Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: gegG2mn4ekVD50xza9zssXcYy19C84zIhpk9zo4PAvc=
Subject key identifier: 2C:2B:75:8D:86:ED:79:2E:E0:EF:E9:77:D8:7F:3C:32:16:2B:0D:6F
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019CAB348E1CAE4F46003A4FF6C7C1DBF811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 10F6
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: 9SJOZaGFEiV5wcHa/0uGZTZvVr8+RWQjEF2KTdvrdPI=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8e:1c:ae:4f:46:00:3a:4f:f6:c7:c1:db:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=2c2b758d86ed792ee0efe977d87f3c32162b0d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:83:ef:f8:3e:de:2a:43:b8:d9:74:62:1c:
77:18:f0:74:6f:31:d0:f4:ff:bc:1b:33:37:6b:10:
2c:fb:cc:92:c7:a0:a9:05:87:27:ec:5e:dd:a2:36:
9e:48:69:41:bc:54:6d:82:b7:17:ca:02:f2:23:e7:
c8:f4:3c:85:62:20:04:b8:8b:ae:58:cf:d0:7d:62:
fe:fd:f1:9d:12:52:2e:0f:05:e5:97:0f:76:a9:1b:
f5:78:94:12:7c:5c:69:fb:42:66:a6:c6:5d:eb:44:
d6:e6:26:f5:54:b2:79:72:8e:04:0c:4b:19:e1:2d:
89:8e:99:7c:67:95:15:c5:96:98:62:98:12:a3:8c:
e7:c7:ed:57:43:43:d6:26:29:6d:87:14:72:0c:34:
2f:02:bb:92:d7:13:ae:05:94:14:7a:5d:5f:f5:aa:
1b:5a:82:7e:32:3d:93:dc:22:23:ad:73:c4:da:ac:
95:c0:9c:4a:7d:a0:b0:7a:7b:6c:2b:2f:7a:16:b9:
6a:ac:22:cb:b3:5e:c6:87:f4:65:7c:95:85:49:ec:
1e:ce:12:2b:e1:a0:28:c3:28:2c:64:db:24:f3:92:
44:8b:25:4d:84:8f:0e:e5:bd:d9:4d:6e:e4:f9:88:
04:e5:dc:7c:26:8d:56:04:51:00:39:57:4e:b5:0a:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:75:8D:86:ED:79:2E:E0:EF:E9:77:D8:7F:3C:32:16:2B:0D:6F
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4d:2a:87:7d:fd:60:ad:55:df:ee:dd:1c:47:61:c0:39:fa:
fb:8f:12:b6:30:49:6e:68:2d:b4:f8:d8:72:73:35:fb:1a:b9:
7b:21:ed:59:b9:4c:1e:70:14:80:d3:08:24:f4:ac:d6:4a:5c:
d6:3e:4f:e2:42:23:f4:95:63:05:98:94:26:ef:d6:ff:e8:1c:
52:65:55:74:b9:6c:8e:8c:f8:df:1f:aa:80:2b:b0:55:2a:e5:
9b:81:e3:e5:c6:6f:78:81:d4:25:03:29:de:fe:b2:1c:11:8e:
e1:06:a5:f0:4b:80:c4:5b:65:b7:a5:45:59:10:ee:9e:8a:03:
f0:cb:9c:70:d5:08:91:b8:dc:ed:15:df:55:99:b1:76:bd:42:
9f:0f:cd:99:e1:c5:bd:8a:c7:cd:72:1b:d3:95:05:ec:2b:67:
2a:d7:ec:b7:b9:89:7f:de:26:52:74:a2:99:d8:6f:34:e5:db:
ec:14:19:64:0c:44:41:39:68:8a:22:6b:31:c2:b2:de:6b:15:
53:89:cb:b9:84:91:0a:b3:0e:27:2e:a0:c0:ac:ef:38:89:3b:
ae:23:3d:d2:30:02:10:51:4e:87:37:2c:81:05:a8:56:9f:c4:
64:9b:43:7a:db:f9:a4:28:d9:d1:bc:13:99:d0:86:35:63:7c:
ad:c0:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:13 2026 by rpki-client