Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: MRw41CqQ+c7tM/6FaxHskVJZBVq/HkAMr4eHZeJRL4o=
Subject key identifier: 9B:19:AE:6C:DE:47:CD:B7:57:1F:B9:CE:76:51:18:4E:E6:DB:5A:0C
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01A0E81CC41010FC24A62EC39098BB22B6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 13:03:14 +0000
Manifest this update: Mon 28 Sep 2026 13:03:14 +0000
Manifest next update: Tue 29 Sep 2026 13:03:14 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: WLQohSbGHknirRCBvxFjYvuDtav2RKcks1bZ0mSB23g=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:c4:10:10:fc:24:a6:2e:c3:90:98:bb:22:b6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Sep 28 13:03:14 2026 GMT
Not After : Sep 29 13:03:14 2026 GMT
Subject: CN=9b19ae6cde47cdb7571fb9ce7651184ee6db5a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:ed:cf:04:80:2b:b7:39:2d:f3:80:3b:9c:
72:ab:4b:0f:83:71:68:f5:d8:25:c4:d6:f6:0f:eb:
fa:f7:22:21:ed:29:5c:bc:aa:36:88:40:db:e9:14:
49:1c:79:c3:36:6a:d9:51:cb:db:b5:fd:ca:fb:c5:
08:ab:8d:9a:bb:a2:cc:0d:d8:fb:4b:a6:a9:9a:91:
47:65:61:47:4e:26:ab:d3:ae:a7:9a:42:7a:8c:7c:
25:f8:89:75:4e:f9:34:11:f4:93:ca:92:00:d6:22:
29:cc:75:99:17:4b:26:c3:20:9e:e2:7b:ac:84:36:
49:01:ff:01:11:91:90:93:7e:3a:b6:77:f1:15:bf:
f0:7c:a2:ca:40:55:b7:61:6b:4b:1b:3d:89:4e:bc:
1e:ae:95:6a:43:b7:a1:4e:cd:c4:85:93:31:d7:59:
3f:a2:bb:c9:9c:d3:d7:37:ba:5f:5d:a3:44:91:40:
11:85:07:51:4a:99:e1:a6:74:6f:0b:38:80:18:db:
8f:82:24:b0:c9:b9:29:41:74:d1:34:ef:3e:2d:fb:
ea:db:67:b3:7f:77:ba:89:61:68:d6:e1:aa:78:43:
cc:32:ea:11:d8:36:a1:ba:5a:7d:16:e5:54:f4:5c:
b6:a6:3e:81:d0:01:1e:d0:e4:d0:47:da:62:e5:7a:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:AE:6C:DE:47:CD:B7:57:1F:B9:CE:76:51:18:4E:E6:DB:5A:0C
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:f7:49:e2:ba:6c:94:18:8b:52:b6:f7:4e:0e:3c:ac:3f:
d6:66:64:3e:a7:74:aa:52:b3:ed:7f:ea:f9:ff:c3:f9:92:71:
3f:55:13:c9:f6:06:a7:91:d9:29:62:80:cf:e7:aa:90:5d:d3:
02:97:8d:72:18:df:63:64:b2:8f:12:62:4b:8e:78:bc:c4:3c:
3a:6e:5c:0d:18:e7:24:77:c2:fc:54:45:b5:46:56:14:54:2a:
89:3d:ac:fe:27:88:7d:2f:a9:8d:9f:ab:e7:29:b4:75:92:0c:
c9:1b:8a:19:84:59:ce:52:2c:5e:e6:b2:d2:e4:77:9f:57:d6:
c0:68:bb:66:56:0b:d2:fe:92:d9:27:2b:9e:b2:6a:48:1c:52:
e3:48:7f:38:d6:52:05:74:21:eb:25:a8:48:b9:b4:2e:6e:e5:
f9:12:c1:b8:b4:ad:fe:b6:d0:7c:9c:03:64:19:f8:f0:ad:f0:
4e:a1:31:14:cf:81:45:b2:2f:0d:22:ae:4e:a5:82:4e:0f:a7:
9c:24:31:5f:89:c9:8c:97:10:4b:32:d0:f2:b3:ac:6c:a8:3e:
2d:0e:b7:39:2a:34:2f:2d:da:2b:27:d4:9e:da:3d:40:5f:6e:
0b:14:98:ba:70:9e:4b:50:bd:26:91:fd:f0:3e:cb:f7:d6:0d:
a3:5f:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:54:47 2026 by rpki-client