Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: QgAO3S1+eUQ0H/OsV6M6aH5b5THtaN3t1QQEE8ECfww=
Subject key identifier: BD:5B:65:A3:F8:18:7D:8B:B8:1E:A7:99:A3:46:7F:9E:59:93:B7:9A
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019EC1B67F80411D6DB9A659E5D5E3798D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 16:00:23 +0000
Manifest this update: Sat 13 Jun 2026 16:00:23 +0000
Manifest next update: Sun 14 Jun 2026 16:00:23 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: fR7qY3YSy++MDymUbSDr6Mf0kUwwdth3UmquIfRQ9gU=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:7f:80:41:1d:6d:b9:a6:59:e5:d5:e3:79:8d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jun 13 16:00:23 2026 GMT
Not After : Jun 14 16:00:23 2026 GMT
Subject: CN=bd5b65a3f8187d8bb81ea799a3467f9e5993b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:ba:26:cb:2c:7a:e3:41:90:be:80:75:f7:
62:a8:6e:1e:cf:3e:70:d0:9e:b0:61:03:fb:af:25:
47:fc:90:ae:0d:df:ca:ba:73:87:5e:fb:09:3a:87:
c1:9d:2c:18:a4:88:8c:d2:4b:b6:d4:75:74:c6:ce:
8e:dc:f5:f8:07:01:e9:4e:27:2b:10:f5:9b:71:e9:
ac:bc:93:f3:34:f1:cc:d7:ac:9d:f0:fb:63:c4:34:
53:f1:28:e2:cc:9c:9b:3b:8f:61:2a:f5:bc:7e:a0:
6f:fd:33:13:f9:40:02:60:26:59:23:b9:27:e6:72:
76:b3:f4:22:0c:81:0f:8e:30:04:c9:61:4d:b7:d2:
15:6e:70:24:ef:d0:5f:bf:f4:c0:2f:4e:2a:1c:a9:
2f:62:9c:d0:e0:b1:8d:d1:44:14:d7:d9:c7:a7:9e:
32:6e:79:ee:4c:98:5f:14:5e:79:7c:fe:6c:c7:d5:
73:c8:c1:01:77:c3:55:e2:2c:87:e8:9a:15:00:38:
26:88:39:a2:12:c9:05:69:a2:2f:5b:b2:26:49:ed:
65:fe:83:2e:88:89:da:62:a8:f9:c5:8b:69:d8:82:
1b:36:07:49:a8:7e:26:4d:fb:e6:23:49:40:89:17:
b4:c1:a7:46:04:9a:23:d7:62:0b:5f:6f:78:5e:b1:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:65:A3:F8:18:7D:8B:B8:1E:A7:99:A3:46:7F:9E:59:93:B7:9A
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4a:95:1e:df:36:01:08:93:d5:53:93:72:cf:10:db:e3:31:
27:fe:d7:1c:99:50:fb:1d:91:80:7f:ff:a9:fa:48:0e:a1:9d:
fe:19:17:35:d1:be:1c:84:ae:b8:89:3b:8a:16:3c:9d:fb:78:
18:ee:e3:6a:5f:fe:e1:92:52:44:80:13:b8:b0:a3:2e:0f:fb:
c3:3d:0f:9e:9e:59:33:66:bb:41:b3:fb:37:24:c8:d8:4d:2e:
b3:71:17:92:f0:c3:88:e1:25:86:90:3f:c0:9a:5c:07:ce:17:
24:5c:aa:be:2f:9c:d7:76:27:7a:09:2d:1e:1a:f5:d0:83:28:
7e:f1:d6:fb:c3:70:99:60:95:aa:27:ac:f6:73:74:dd:b9:f8:
36:10:2f:9b:43:e2:c0:49:a4:3b:78:cd:a1:9e:6f:a0:c9:b3:
cc:b0:bb:bc:17:9f:d6:c5:f3:90:f7:e7:15:b4:2f:33:62:ad:
e9:1c:9c:03:be:77:d6:37:88:8f:ff:35:9b:b2:73:df:d7:ef:
ca:1f:4d:ed:f4:fb:b9:b1:f6:64:6a:b3:65:31:88:4d:2e:39:
2b:86:34:ab:e7:02:01:0f:5a:0c:a4:32:8a:2f:8f:f2:64:4c:
0c:a1:b5:14:9d:74:22:0d:0b:76:41:27:b6:4f:e7:27:7c:95:
25:e3:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:36 2026 by rpki-client