Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: PJCRdYEAHmpmBzI6hAzSw+r1LiV3y1pl98s7ZLN70QI=
Subject key identifier: 2A:53:C3:55:C8:5D:2C:32:97:A6:D7:D8:27:34:E9:39:BA:44:A4:D0
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019EBF5ACAB0DF434165558BFA78E7824703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:00:58 +0000
Manifest this update: Sat 13 Jun 2026 05:00:58 +0000
Manifest next update: Sun 14 Jun 2026 05:00:58 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: nm45tZa6MA1xXu/gOejorf6rSyprcb2hJnVaI5L2HBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ca:b0:df:43:41:65:55:8b:fa:78:e7:82:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jun 13 05:00:58 2026 GMT
Not After : Jun 14 05:00:58 2026 GMT
Subject: CN=2a53c355c85d2c3297a6d7d82734e939ba44a4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:3a:d4:cf:6d:70:61:35:42:7f:4b:27:43:
75:d8:6d:6a:7b:d1:66:76:90:a9:9e:51:8b:80:57:
9a:07:9e:ed:50:31:5c:71:48:70:0a:1f:1e:59:b3:
66:6c:8a:a8:fc:bd:6d:81:b5:1a:c8:3a:11:6c:b4:
e5:64:13:9d:43:d6:6b:13:d9:1b:ed:04:cb:dc:31:
61:34:e5:56:64:e1:5f:59:48:a1:e2:df:74:c6:90:
41:75:14:4a:d6:9c:19:58:8d:26:73:c9:b2:24:13:
15:6a:d1:f4:4b:88:b6:82:b6:50:4e:27:cf:7f:fd:
e8:26:87:2b:f0:5d:9b:e0:ab:cb:53:06:33:18:b2:
75:aa:24:f4:c0:83:c9:9b:2d:2c:1b:d3:69:e2:9c:
e2:96:3c:1f:97:21:e2:83:97:d7:08:50:24:e8:2e:
cc:0d:a8:d2:c4:c8:df:a5:af:2b:84:36:15:b0:46:
38:db:f5:bf:17:73:db:b2:a5:a0:a1:f4:b1:3b:3b:
6d:29:bd:10:88:a8:f3:28:50:5f:34:21:cb:83:89:
77:c4:fc:4d:15:d6:c6:86:b6:6e:fc:04:6a:ce:0a:
83:5f:c3:ad:39:c3:97:37:72:a9:57:6c:af:e9:c3:
1e:5f:07:0c:14:d3:7a:6d:4e:73:a5:8a:55:c7:56:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:C3:55:C8:5D:2C:32:97:A6:D7:D8:27:34:E9:39:BA:44:A4:D0
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:f0:e7:52:3b:84:95:a3:97:4a:dc:e3:ab:f6:74:6a:40:
d7:f1:a4:31:20:bd:52:8f:b0:62:5e:01:08:ab:2c:60:a7:68:
d7:7b:40:b3:9a:a8:cd:61:3d:df:90:89:0f:7b:ae:22:fc:dc:
dc:88:27:67:78:8a:c8:a7:d5:d2:38:de:9c:c4:ff:29:92:67:
fd:ee:49:fb:81:7a:c7:69:0b:67:90:7b:43:b8:c1:de:5d:51:
7f:7f:d5:b8:88:0d:c2:e4:da:67:59:d3:87:00:cc:a2:08:08:
dd:0e:de:73:4c:a0:5e:5b:c6:8c:5b:e5:00:cc:48:51:64:af:
2a:2a:36:56:58:15:54:7f:7b:cc:1e:9c:31:28:3a:22:fe:04:
54:4f:6b:f8:dc:1b:6d:2e:d6:33:dd:e9:ba:41:c5:e4:6d:9f:
86:9e:88:d9:5b:30:8b:c8:8a:bb:91:4c:dc:4a:39:27:2e:07:
4d:fe:6a:96:e5:dd:be:c0:7e:0d:40:02:99:2f:5d:14:eb:f6:
da:c5:4b:8c:af:85:e6:71:90:a0:7e:2d:3c:a7:e9:f7:30:01:
75:d9:f3:12:4b:6e:ae:4e:4d:14:4b:3e:3d:fd:04:88:10:9a:
b3:bd:74:f4:30:24:f3:ef:96:2c:ee:29:0e:26:93:0f:d8:92:
0b:1e:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:46 2026 by rpki-client