Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: aCQfiJDMWYDAjFkjW225OHHOlXBTVQnEnybsDh8hNkc=
Subject key identifier: A1:34:B1:51:17:D5:D8:BC:F1:F9:19:7D:51:E1:61:77:EF:23:4B:99
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019CAC7E253BCEB40412A321EA6A0063DD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: vLigbOjl8RfpSptaX/6cIQLEP+IHmgfWlKGPkYsEQRU=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
4: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (hash: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:25:3b:ce:b4:04:12:a3:21:ea:6a:00:63:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=a134b15117d5d8bcf1f9197d51e16177ef234b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:32:8e:ac:1e:a6:61:f0:11:f3:72:36:cc:
8e:32:eb:27:51:0a:80:5a:75:11:6e:52:15:87:59:
1f:ce:a6:7d:95:40:f6:ef:40:ac:1c:8b:ec:8b:6c:
be:90:8a:17:57:2f:1e:96:eb:3b:a6:ba:c9:55:b3:
65:35:69:af:e8:b8:60:c6:d2:e9:c0:14:8e:59:73:
f5:68:f6:49:1a:99:c3:a8:33:c0:63:84:f6:2d:81:
d2:0e:5a:8d:2a:73:d6:9f:bf:d9:10:b7:12:18:f3:
6e:9a:96:5b:c2:4b:53:7d:ae:ca:d5:28:58:93:18:
f6:b0:69:9d:48:08:37:7f:22:e1:36:ba:b3:3b:ff:
98:1d:04:cd:0e:5f:64:a2:d6:7e:47:07:60:25:5f:
d9:33:f3:c6:b2:9c:58:53:6a:d9:1d:80:b3:ea:61:
9d:6a:43:50:5c:fd:a0:4d:6f:93:44:d5:d3:bc:3a:
e9:19:b2:25:a3:60:4c:db:69:38:0e:0c:ba:21:9a:
40:5e:9b:d1:68:13:60:dc:f9:7a:b2:13:28:c4:15:
42:fd:46:0f:d2:9e:c4:06:72:fd:3a:d7:d2:2a:3c:
f3:28:a1:dc:a7:7e:63:d6:fd:61:54:40:ae:b8:ed:
bd:31:4c:82:c0:db:fa:79:55:98:49:24:8e:e3:2d:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:B1:51:17:D5:D8:BC:F1:F9:19:7D:51:E1:61:77:EF:23:4B:99
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:95:b0:9b:ca:24:f3:a0:f0:38:c2:14:a0:7c:1d:4d:73:
8f:6c:67:c5:33:d9:f7:cf:0b:18:54:b3:d3:f5:fe:3c:07:16:
32:39:0a:6b:05:ea:6b:ee:38:65:b7:88:f8:34:55:4f:00:07:
2c:75:f1:e7:93:2d:44:f9:11:cf:c2:5a:93:c5:25:28:84:04:
40:4e:62:8d:2f:07:9d:aa:42:f1:4d:8c:aa:0f:1f:01:05:05:
11:e4:11:0b:be:a0:ba:a7:9d:15:12:7f:b3:44:7d:4b:d3:71:
dd:b4:5d:22:f6:9f:16:a0:dd:40:f0:87:97:58:f0:59:a9:28:
ee:15:1c:54:39:60:12:bb:c9:ee:66:5a:3c:05:44:02:4c:90:
5b:50:1a:4a:98:29:17:51:a4:c6:17:c5:ce:e7:8a:6e:fd:6a:
2c:19:31:14:40:84:5c:05:41:27:ec:01:be:4f:9e:17:cf:58:
49:e8:43:5f:97:28:74:fb:77:68:dd:d9:b0:94:28:bf:6f:e2:
05:de:00:ce:9e:c5:57:de:19:a2:65:a7:a0:36:2f:ee:06:32:
9b:2f:05:30:33:8b:9b:dc:e0:2b:6c:02:5c:c0:9f:a3:11:bf:
4e:7f:91:68:ce:cd:e7:5c:23:b9:c7:b2:22:d9:29:e9:c2:0b:
38:40:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:09 2026 by rpki-client