Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: 8wk3nNDX6R7thvnQROJfU6suQOPHLgOagrZm4SyeDvI=
Subject key identifier: A3:BA:C7:74:A3:E4:CB:34:53:D6:E5:96:3F:6E:76:E2:CE:70:F7:DE
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019CAE6BD37A5F10413D29B609FB3A33DB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: 34
Signing time: Mon 02 Mar 2026 12:00:27 +0000
Manifest this update: Mon 02 Mar 2026 12:00:27 +0000
Manifest next update: Tue 03 Mar 2026 12:00:27 +0000
Files and hashes: 1: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (hash: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=)
2: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: GOPPCUrmT4SA1eNri0CRSupSwtQdR9qqjgTjhEY+ZPc=)
3: aXQLtcOwVN8fpurjCOFqsqSeizE.roa (hash: pI93Daua5V7da7QmDH9DHnKxunq64cV74XwDIWCy4RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:d3:7a:5f:10:41:3d:29:b6:09:fb:3a:33:db:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Mar 2 12:00:27 2026 GMT
Not After : Mar 3 12:00:27 2026 GMT
Subject: CN=a3bac774a3e4cb3453d6e5963f6e76e2ce70f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:3e:41:33:0d:f8:95:64:72:cc:e2:d7:43:
b7:52:97:ed:42:fa:d8:46:aa:44:c8:ec:f6:c3:d5:
bd:0d:f7:3f:0f:77:ba:fa:49:55:a2:9b:b1:00:f3:
a5:f7:c4:fd:94:66:86:54:35:53:62:6d:b3:65:21:
69:82:9f:1b:8b:5e:a3:00:85:ae:5d:c3:fb:c9:dc:
df:a9:e7:99:1a:dc:50:58:35:92:9a:6b:68:c9:13:
fe:7d:3f:60:1b:73:f2:2d:6b:31:90:bf:92:05:93:
28:71:3a:b2:4d:1d:9e:91:45:37:f4:41:5f:8b:76:
45:7e:ed:95:fd:04:3d:3a:51:4e:0b:48:d7:da:1b:
37:87:db:31:e4:7d:f2:17:18:eb:c8:a5:a6:29:9b:
fe:24:76:75:6f:b8:d2:99:e7:77:51:1a:71:c0:37:
a7:5e:14:55:5d:79:ea:f3:ed:76:16:ba:74:ec:cf:
7d:0c:cf:8a:1c:14:ac:e3:30:25:9a:0d:63:dc:ca:
4b:e9:c4:93:b1:ac:9f:f7:63:5e:51:f9:cf:10:ce:
79:53:ed:c6:27:4e:7f:9e:d2:48:06:d3:82:93:46:
4b:c4:08:b3:79:ad:5c:c4:55:b7:bc:77:72:95:89:
06:34:d5:c0:38:fe:de:00:cc:8b:5a:0e:5e:30:16:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:C7:74:A3:E4:CB:34:53:D6:E5:96:3F:6E:76:E2:CE:70:F7:DE
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0d:5e:83:93:46:44:a9:3a:80:ed:3f:aa:0e:c7:00:fe:26:
83:cd:97:e3:16:34:92:c5:12:0e:d9:2a:80:db:8d:5c:1b:d9:
f6:07:ff:28:9a:09:32:2f:46:00:5a:b1:9c:29:fb:41:a0:69:
49:d1:00:38:02:1a:45:2a:f8:99:ec:b0:c0:7b:53:4f:84:63:
55:85:86:81:b5:d8:cd:90:44:ef:b1:76:40:47:dd:7b:1a:1f:
59:f0:d2:a8:c6:f3:6d:6a:17:22:09:ba:6d:f6:08:b4:9f:e5:
06:b4:93:4e:5c:20:29:5b:29:fa:2c:54:a8:25:c5:df:b5:e7:
5f:95:3a:fc:ca:8b:81:01:d2:34:b4:a3:67:86:4d:cc:11:e5:
6e:d6:50:2e:24:50:ee:4e:da:e0:e0:33:99:fa:ca:8b:11:d7:
84:10:76:2e:73:db:17:35:6b:ae:79:3f:b2:e2:b4:d4:c5:34:
87:26:a3:7f:3d:05:bc:2e:13:3f:f6:23:47:fe:ee:57:ce:52:
26:d2:25:17:c0:2b:b0:08:7b:d0:aa:57:40:4e:f4:bf:16:89:
b0:50:51:27:e8:98:b5:8c:43:df:f0:51:8b:34:6d:e3:53:06:
1f:b5:28:c6:a3:1b:90:f0:c7:70:f1:20:a9:23:35:a1:68:a2:
65:e8:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:43 2026 by rpki-client