Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: QxcowklxaBcZEayCFajbc63+KiN7YaqJS7Ks1n7Ml2w=
Subject key identifier: 65:31:EE:83:FA:0D:17:A1:DE:0A:95:C9:66:68:5D:18:4B:3E:E3:60
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019EC3A4EB61B3B85EA233D64B132C713163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1960
Signing time: Sun 14 Jun 2026 01:00:25 +0000
Manifest this update: Sun 14 Jun 2026 01:00:25 +0000
Manifest next update: Mon 15 Jun 2026 01:00:25 +0000
Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: xQDJYdwyTgmoa4j2ZJmT7CK+cbfucuJE9HtMniXEFQM=)
3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:eb:61:b3:b8:5e:a2:33:d6:4b:13:2c:71:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jun 14 01:00:25 2026 GMT
Not After : Jun 15 01:00:25 2026 GMT
Subject: CN=6531ee83fa0d17a1de0a95c966685d184b3ee360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:ef:a3:11:93:3f:cf:71:a5:75:3a:b1:ad:
b8:77:10:38:94:f5:39:23:a6:5f:15:68:cd:90:da:
17:6b:e5:18:07:5d:92:09:39:53:19:26:53:92:af:
6e:a9:88:d2:5d:a1:cd:be:a3:7a:26:ac:52:42:f8:
01:f3:99:13:34:f3:7a:de:53:1d:6e:16:f3:02:50:
a4:8d:80:68:7c:ec:77:4a:37:dd:75:9e:47:09:17:
71:e6:66:17:42:6b:ae:1f:52:c0:11:99:45:ba:04:
e0:2e:ec:4c:c8:da:a5:d3:7f:40:26:ef:ee:90:91:
03:27:c8:d3:0a:cd:05:fd:0b:01:3e:79:85:29:4b:
9b:ec:2e:a7:9b:7a:e3:5a:06:0f:8d:a8:b9:b7:3e:
56:3f:db:62:ec:6e:b1:2a:bd:7c:c3:d7:ff:31:c0:
d4:eb:7b:0c:57:a3:c7:a9:48:0f:7d:35:af:99:59:
b3:28:38:c1:b6:90:02:6c:08:74:44:b8:fe:51:f1:
84:ba:54:2a:d4:c1:3b:4b:12:e3:e0:f1:94:45:89:
0b:d8:b7:b4:bd:5c:f0:f0:09:60:69:4e:d1:98:31:
1d:74:ac:8d:b0:b1:ad:41:8d:42:4f:3e:df:21:f3:
7e:fa:2a:a1:1e:ec:cf:b5:e0:88:f5:2f:6d:f7:b2:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:EE:83:FA:0D:17:A1:DE:0A:95:C9:66:68:5D:18:4B:3E:E3:60
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e1:06:3e:b4:c2:1c:3c:04:58:83:50:37:6f:5e:ac:08:7b:
67:94:1b:63:4d:ae:b6:d2:a9:a0:08:be:50:73:71:c7:2f:6e:
e7:ff:da:4f:d1:1d:48:5d:2b:89:b0:14:ae:2c:aa:ae:c5:6e:
6a:53:dd:fa:6a:78:a2:f0:7e:59:2c:2e:99:23:dc:e1:17:5e:
a6:32:cd:8a:e4:a6:8b:fc:44:62:d6:cf:cd:82:b4:cd:2f:6b:
ea:48:b2:f7:3a:5a:d9:7f:fe:b5:d4:8b:bc:51:d1:0d:90:71:
26:bf:de:39:10:86:1f:a6:c2:76:ee:2b:c5:55:28:39:ac:ad:
b1:c1:95:5d:8d:8c:53:06:fb:2c:7d:3c:63:2f:e8:29:b0:ca:
1c:f8:77:e4:b5:41:1b:8e:be:1c:b1:f5:c7:43:ae:b0:4b:19:
0b:59:c4:9c:96:a8:f1:b8:6b:a6:32:2e:74:91:19:33:42:3f:
b9:a9:32:af:60:2d:b1:7c:6e:b9:1e:52:64:a6:0b:ae:73:da:
e4:ff:59:b0:11:7f:3f:8f:7a:5d:53:4b:3f:4c:4d:e5:dc:c3:
de:a9:23:6b:a9:29:ed:f3:0b:c3:8c:a0:05:d5:53:9d:0b:51:
a2:4b:eb:3e:27:f2:68:9f:e8:81:6f:07:ab:7d:07:c4:11:b7:
69:5c:c9:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpOths7heojPWSxMscTFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3
ZTNjZDIwHhcNMjYwNjE0MDEwMDI1WhcNMjYwNjE1MDEwMDI1WjAzMTEwLwYDVQQD
Eyg2NTMxZWU4M2ZhMGQxN2ExZGUwYTk1Yzk2NjY4NWQxODRiM2VlMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/jvoxGTP89xpXU6sa24dxA4lPU5
I6ZfFWjNkNoXa+UYB12SCTlTGSZTkq9uqYjSXaHNvqN6JqxSQvgB85kTNPN63lMd
bhbzAlCkjYBofOx3SjfddZ5HCRdx5mYXQmuuH1LAEZlFugTgLuxMyNql039AJu/u
kJEDJ8jTCs0F/QsBPnmFKUub7C6nm3rjWgYPjai5tz5WP9ti7G6xKr18w9f/McDU
63sMV6PHqUgPfTWvmVmzKDjBtpACbAh0RLj+UfGEulQq1ME7SxLj4PGURYkL2Le0
vVzw8AlgaU7RmDEddKyNsLGtQY1CTz7fIfN++iqhHuzPteCI9S9t97K5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUx7oP6DReh3gqVyWZoXRhLPuNgMB8GA1UdIwQY
MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt
MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw
LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuEGPrTC
HDwEWINQN29erAh7Z5QbY02uttKpoAi+UHNxxy9u5//aT9EdSF0ribAUriyqrsVu
alPd+mp4ovB+WSwumSPc4RdepjLNiuSmi/xEYtbPzYK0zS9r6kiy9zpa2X/+tdSL
vFHRDZBxJr/eORCGH6bCdu4rxVUoOaytscGVXY2MUwb7LH08Yy/oKbDKHPh35LVB
G46+HLH1x0OusEsZC1nEnJao8bhrpjIudJEZM0I/uakyr2AtsXxuuR5SZKYLrnPa
5P9ZsBF/P496XVNLP0xN5dzD3qkja6kp7fMLw4ygBdVTnQtRokvrPifyaJ/ogW8H
q30HxBG3aVzJ2w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:43 2026 by rpki-client