Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: swqYvgggsXM/7X3B0PYFDEhHa27NqjCdRKPRctfmY+o=
Subject key identifier: 07:E8:2E:DE:15:76:CD:11:1A:FD:78:42:57:32:6C:A4:FA:F3:4F:ED
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019CAB6BD181B5BA5D3A6F5630A11C6231A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 02E5
Signing time: Sun 01 Mar 2026 22:01:35 +0000
Manifest this update: Sun 01 Mar 2026 22:01:35 +0000
Manifest next update: Mon 02 Mar 2026 22:01:35 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: Pad/J3fKyurlYWpK2vDANnHvHfWV0CilWC/6jlspzgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d1:81:b5:ba:5d:3a:6f:56:30:a1:1c:62:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Mar 1 22:01:35 2026 GMT
Not After : Mar 2 22:01:35 2026 GMT
Subject: CN=07e82ede1576cd111afd784257326ca4faf34fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:42:cf:d5:ea:cc:28:33:ba:44:86:12:b3:
fc:b9:92:f6:72:38:91:c2:8e:d1:77:b1:ee:5f:23:
10:43:d8:1f:10:dd:9a:a7:c0:ce:72:c0:16:f8:28:
fa:cf:db:7a:6d:94:86:46:6e:55:6a:d0:d8:ad:dd:
d8:93:5d:6f:48:ad:27:d0:d4:0e:75:75:fe:33:0c:
f8:1c:ad:11:74:7c:58:3b:48:44:56:31:76:5c:97:
99:eb:95:67:bf:b5:7c:01:df:ab:59:6c:ca:11:99:
e8:07:c6:9e:20:2b:ea:7e:ff:61:af:f0:a3:88:bd:
2e:e6:40:78:e1:51:9c:71:08:d9:81:2f:19:bd:db:
01:e2:c8:c0:59:c9:98:87:4c:31:ef:0e:75:b2:be:
9b:dd:1f:6f:3a:fa:e0:86:d6:7f:ea:3c:d0:77:76:
66:cc:b2:0d:36:42:ee:bd:fc:de:90:d1:ba:96:f7:
85:a8:a8:96:d4:bd:e1:64:a2:9b:25:4e:46:c4:52:
fe:8c:c5:c4:4e:a6:e6:48:db:e6:f3:90:fa:0a:bc:
c8:cb:46:0e:09:dc:45:26:ef:ec:1c:31:45:90:c0:
39:64:33:5a:1c:3c:dc:a8:04:cd:cc:f3:e1:0d:b8:
6c:01:4a:ab:8d:e3:6d:cd:e9:ec:5a:a5:bd:03:a5:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:2E:DE:15:76:CD:11:1A:FD:78:42:57:32:6C:A4:FA:F3:4F:ED
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:4a:32:ac:d7:e4:12:7e:04:9a:fc:de:51:06:d3:3f:94:
0e:8b:5a:8f:f6:48:5f:b5:e5:4d:6a:6d:77:57:e6:7a:09:17:
02:c2:cb:40:60:27:ab:26:64:f8:2f:6e:4e:d7:8b:f8:f1:2c:
38:95:0c:d9:ab:4b:ba:aa:43:3d:d6:ce:c8:52:e6:79:a0:00:
49:91:2c:86:50:21:4d:c2:63:96:63:6d:9c:d6:81:0a:a9:3c:
19:6b:48:7e:c8:d7:db:51:85:ca:e0:a8:c2:bb:77:85:1f:9e:
2a:11:41:5d:48:7f:e3:22:a7:9a:82:1b:02:7d:80:8c:d9:32:
ee:04:05:21:80:d9:c0:37:50:33:fb:9b:71:1c:7e:8c:3e:b9:
0b:b6:41:04:45:ae:8f:0f:ed:21:ad:91:c9:de:c2:7a:d4:63:
63:21:4f:bf:5c:23:2f:33:97:6e:e1:be:be:61:40:eb:ea:98:
af:83:a9:70:90:0f:09:2f:6a:0e:80:ba:a2:6a:8b:8e:bf:59:
97:8e:82:04:7a:76:5f:a3:13:7d:76:bf:56:47:d4:56:d1:4b:
22:dc:11:af:78:2a:d8:e5:8a:24:90:71:9d:37:14:8d:12:cc:
e5:ab:65:3e:8d:4b:4c:7c:06:fd:a5:2c:fb:4f:c7:e8:50:7b:
5f:c9:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:55 2026 by rpki-client