Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 19Yru9zIqFzuLzzcPkZ1ToZNWLvu5nFJvmkzVImWQNI=
Subject key identifier: DD:85:58:C1:BC:5C:6D:B8:7C:C7:39:2A:07:95:36:A8:60:7D:CE:0E
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019EC112476D4475B4E31B39FD2F52DEF63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 1006
Signing time: Sat 13 Jun 2026 13:01:01 +0000
Manifest this update: Sat 13 Jun 2026 13:01:01 +0000
Manifest next update: Sun 14 Jun 2026 13:01:01 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: OseO/qlKmIgKfNH7EILcezJszYwSLPB115IV3UEVy6U=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:47:6d:44:75:b4:e3:1b:39:fd:2f:52:de:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Jun 13 13:01:01 2026 GMT
Not After : Jun 14 13:01:01 2026 GMT
Subject: CN=dd8558c1bc5c6db87cc7392a079536a8607dce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:d3:f7:ae:c6:1e:a4:19:e9:77:79:e6:58:
33:83:ed:51:1a:6c:53:30:c0:4f:d0:c0:f2:7a:ee:
63:88:6a:d8:05:87:f1:d8:8a:b6:0f:92:7c:91:99:
46:28:93:5c:f5:29:7f:71:b4:2d:3b:4b:26:5a:5f:
3b:19:2f:e7:e3:53:54:9a:68:77:50:e6:7b:96:f7:
50:bf:6b:d8:be:4e:54:6a:6e:36:08:a3:e4:b7:4d:
07:2d:b4:db:32:ef:b1:ed:f0:22:07:c6:7e:77:1b:
29:74:38:df:1c:e1:f8:31:6d:5c:bf:bf:0d:2f:25:
38:fb:35:bc:3b:76:6b:4d:98:a5:0f:00:fe:61:98:
48:01:2d:d8:2b:ba:a3:2a:df:30:ae:8d:8b:4c:75:
cc:e4:4f:9c:df:dc:12:59:a7:0f:69:a9:d9:86:2a:
89:60:75:55:07:78:cd:5e:16:6c:be:9b:1a:31:f5:
01:4b:49:a0:86:97:8a:77:e6:00:b6:69:27:bf:bf:
8c:92:c9:fa:a6:ae:99:70:e9:97:b9:05:9c:56:37:
51:a2:6d:b0:a1:f9:34:35:65:76:86:fa:84:db:0a:
84:f0:e2:d7:7a:30:94:50:3a:94:7d:59:0f:d5:45:
5c:9b:b1:63:75:ab:72:82:09:8e:4a:85:97:87:42:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:58:C1:BC:5C:6D:B8:7C:C7:39:2A:07:95:36:A8:60:7D:CE:0E
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:c6:f4:89:04:86:5a:f7:3e:52:a7:e4:57:fd:aa:af:c1:
75:d5:2b:1d:55:7e:8c:8f:96:ed:f1:0b:70:41:5d:b6:2a:8c:
1b:06:ad:f3:79:e3:35:01:24:32:48:82:0e:f3:f4:3f:b3:6c:
50:59:c0:e6:d9:5c:22:7c:e6:e7:ff:c6:de:37:bb:07:e3:32:
6c:76:c7:f0:83:42:a3:ba:62:da:23:d1:18:80:5c:c9:ab:0f:
9f:92:a5:88:06:b8:69:61:c1:ed:b9:ec:9d:75:d3:a6:c4:55:
97:1c:6d:b4:8e:e2:a2:f7:d2:e9:c2:81:4d:84:ca:a2:d7:c8:
a2:63:00:94:4e:62:0f:57:7e:7d:22:e5:0b:44:20:1c:a7:e0:
38:d8:45:31:64:90:5f:79:70:3c:58:96:36:54:f4:ff:80:18:
33:59:06:f1:0d:00:8e:59:98:52:82:29:7a:56:f7:68:dd:41:
62:a3:2d:e6:23:88:88:c2:9b:83:fe:fd:ff:21:04:2a:a0:6e:
73:85:d1:29:8a:84:db:70:73:e5:3d:83:7b:0d:01:62:72:6a:
70:06:75:9d:14:97:98:65:de:43:d2:a3:5e:ad:df:5c:2a:ba:
dd:a8:87:80:37:c5:9b:0d:81:8d:93:48:03:47:d1:18:72:6e:
c0:e9:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:48 2026 by rpki-client