Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
File: LAe_O3M6XDpx2cqMNiaUjfcScFs.mft (raw, json)
Hash identifier: sWv42lNceEB4paGNl6GaFC659BF2J2SdSf5qWo0Ch8g=
Subject key identifier: D0:25:EA:CF:89:9C:66:63:21:69:D3:15:9F:AA:A9:35:FA:CC:60:ED
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019D992B17CA7FA3A7D348757F76B1743E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa (hash: r2glHg/T+YpYXCIT8+l4YxupOX2jMrXd200bHTuRVAA=)
2: LAe_O3M6XDpx2cqMNiaUjfcScFs.crl (hash: BgE+uqbPdc4Sx51BvPwArY4CaMI7TiYWZ27eBEsM9Qk=)
3: SXH057UJKzS7rHzBDJcA4ENrOvM.roa (hash: xcKm9OrMnT6THeGkJMgEPYfZ1pZ8IIDbrRlbFdC0Bww=)
4: ajjWFLhMNU-QuF21tZ1GMQOJmmo.roa (hash: HwQXBdSljqHyOy0pToc7H06Y8W7GqL4m3uBiGpV22c4=)
5: gV4VLXSj2IUJNPNae7a1-Hp_ndM.roa (hash: Uq7Jqd/sYlFXHolWT8Wy6GorS9LHg2QdKs/fi6vrqEg=)
6: xBI2fXrHUQIZhQ-kfXWaR5nlvEs.roa (hash: BFgvI6ewznhWaVgNP//jYhzMWkTp4FaSi4q4AsoGCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:17:ca:7f:a3:a7:d3:48:75:7f:76:b1:74:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=d025eacf899c66632169d3159faaa935facc60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:0b:a3:fa:f7:84:2a:e6:e3:89:9f:87:da:
08:45:7b:77:45:af:3e:56:f7:f3:1e:a9:1e:3d:5d:
9b:48:7c:a3:5b:3f:f7:45:84:50:aa:ee:ce:a3:39:
22:9a:da:66:25:f1:37:45:24:39:df:e9:bf:97:b5:
ad:db:46:0d:fe:92:cf:b7:9f:40:cd:d2:3b:ef:c2:
f6:b5:69:99:89:6f:d4:22:7b:d5:aa:f8:b1:e3:4c:
e1:47:32:97:13:ba:f0:0a:0e:d4:49:97:e7:8c:ea:
ab:93:d7:f5:c9:2c:ef:72:eb:89:39:a8:d9:45:4b:
d8:8b:01:47:73:d6:34:5d:85:36:3c:9a:75:6f:d8:
d9:29:8d:82:2d:96:35:18:34:5d:58:52:49:60:18:
bf:3f:61:5d:10:2c:6e:4c:0c:76:43:08:a7:7e:bb:
55:37:45:f9:70:ef:20:53:fa:ee:26:df:51:97:c6:
77:56:e8:85:24:a1:58:87:fe:1f:c8:d7:51:d2:6d:
80:dd:51:ab:3c:90:31:de:fc:53:30:99:a0:80:24:
08:5e:69:5c:38:06:8c:e0:44:89:bc:d0:87:82:01:
ff:f1:03:6c:f0:15:28:09:71:af:3e:31:64:f3:05:
8c:b4:e7:eb:88:00:3a:14:8e:6e:69:41:64:ab:a5:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:EA:CF:89:9C:66:63:21:69:D3:15:9F:AA:A9:35:FA:CC:60:ED
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:b9:cc:ba:7f:e4:3c:13:5e:95:5a:e4:82:20:b8:39:36:
ea:55:80:fe:76:53:32:2c:66:e5:51:1f:6c:94:b9:8e:dd:aa:
b1:5e:f5:34:09:ce:bf:a2:11:a4:ff:68:09:af:80:a7:5a:cc:
ee:b5:41:0d:1e:49:bd:8d:5e:d3:f7:12:78:3d:cd:91:52:ef:
be:52:fc:b8:20:fc:56:bd:52:08:43:31:48:49:f5:85:eb:55:
49:ca:2d:e6:13:c1:ac:0b:e8:30:50:21:36:f2:a8:29:5e:f5:
e7:db:7e:0a:e0:2a:84:64:f7:a9:0f:4e:00:94:ff:ca:d3:4d:
1e:3f:91:61:13:76:5a:df:d4:48:fe:15:1f:1c:ca:6d:7d:a6:
a6:32:14:2f:6d:6b:ad:58:b8:c1:cc:00:1d:a8:a0:8c:cf:b2:
9c:38:c7:e0:53:25:8c:10:3a:07:6c:93:b8:9e:82:4c:6f:40:
4c:bd:23:0e:0e:0b:e5:ea:27:b8:6e:9e:a1:b7:68:d2:dd:ff:
97:52:60:88:08:6e:9b:19:25:27:78:a1:32:a8:24:68:a3:99:
0d:6a:f5:e6:31:44:46:34:6b:5e:76:f8:27:7d:1b:29:21:23:
e6:92:0c:4b:00:d1:cf:03:b6:35:72:6c:e8:75:ef:31:25:57:
5e:e9:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:26 2026 by rpki-client