:89:8d:36:dc:4b:86:da:9a:95:
7e:21:e2:84:ac:9a:14:26:9a:e1:97:8e:07:8d:85:
e0:3e:04:77:5d:e7:e6:22:e9:45:fe:36:f2:f7:97:
93:0d:4c:96:1b:19:e1:0b:c2:af:62:61:21:87:a4:
81:35:f1:0f:07:f7:39:a8:8b:e7:dc:74:68:b1:d3:
8a:81:f2:b3:dc:36:aa:d1:5c:70:80:48:a0:81:ab:
ab:fa:8e:a0:2b:4b:cc:9b:d1:83:a3:6f:7a:9b:d4:
9f:c8:0b:b6:67:65:03:59:d8:6c:92:79:74:1a:2a:
6d:d5:37:9f:ee:bc:5a:8e:85:ea:61:c2:37:c5:43:
bd:b4:4e:eb:11:35:b7:bc:73:e2:b2:fb:1c:4f:3b:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:5C:32:D0:09:90:35:ED:EC:47:CC:59:93:AB:8E:1F:05:6B:A8
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:fd:67:83:6e:85:94:fc:3c:fd:bd:a0:e4:d9:95:52:22:
57:e9:62:41:78:27:fe:0b:de:d7:98:cb:6f:f1:b3:05:1b:72:
d4:fc:be:b7:60:70:a4:c6:41:cf:5e:2b:16:7f:4b:00:7f:70:
5f:78:ab:f3:49:3b:7f:59:a8:c7:29:a3:cd:ec:8a:de:11:22:
6b:e8:29:64:55:09:22:65:76:f8:d5:57:b0:52:57:a6:24:7d:
ea:c2:87:ac:a7:aa:90:41:72:ef:87:c3:71:84:15:a7:29:a4:
81:2b:77:eb:c8:86:51:44:a2:4b:a9:91:cf:2b:24:bd:c8:bc:
64:65:34:5d:ff:53:6a:b1:79:a2:2d:ef:e1:b8:81:5c:b3:5c:
a9:cb:c1:67:34:59:b4:b3:5d:a8:8d:93:c9:0b:03:65:64:8b:
2a:39:ed:53:85:ff:c7:55:49:91:56:21:ab:5f:89:ff:b7:35:
6a:24:30:28:c2:bc:24:7f:8a:15:7e:b0:16:db:c7:3c:ec:31:
a8:9c:cd:49:07:b2:b0:b4:aa:da:e5:5a:60:51:2a:a1:c7:99:
6b:ac:26:4b:de:e7:98:fb:4b:aa:70:85:7b:3c:44:c3:44:15:
62:22:82:11:47:3d:7f:16:df:4b:17:0c:2c:d2:77:df:8a:73:
e4:bf:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:07 2026 by rpki-client