Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: VS/P/ysFiRznDzjc5YWNdPMs+jy/o70/qd1Yos9SFGE=
Subject key identifier: 5A:B8:1B:59:B8:52:70:61:A5:23:51:52:FA:C1:B5:73:73:C6:8D:67
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 01A0DD29F8C2661E1DE2F4F6F9BD7A1E5CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0511
Signing time: Sat 26 Sep 2026 10:01:50 +0000
Manifest this update: Sat 26 Sep 2026 10:01:50 +0000
Manifest next update: Sun 27 Sep 2026 10:01:50 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: XSO8RmOmB0WlYeUspRwZJchCTaCMp1xn4zSclw0NLjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:f8:c2:66:1e:1d:e2:f4:f6:f9:bd:7a:1e:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Sep 26 10:01:50 2026 GMT
Not After : Sep 27 10:01:50 2026 GMT
Subject: CN=5ab81b59b8527061a5235152fac1b57373c68d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:9c:10:97:7b:25:54:1a:7b:72:cd:93:d6:
85:f0:9b:9c:ad:f1:37:7b:22:1c:25:38:e3:ea:5a:
37:86:9b:df:e6:60:9e:0b:b6:e1:6d:1a:50:3c:6f:
b8:c0:6b:ba:ec:46:2b:5b:82:e1:d1:11:d9:4f:2a:
15:6c:33:a2:5a:26:74:b7:35:c8:96:95:0c:d9:7c:
73:49:49:2c:83:16:f2:0f:fb:65:af:3b:d9:6e:1d:
27:02:e1:7e:62:9f:f3:cf:0d:a6:ed:07:27:44:49:
1a:c0:90:d6:14:52:21:2d:bc:87:a8:7e:61:69:de:
b8:93:49:d7:32:d9:ad:d4:4a:20:4b:17:52:d4:e0:
54:b9:2b:f5:c3:f8:7a:7b:70:d2:23:8b:0b:e2:0e:
17:c0:13:be:b6:15:7d:63:fc:1b:c1:bc:a0:bd:7b:
71:e8:52:3b:ff:ad:fe:be:31:45:43:94:f0:96:43:
82:1d:21:6e:b9:cc:a7:1d:7a:29:a4:17:fc:05:cd:
2f:4f:7e:cb:7f:50:73:27:f4:b4:cd:21:45:b8:ac:
50:87:00:5d:73:d1:ed:35:c2:c5:71:99:6f:b4:d7:
97:ad:62:86:78:d1:b8:2e:5a:a4:96:fd:09:99:7e:
f2:22:7f:43:85:36:71:ae:c1:7e:ea:da:55:0f:06:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:1B:59:B8:52:70:61:A5:23:51:52:FA:C1:B5:73:73:C6:8D:67
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:3b:7b:42:4d:98:f7:77:82:fb:79:e9:3c:1b:7e:8c:dc:
97:06:ba:05:7b:5d:77:65:3d:d9:6b:dd:f2:99:dd:4a:db:4d:
49:b8:26:09:9b:8e:98:01:49:53:61:9b:2c:1e:3e:8c:e3:4a:
5b:9a:98:3a:12:28:1b:3b:3e:46:ca:b8:52:b5:75:fe:1d:58:
ae:94:f9:8f:d3:4f:c3:d7:a6:c4:6e:69:7a:fc:09:f4:7c:99:
8f:a5:0f:78:f5:99:29:93:23:56:57:f7:2a:bd:96:0b:ec:ed:
90:9a:a1:30:ad:c8:7c:c8:23:1d:cd:84:fb:3c:09:07:b7:9d:
c2:1a:c5:64:c5:07:27:27:99:39:df:dd:d6:d0:1a:fc:93:0a:
df:89:9e:f8:04:d5:0c:2f:52:1a:68:42:ec:c7:e6:c0:a0:72:
a8:3e:1e:22:ab:0a:ff:d8:44:18:e9:62:cf:02:a8:14:ea:64:
ea:50:66:e8:42:74:09:93:76:20:b7:e8:24:11:0b:61:15:d9:
e1:40:bd:a7:6b:11:c3:6b:6c:07:e3:6d:df:8b:15:60:77:e9:
77:48:9c:6d:ba:79:9c:47:f1:07:69:e6:35:77:e0:1c:d2:f1:
15:20:82:71:e2:8b:99:b4:fd:31:a7:a8:55:18:48:9d:09:d3:
8e:67:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:24:56 2026 by rpki-client