Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 1IyO2bq4Hw4AC7HPiX24RlJpGrqo8UUTeQnwETKHRww=
Subject key identifier: A3:85:53:38:E8:93:19:2B:07:B3:0C:AF:B4:54:0B:19:61:8E:5D:DA
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019CAC10484F86F72D8EE8407D2D8AC6D3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0EF2
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: RMwu8OCux3pR23xTosJFPhdvH5bidfPZYiskxgaY8cE=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:48:4f:86:f7:2d:8e:e8:40:7d:2d:8a:c6:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=a3855338e893192b07b30cafb4540b19618e5dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:d5:6b:69:9f:1c:18:3c:bb:6c:b5:48:4c:
4e:71:06:46:50:13:81:13:65:d9:6d:18:2b:22:4e:
e7:e7:fb:8b:5e:6a:6d:ad:5a:05:31:9b:82:04:f1:
19:df:41:d6:54:70:1e:c5:a9:11:8e:cf:9a:53:4a:
f9:6f:40:d5:aa:57:4a:72:f2:44:db:48:3a:39:51:
3c:89:fb:58:76:3c:f6:00:8b:f1:1a:59:f9:73:de:
41:46:b1:85:b9:ba:63:f4:4b:5b:48:d2:c9:1a:84:
02:43:8c:49:96:b1:e6:3b:44:ff:a3:bd:1c:93:13:
f0:45:24:ea:a5:12:d1:31:eb:4b:2a:2c:87:94:bb:
2d:d5:78:15:59:5c:b6:05:45:3f:12:fc:f9:4d:c5:
a4:0c:be:e5:2a:63:e8:db:25:c3:1f:9d:08:ea:e6:
a3:53:a7:8d:6e:ed:8b:91:db:25:34:53:f8:24:9c:
c0:85:f7:b0:44:ee:52:b9:ba:d5:48:bb:ed:ba:29:
fd:d4:8d:29:9f:96:b2:db:a1:81:23:13:c8:bb:5a:
33:bc:ce:e4:db:d8:94:2f:64:84:31:91:48:c0:ea:
5c:b4:cd:e6:fa:de:ac:70:bd:19:5c:c4:68:39:45:
4f:74:02:c9:98:60:5d:31:cf:07:94:c3:05:2d:24:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:53:38:E8:93:19:2B:07:B3:0C:AF:B4:54:0B:19:61:8E:5D:DA
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:98:6c:ad:d2:0c:b9:56:15:9d:bf:cd:06:bd:2d:64:e2:96:
6f:5a:3c:b3:ab:96:9b:6c:f2:5b:21:0a:65:9c:c8:ac:3e:5e:
89:af:96:2e:50:26:77:7f:26:ad:28:da:6a:80:40:9d:5d:ff:
70:36:64:f1:a2:72:de:41:ee:3d:36:a1:2d:69:3f:77:2c:2a:
b6:54:1d:4d:8d:c7:16:18:3d:4e:f9:e4:1e:ab:95:1f:2b:f6:
c1:f5:eb:aa:27:5c:e6:da:df:ad:0a:6f:8d:a7:b7:a8:21:3f:
14:e3:8b:02:19:ef:f5:12:ad:f8:61:14:6b:03:b6:15:32:09:
a0:74:8f:28:38:9f:10:86:cf:68:d8:cc:2e:6a:f6:64:a5:c7:
8b:48:d7:69:28:5d:6f:65:d0:2c:c9:d6:e0:45:2a:a8:2f:fb:
00:4d:69:f2:64:e1:17:b1:1a:c5:45:90:22:22:08:d1:4b:61:
f8:70:d1:d9:e1:2f:de:18:6f:a9:49:7e:0d:e9:fe:bc:06:f9:
71:8b:05:f8:4b:34:92:90:da:c3:44:99:7a:7a:ce:93:06:c7:
02:13:30:42:12:7f:25:04:55:5c:73:9c:f4:49:e4:82:42:77:
c3:4b:a6:e8:cc:be:42:35:85:30:28:f1:87:10:e5:84:6d:a3:
9b:92:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:48 2026 by rpki-client