Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: bK5XSExX/cvC9uD0zgmMO2sLSpyA7fACrhq0vUDyGqE=
Subject key identifier: D2:D9:7C:9F:06:17:B6:B2:90:08:17:9F:9A:C7:02:B1:D2:C7:8B:48
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019D9AE34399C292ADED44EFC10A41422671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0361
Signing time: Fri 17 Apr 2026 10:01:18 +0000
Manifest this update: Fri 17 Apr 2026 10:01:18 +0000
Manifest next update: Sat 18 Apr 2026 10:01:18 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: V/rFmmMXSbOidf/lJ2BeACDHmkOIb0eJwgpoVD1Yy6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:43:99:c2:92:ad:ed:44:ef:c1:0a:41:42:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Apr 17 10:01:18 2026 GMT
Not After : Apr 18 10:01:18 2026 GMT
Subject: CN=d2d97c9f0617b6b29008179f9ac702b1d2c78b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:c0:31:48:fb:cb:e0:05:9c:db:66:50:57:
94:8d:d8:ab:07:33:eb:4a:48:99:bb:50:a6:0f:51:
10:3b:2d:25:79:82:32:7f:55:29:db:b4:10:f4:f6:
a6:c4:0b:7c:03:99:cc:be:22:23:78:75:9b:80:40:
5d:3a:75:6c:d1:db:37:dc:f6:dc:7c:40:57:2b:d0:
f3:62:7a:95:be:81:4c:f9:aa:7a:db:6d:db:30:4e:
ca:f8:4f:7b:9c:c2:b3:d1:ad:4d:23:52:6e:66:d5:
a2:a6:de:66:77:b1:e4:e8:9a:d5:a2:56:26:70:49:
12:e7:92:42:0d:ce:a4:12:69:5e:dc:da:6d:e3:80:
58:56:0f:40:91:5c:92:66:4b:f7:7e:7e:f3:c2:cf:
ef:45:2d:47:af:e7:a3:51:f3:6c:9c:22:d2:e8:2e:
04:f6:22:1a:12:98:62:43:d4:f5:ea:6d:1b:97:50:
1b:a5:be:a8:4e:15:9c:48:2c:f5:7d:eb:12:f7:3b:
72:ee:f7:8e:32:95:f7:bb:41:c0:4e:5c:53:2f:83:
1a:89:0f:ee:b8:34:2c:eb:ea:df:0e:35:bd:a5:5b:
b5:91:c3:7b:80:14:3b:c9:1e:33:a1:45:49:43:42:
84:ff:c7:db:b1:1d:2d:b9:16:06:a2:a6:fb:09:eb:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:7C:9F:06:17:B6:B2:90:08:17:9F:9A:C7:02:B1:D2:C7:8B:48
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:c6:ea:7a:fe:36:24:85:af:8c:1b:cc:c3:30:3f:c8:f6:
85:a8:40:b8:d8:19:17:e4:9c:69:68:c4:46:52:2a:24:d3:30:
fb:a4:fe:f7:3d:8c:2f:f3:5d:b1:6e:2e:c8:4e:0d:d9:d9:7d:
8a:6c:01:6e:bc:7a:db:43:26:c7:2f:99:49:c8:a0:df:a9:5e:
23:77:34:0d:48:40:14:62:fd:c8:6a:89:5a:59:47:c5:35:85:
70:56:74:26:4b:8f:0f:63:d5:b8:70:82:bc:5c:19:0f:26:7a:
91:ab:11:72:6f:87:ef:26:8b:ce:fa:dc:a0:75:b4:ba:f4:d8:
03:14:5b:9f:cd:61:46:f6:2b:3e:f9:cf:9f:3f:9f:bf:e2:80:
a8:98:8b:c4:c1:92:1b:34:1b:09:d3:12:55:1e:e8:63:09:60:
a9:aa:b3:6b:fb:10:fb:48:c2:c7:fd:e1:bd:49:31:dd:89:a1:
48:fc:b0:f7:4a:30:56:7d:7f:51:4b:80:28:7f:b6:04:c8:c8:
a8:c7:4d:62:b9:9e:f1:0a:ba:08:98:26:00:38:d3:b4:ca:c7:
7c:c3:0f:0b:9c:4a:b6:07:fd:7c:8c:0a:93:8a:d4:b3:f6:d2:
e9:08:d1:23:0d:d3:70:c9:2c:b1:2e:95:63:41:24:5c:70:22:
8c:18:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:12 2026 by rpki-client