Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: n5on64MKQt9QUAEvjv2VcXFgWC3IoPbe/kzOL5PQP5o=
Subject key identifier: 7E:15:D1:3C:F4:FE:AD:B4:EE:F7:31:30:FA:D1:D1:1F:B6:A6:59:65
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019FAB63DE3AE2E9EFFCEAF4B91D9501E663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 01:01:16 +0000
Manifest this update: Wed 29 Jul 2026 01:01:16 +0000
Manifest next update: Thu 30 Jul 2026 01:01:16 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: hyW+0Ygurn/0yKNOM1oHe0CqgyIHDhQG1KkeFrjcO6k=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:de:3a:e2:e9:ef:fc:ea:f4:b9:1d:95:01:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jul 29 01:01:16 2026 GMT
Not After : Jul 30 01:01:16 2026 GMT
Subject: CN=7e15d13cf4feadb4eef73130fad1d11fb6a65965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:97:70:01:bf:f0:6d:e4:45:ee:9b:68:3f:
eb:d5:05:fd:39:c1:d4:ce:16:8e:39:9a:b9:c1:2e:
2b:50:5a:d2:d8:a0:b4:4c:d5:22:0d:72:e1:d8:ea:
34:4c:a4:36:7c:eb:5a:24:b7:90:8f:0f:f6:41:5a:
96:96:99:4b:6b:8f:c6:4e:b5:61:c3:3f:26:0f:89:
26:23:94:f7:30:08:25:fe:fd:cd:35:f9:a1:b9:85:
55:27:6f:22:45:1a:bb:03:6e:0d:bd:60:2e:42:c1:
55:a3:82:33:a0:88:0c:46:0f:da:00:09:73:69:65:
4a:7f:8b:41:68:37:1c:e8:0c:2f:6a:d9:70:ec:24:
f6:e1:16:bd:da:c2:c0:c7:1a:7d:2c:84:8a:2b:f9:
a4:e8:d8:43:d6:64:0a:03:5c:b0:2a:e4:e5:29:60:
c8:5f:49:5e:1f:bd:be:11:fd:6b:9a:f1:5a:8c:96:
86:37:79:9b:4f:b7:38:eb:e8:b3:58:8d:83:8f:76:
32:7f:02:1c:a8:44:12:cd:05:ac:31:b5:7c:3e:80:
49:ea:d9:54:71:6a:4f:71:27:41:73:ae:c1:b2:e6:
a0:a1:16:19:ff:d5:66:8c:ca:ae:46:d3:4f:f1:d2:
6a:ae:1b:62:d8:36:26:4b:8e:a8:94:f5:2e:8c:9f:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:D1:3C:F4:FE:AD:B4:EE:F7:31:30:FA:D1:D1:1F:B6:A6:59:65
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:e1:27:19:92:a0:5f:d2:75:56:37:fd:e8:0e:f0:ae:47:
a3:c3:82:33:6e:95:98:12:ac:cd:af:c8:e2:7f:e2:6c:4d:6b:
e4:fc:24:90:4a:bc:00:e7:48:bc:ee:fa:03:1b:10:e2:5e:ab:
44:29:b9:75:6c:02:25:3b:cf:34:ce:ea:3c:82:fe:09:72:c8:
16:ab:03:db:62:63:1d:95:ec:05:d7:d5:3f:9d:f4:8b:de:28:
1d:b7:b4:e6:ef:b9:01:6e:0c:48:1c:9a:0c:9c:2b:be:42:db:
c8:b2:eb:63:0d:1d:2f:f1:1f:ef:87:e9:af:c6:4d:da:be:89:
9f:0f:2b:d5:d1:75:08:5b:e5:fc:0e:dc:48:f2:e5:56:72:d0:
37:1f:b8:bf:37:32:a3:d0:19:2c:b9:12:db:3d:61:02:75:4a:
ff:fe:b1:55:91:3b:b5:5e:29:24:6a:82:7b:32:81:7a:5f:3a:
a0:c0:05:43:e3:c4:9b:09:d5:f3:bd:15:1f:55:6e:05:eb:34:
b3:f3:db:ef:1d:c7:fc:60:c1:51:b5:d5:69:80:b6:87:a4:51:
41:ec:f5:6d:6d:b0:9d:95:3f:25:f6:8a:79:89:ae:48:cc:73:
11:09:02:51:0c:6f:41:45:09:e9:1f:a0:09:d8:f1:b5:6b:fe:
40:e2:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:49 2026 by rpki-client