Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: /ySqps6J/x74izJ+/cfKwjUOKPQ3mfra7NgJgkbFpgI=
Subject key identifier: 31:27:BC:27:FB:AD:8F:98:87:31:51:A8:36:DF:B8:7D:29:C9:3C:02
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019D9B879978F803B57985D73FA36F103FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: B2
Signing time: Fri 17 Apr 2026 13:00:48 +0000
Manifest this update: Fri 17 Apr 2026 13:00:48 +0000
Manifest next update: Sat 18 Apr 2026 13:00:48 +0000
Files and hashes: 1: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (hash: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=)
2: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: Z5Os7hCHYL+GWCOOQxNByI2Q+vdC4uQ/5ZbQVKjZaTE=)
3: f_h5E6BnhRd-F5Nslax9PssKqYk.roa (hash: cd0/Q/9MuVzO0nJdogPcWF9VeDcM1h1CGbjeHcWB02w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:99:78:f8:03:b5:79:85:d7:3f:a3:6f:10:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Apr 17 13:00:48 2026 GMT
Not After : Apr 18 13:00:48 2026 GMT
Subject: CN=3127bc27fbad8f98873151a836dfb87d29c93c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:7e:cc:d8:e5:d5:8c:12:8a:d3:58:8e:47:
ab:00:75:73:57:7e:cf:83:fa:68:83:9f:17:2b:15:
29:79:bb:59:7b:c5:2e:b6:a0:68:1b:b2:ec:44:d3:
87:90:67:ac:e4:87:cd:3f:23:d0:8b:a8:7b:62:5c:
45:93:af:40:e6:84:c8:78:cf:79:74:56:fe:3c:e2:
37:56:c5:66:61:82:38:60:7e:5c:b0:af:6e:91:89:
80:96:30:3a:02:ac:61:52:47:68:d5:b2:05:00:6a:
af:28:61:cd:0e:3e:4a:ec:02:04:3f:92:b9:ca:54:
f3:94:51:22:d9:69:53:61:46:39:78:77:4e:0f:88:
6b:7e:3c:66:42:44:d1:75:a8:2b:4d:04:4d:da:3a:
de:43:d9:ba:9e:0e:9f:17:c9:fe:3e:a7:7c:9d:85:
1a:79:c6:8f:33:4b:12:6e:0c:2a:c6:70:10:ba:b0:
46:13:f7:cc:de:ec:16:2a:cb:a0:f5:d3:df:ce:26:
ec:57:27:7f:42:aa:64:24:d0:df:b0:5a:36:3e:2d:
fe:5f:b9:fd:d6:e8:cc:67:7e:94:af:1a:f2:43:1f:
89:da:6a:dd:5b:1d:a4:29:1f:5b:28:fc:ad:20:ec:
21:50:f7:16:6b:a6:c2:1a:c7:49:cc:e5:af:19:ea:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:BC:27:FB:AD:8F:98:87:31:51:A8:36:DF:B8:7D:29:C9:3C:02
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:24:7c:4e:24:ef:5b:2d:2f:62:bf:00:a4:9b:eb:34:47:
16:09:c6:14:d2:d0:92:58:4c:64:ef:76:21:49:e2:30:14:39:
1f:d8:66:63:51:88:4a:d3:ef:a5:d7:33:11:fe:ab:93:de:2d:
17:54:b4:38:ba:cf:75:f2:bd:e0:07:06:b0:60:de:31:8f:e5:
e3:3e:d0:9e:db:f6:b5:44:ef:a4:c5:a7:af:79:70:8f:c6:4f:
72:dc:34:e2:0b:9a:2b:64:a3:55:bd:cc:62:87:ea:96:c6:30:
65:29:c4:f6:f5:9d:34:52:0b:63:d3:eb:7a:3c:d1:6d:d6:af:
38:3f:33:9f:63:7b:9a:60:66:22:6a:89:13:6e:07:42:f8:3e:
55:92:39:9d:fd:88:42:b8:3f:60:a2:37:d5:1c:df:c3:0e:0f:
36:8d:a4:17:84:cb:d2:d7:c5:ae:db:17:91:36:f0:e8:be:8b:
64:ab:21:89:38:64:5f:4f:a3:ad:6d:60:80:7b:d6:a0:9a:30:
d8:3f:22:54:9a:87:78:38:18:75:a1:2e:1f:a3:ed:75:3a:ee:
d9:8a:74:9d:aa:19:39:4e:7f:d4:3b:14:a2:65:1d:8d:e6:b4:
fa:62:b1:79:f6:a7:c9:0d:e3:87:0c:8d:10:41:85:34:ff:28:
49:3e:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:02 2026 by rpki-client