Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: 1l8kAi5F2sjjqzEiCmCK3+sBgILoYs5gkdPM/qz4Cg8=
Subject key identifier: 56:A8:E7:AE:2B:30:08:55:34:6A:71:D7:03:58:DB:9D:3C:34:F4:1E
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 019D3789A5358704BD6DF01B25D6DDC82494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 0AB5
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa (hash: F2Adog2BirH6Gouzr8SZxmAWeuEuTARSmlF0Zm/Q4fY=)
2: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: ORmx+WazrBQKbutlZ25oGWENZ7OTdblu36QMcxwr/ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a5:35:87:04:bd:6d:f0:1b:25:d6:dd:c8:24:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=56a8e7ae2b300855346a71d70358db9d3c34f41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:dc:2c:b1:ad:de:dc:44:c6:b5:a9:cd:c4:
20:d1:2d:b4:48:9b:8a:f6:1f:4a:5d:2c:bd:89:1b:
28:f8:94:3a:9e:a7:2b:45:8e:60:11:d5:5a:71:56:
c2:14:a3:ff:a1:c2:c3:52:6c:43:52:76:68:75:fb:
d9:89:27:37:c3:0b:99:da:89:f3:8c:8c:c5:3f:83:
38:dd:3a:b9:7c:96:41:ac:9d:bf:bd:df:c3:45:8b:
ad:de:97:b5:2c:28:4f:e9:17:d2:00:38:43:3d:8c:
8c:f5:1c:bc:3c:8a:99:97:10:2f:e3:ca:2d:70:3a:
62:7d:31:da:f2:c8:5c:98:ff:0c:a4:75:cf:db:4e:
44:77:f8:89:21:52:1f:42:73:02:f4:c1:2d:e3:85:
a8:74:1e:b7:d1:ea:21:8d:9b:d7:19:6d:be:ee:ef:
54:9a:f7:1c:77:62:76:d1:f0:0f:fa:10:53:70:ba:
b9:0c:e2:a1:1b:94:dd:84:f7:72:7e:ca:69:ad:8d:
18:7e:af:f6:5e:ea:ca:08:ca:e9:66:a2:63:6e:24:
3f:fc:7c:f0:31:ac:2e:46:3c:31:11:fa:14:9c:8f:
cc:3c:e4:d0:b2:da:0f:e4:aa:09:09:ca:6d:1e:3b:
a8:14:54:9d:f7:bf:24:1d:c2:e5:c3:12:bb:6d:96:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:E7:AE:2B:30:08:55:34:6A:71:D7:03:58:DB:9D:3C:34:F4:1E
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:59:6b:e3:82:7f:b1:5f:9f:f9:32:70:7d:2e:9a:5f:fa:
d5:ba:66:a6:27:e8:0a:c6:f0:c6:5f:0c:24:2f:5d:1c:cc:e6:
29:01:e0:e6:51:b4:5a:02:0e:2c:97:ef:8b:3f:91:19:db:25:
00:ef:57:2e:0b:e8:b1:4b:2a:5e:77:45:f3:02:51:38:5a:0e:
4d:ec:e3:0b:51:95:b0:f1:44:ef:68:0f:d8:44:81:df:2f:58:
0f:9e:da:bf:03:31:7f:ed:dd:a6:df:d9:a6:c7:70:c0:3e:09:
6e:19:46:f5:ea:f2:16:3a:60:69:9c:1e:a6:8a:93:4b:54:e8:
84:f4:fa:e9:cc:6a:f1:ac:36:dc:56:54:02:2e:2d:9c:25:ee:
2b:7c:1e:c6:87:db:b2:31:80:92:e6:71:07:62:09:e0:68:cb:
f4:68:26:a7:29:39:a9:95:28:77:dd:dd:a1:b9:71:7e:d3:4d:
23:c9:8c:53:ac:10:d3:7b:fd:62:c6:d2:3d:30:07:9b:fd:f7:
89:31:7d:cf:31:1c:3f:7e:8d:b9:7f:a5:38:86:06:af:f5:a2:
a2:1b:2c:2f:d0:24:6b:cc:09:01:30:dc:cb:7f:e4:38:f9:2e:
f4:f3:1e:74:03:2c:2a:31:05:66:06:bb:83:01:5b:8a:f9:54:
ad:8c:79:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iaU1hwS9bfAbJdbdyCSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw
MjM5YWEwHhcNMjYwMzI5MDMwMTAwWhcNMjYwMzMwMDMwMTAwWjAzMTEwLwYDVQQD
Eyg1NmE4ZTdhZTJiMzAwODU1MzQ2YTcxZDcwMzU4ZGI5ZDNjMzRmNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIzcLLGt3txExrWpzcQg0S20SJuK
9h9KXSy9iRso+JQ6nqcrRY5gEdVacVbCFKP/ocLDUmxDUnZodfvZiSc3wwuZ2onz
jIzFP4M43Tq5fJZBrJ2/vd/DRYut3pe1LChP6RfSADhDPYyM9Ry8PIqZlxAv48ot
cDpifTHa8shcmP8MpHXP205Ed/iJIVIfQnMC9MEt44WodB630eohjZvXGW2+7u9U
mvccd2J20fAP+hBTcLq5DOKhG5TdhPdyfspprY0Yfq/2XurKCMrpZqJjbiQ//Hzw
MawuRjwxEfoUnI/MPOTQstoP5KoJCcptHjuoFFSd978kHcLlwxK7bZZRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFao564rMAhVNGpx1wNY2508NPQeMB8GA1UdIwQY
MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt
ZWRlNzBjOGVkNTEzLzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz
LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa5Za+OC
f7Ffn/kycH0uml/61bpmpifoCsbwxl8MJC9dHMzmKQHg5lG0WgIOLJfviz+RGdsl
AO9XLgvosUsqXndF8wJROFoOTezjC1GVsPFE72gP2ESB3y9YD57avwMxf+3dpt/Z
psdwwD4JbhlG9eryFjpgaZwepoqTS1TohPT66cxq8aw23FZUAi4tnCXuK3wexofb
sjGAkuZxB2IJ4GjL9Ggmpyk5qZUod93doblxftNNI8mMU6wQ03v9YsbSPTAHm/33
iTF9zzEcP36NuX+lOIYGr/WiohssL9Aka8wJATDcy3/kOPku9PMedAMsKjEFZga7
gwFbivlUrYx5AA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:07 2026 by rpki-client