Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: uoeHPodIURcxGRmyXf11P4yM5z1pFYbF1D8PauJW0GI=
Subject key identifier: 81:59:3B:2B:0B:55:F2:DF:78:7C:19:EE:D8:8C:D1:41:C8:46:19:52
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019D992B263CBC8E1B67A457D2C840369DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: A_68etnfks3PakbL9Hb45owYZ-w.roa (hash: 8UV8lYEu6iu3XIgtRfYywNlrJ6Qvyca/nSSa6hHK38E=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: Nvp5keYeP8GWGpP2DktGtcFRWvsyVfEadcb9HhBLdQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:26:3c:bc:8e:1b:67:a4:57:d2:c8:40:36:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=81593b2b0b55f2df787c19eed88cd141c8461952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:cb:b7:34:de:0b:73:0f:2c:ae:83:0b:e9:
61:29:b9:a0:31:e4:e9:b7:33:c1:9e:ac:4d:43:3b:
b4:14:5f:50:8d:0d:9e:8b:a4:ab:aa:cc:00:e3:6a:
00:39:26:41:56:c9:3d:d3:cd:81:9d:37:f4:20:74:
04:f4:3d:42:4f:3f:58:28:15:b5:ed:87:95:38:b7:
14:fe:e4:34:ba:48:db:85:fa:f9:21:bd:58:73:cf:
6d:f7:09:29:3d:05:e6:54:c9:5d:83:dd:49:e1:f0:
17:e6:0a:bd:00:52:ec:54:38:75:b8:78:20:64:76:
d8:97:ec:54:1c:d5:66:1e:c1:bf:e6:df:c5:b5:f4:
39:08:c6:ad:25:26:bc:24:6a:6a:5c:d8:d6:90:82:
3b:95:c4:49:6a:dd:c8:45:2b:47:2e:9f:1b:89:13:
d4:b6:a1:82:f9:0c:2f:e6:f2:87:3d:87:fa:bb:61:
ef:37:15:13:00:f8:22:56:0c:30:8d:41:c1:f8:9f:
a8:f6:a3:93:12:d9:6f:0d:dc:59:bb:5e:ce:37:ac:
53:26:74:2d:45:ac:1d:d8:ad:46:f0:e4:65:bc:c2:
b8:be:91:34:4e:db:7d:9e:d6:b2:48:93:13:8d:5e:
52:ea:0c:24:22:60:6e:24:c5:fa:d5:1b:7f:83:13:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:3B:2B:0B:55:F2:DF:78:7C:19:EE:D8:8C:D1:41:C8:46:19:52
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ce:04:13:14:24:54:fb:dd:ed:f9:cc:64:2e:96:b4:18:d1:
cc:45:0d:9e:bd:c1:4d:c0:cb:47:7b:73:b7:73:2b:dd:4a:32:
25:f7:d5:65:d1:41:a3:78:a9:cd:a0:22:b8:2a:76:73:3a:4c:
7d:60:3a:b8:6d:90:17:d8:aa:6c:00:c0:35:7e:3c:7c:04:63:
fd:62:70:ed:87:eb:c9:87:7c:b2:9e:cc:05:3d:02:4e:f0:f5:
8d:56:e4:99:6d:74:78:4e:ff:4b:b7:32:95:f5:09:d2:f0:0c:
64:31:69:3b:f1:3b:65:37:3d:38:76:d5:26:47:31:d4:3d:43:
e4:6e:b6:2a:0c:c8:7a:22:32:b1:c7:f3:79:49:2d:86:c8:84:
0e:22:8a:86:4a:6b:ca:70:89:03:c4:99:92:5f:ad:21:3f:32:
1c:55:00:96:e2:75:7f:3f:b4:4d:54:ae:6a:d6:27:d9:68:c4:
37:75:f4:b4:f9:c9:c2:2a:3d:06:94:6d:b8:e6:74:71:f5:6c:
7a:dd:7a:59:b8:9f:d8:da:dc:44:3c:4c:76:7a:df:24:95:4a:
d0:39:47:bd:84:75:f9:51:d6:2e:75:a7:f2:27:41:f7:f7:8f:
68:23:38:10:7d:68:3f:a5:96:53:e0:e3:18:2e:c9:29:c3:7e:
b6:e5:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:02 2026 by rpki-client