Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: lWadZffgm4ZTi3VQV1+NcGOdKXnbULI4OxqhU58q18A=
Subject key identifier: 3C:37:32:77:10:EB:34:62:DF:E1:94:39:08:AF:B6:70:32:7E:59:AB
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019D9A0764413CB376ABA176B2D6210B209A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:01:08 +0000
Manifest this update: Fri 17 Apr 2026 06:01:08 +0000
Manifest next update: Sat 18 Apr 2026 06:01:08 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: 9UOhJjp+eN2f6K7iFTlFK55/NUpjAgjkzJGNh6AbfiY=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
4: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (hash: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:64:41:3c:b3:76:ab:a1:76:b2:d6:21:0b:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Apr 17 06:01:08 2026 GMT
Not After : Apr 18 06:01:08 2026 GMT
Subject: CN=3c37327710eb3462dfe1943908afb670327e59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:19:7c:5c:67:c2:9b:5a:16:cd:b6:f3:50:
54:f3:aa:f1:08:06:b9:89:f6:0a:e6:1e:57:65:5c:
8a:e0:78:07:28:90:2a:35:3f:0a:02:68:e7:1f:d3:
93:46:21:1d:01:3a:dc:aa:26:d7:9c:f7:e8:e9:bd:
36:15:aa:8b:30:62:86:4e:20:be:07:b8:cf:14:42:
45:4c:5b:2f:fd:49:46:99:7e:a4:5f:39:27:cc:2b:
82:9f:40:c5:70:c2:e8:6b:6c:a8:a8:c5:d0:ac:d7:
91:eb:4c:5a:9d:bd:f4:ef:f2:54:c0:99:68:5f:d6:
36:da:65:d5:65:08:9b:c0:0a:c4:5a:5a:69:68:54:
86:fe:1d:44:b1:97:d8:7e:ac:d8:d8:0d:66:8c:d6:
b7:c7:97:5d:ee:06:f8:fa:57:7a:6a:a6:cb:df:43:
89:e9:78:e7:63:1a:4a:55:38:56:7d:b2:f9:fb:9c:
ad:d1:23:69:ff:ad:0d:7b:16:1f:27:84:bd:8b:ce:
7b:18:9f:f9:18:5d:c0:f5:29:02:42:4c:60:39:e4:
57:d6:5a:34:69:a5:6d:7f:f2:c6:a0:40:e2:6f:c4:
3b:5d:b9:17:88:07:48:ff:52:85:eb:03:2e:64:3a:
22:c6:a5:de:27:d9:8f:7d:8b:59:56:63:1f:72:30:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:32:77:10:EB:34:62:DF:E1:94:39:08:AF:B6:70:32:7E:59:AB
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:41:42:5e:54:9d:0d:41:b2:e8:f7:be:f4:11:03:2a:49:b3:
74:44:7a:90:db:4c:b6:2f:cc:5c:cd:ff:88:c0:2d:3c:2d:0f:
97:60:e8:b5:b2:4e:ad:74:44:bf:b3:a6:85:3c:89:9e:d7:7e:
2d:75:f2:90:d6:bd:aa:b5:c4:55:4d:a8:da:c9:8a:ea:a4:d5:
0a:cc:2c:41:ae:8d:43:a7:e8:bb:12:ec:42:56:bd:49:0c:76:
12:a7:58:26:57:6b:8e:bb:2c:36:58:b8:a8:8e:c2:95:30:60:
8b:c2:60:5c:63:47:96:ea:2c:fe:ce:bf:b3:21:8b:4d:50:26:
c6:95:30:1e:50:e2:01:e6:db:46:4c:6d:f9:dd:d3:02:ba:34:
26:7d:88:7a:8e:1e:3f:c2:83:05:59:5e:98:7e:95:54:ec:d7:
b7:1d:7d:25:e4:42:08:0c:25:23:a5:ed:b2:e2:d7:da:c0:49:
1e:17:1f:70:7a:a5:b3:15:71:1d:be:cf:16:7e:89:09:fd:e2:
08:1f:b1:d9:1a:71:30:15:98:38:31:3b:a2:cd:56:d7:be:cd:
1b:ea:8c:45:e5:2d:72:78:61:47:48:2d:03:ea:3a:e5:1a:db:
1a:cb:53:12:ee:7b:0f:fb:b7:06:01:fc:3a:2e:83:23:62:10:
9e:80:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:34 2026 by rpki-client