Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: MheLUGjex0++eK4TBlq33/8UDU3c8LcBVz5uh1dLKKQ=
Subject key identifier: D1:32:E0:AC:D3:71:93:90:77:C0:AA:5E:1D:EA:D0:ED:28:53:92:92
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019D9B87D8DFFB6F27FD880570396B28A4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0F6E
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: C3oGRaPqEyWqHS09gNHjks4EpHZ/KeKy6CC0B9QNMhU=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d8:df:fb:6f:27:fd:88:05:70:39:6b:28:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=d132e0acd371939077c0aa5e1dead0ed28539292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:39:4a:06:dd:38:c7:99:a6:f7:46:c8:ae:
15:f5:02:22:b2:df:5f:64:77:08:4e:61:d6:e0:10:
71:7e:e6:36:75:41:12:39:fb:69:53:ba:01:20:4f:
91:a8:4f:77:01:7f:73:de:d3:50:93:57:44:a8:f8:
98:b0:c9:ff:51:46:05:0e:59:9e:0a:28:0d:37:3e:
c6:d4:0d:18:84:a8:46:8a:77:c5:81:9d:a7:00:15:
94:94:e7:63:f6:54:c4:e0:60:4c:cd:9c:5a:8b:b6:
87:36:60:92:6d:9b:d9:ac:81:65:60:4a:c6:a5:97:
db:f7:f3:6a:39:0f:72:04:01:bf:6b:d2:2b:0f:ea:
d3:85:19:fb:ff:06:b6:cf:50:9a:3d:06:95:29:2b:
36:18:db:6f:4c:cb:4b:c3:c1:6b:f2:a4:89:2e:18:
ae:2f:cc:60:3e:60:74:55:cc:5f:34:93:52:c1:03:
7f:aa:4f:e2:c2:1a:13:e8:13:07:c9:6d:cc:b2:18:
f5:f9:94:15:41:4e:d6:ec:1e:bd:76:61:4a:e7:4d:
f9:2c:45:5f:9f:81:14:27:75:0d:1b:7a:70:55:23:
5b:6b:73:95:8d:0d:85:7a:a7:f1:eb:9e:7b:8f:02:
42:e1:9b:3e:a4:07:cb:0c:fc:c5:0f:0d:0b:98:9f:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:E0:AC:D3:71:93:90:77:C0:AA:5E:1D:EA:D0:ED:28:53:92:92
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:37:b6:d5:f7:86:b2:36:07:3b:be:e1:72:7b:56:cd:be:f1:
6a:b6:12:14:11:fb:c5:e5:06:c3:58:e7:2d:af:2c:d7:e4:a4:
38:bc:02:ca:12:a1:96:e2:e0:b7:2d:eb:13:2c:19:1e:1b:1b:
0e:bd:d6:63:29:38:cf:0b:20:2c:75:21:0d:64:6a:19:a5:88:
5f:2c:ae:53:1e:ae:78:83:6f:ff:b5:be:8e:3e:e1:1a:5a:3d:
4b:d2:6e:d4:ef:e3:84:9b:91:9e:43:50:2a:8c:f6:08:cb:23:
1b:1d:09:e3:cd:40:bf:8f:d1:02:a8:ad:92:fa:75:b6:04:41:
b0:a4:fb:92:98:f4:03:03:39:4e:aa:18:01:ce:a4:f9:1e:f9:
e7:3d:cf:7b:f4:33:71:75:58:a0:51:75:59:8f:5b:02:d5:d9:
b9:d3:65:e0:58:b8:f7:bc:68:d2:d4:f7:38:73:7b:9a:47:c4:
4e:06:3a:cb:ed:9b:8f:83:78:2e:3b:97:52:2d:b0:20:61:0b:
73:f1:05:a8:f0:97:21:6c:21:78:e1:b7:bc:03:6f:83:59:5c:
eb:35:78:8f:48:7e:54:fd:63:85:73:7a:f0:3f:fa:5e:86:60:
dc:34:8a:ae:58:9a:56:25:64:ab:45:61:be:d3:6c:98:f1:8d:
ae:2e:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:08 2026 by rpki-client