Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: +t+sFPwHpL8w8wZpAUtP1CAnOCYFZQPWOMUNQjCNWJI=
Subject key identifier: 62:79:BD:46:94:7E:E2:B2:88:FE:15:D5:8A:ED:9F:EF:DE:A8:75:84
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 019E57B70DB43B7A422B35AB092C61A56930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: 3F
Signing time: Sun 24 May 2026 02:01:14 +0000
Manifest this update: Sun 24 May 2026 02:01:14 +0000
Manifest next update: Mon 25 May 2026 02:01:14 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: ZfbORj2/vBuTbtCR8z82d0njcn1YFQ/WXliGBEPX/D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:b7:0d:b4:3b:7a:42:2b:35:ab:09:2c:61:a5:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: May 24 02:01:14 2026 GMT
Not After : May 25 02:01:14 2026 GMT
Subject: CN=6279bd46947ee2b288fe15d58aed9fefdea87584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:52:83:e0:87:76:06:46:1d:c9:ba:4c:f5:
1b:21:ee:8f:4a:43:65:3c:21:43:9b:58:15:af:9e:
29:a5:c7:e6:e0:5a:83:b2:95:ab:7b:0b:2e:18:2b:
5d:71:17:81:17:b0:42:b2:4e:ee:d2:27:93:ab:ea:
fa:45:07:79:97:f6:f1:a9:51:4a:e9:22:72:b4:ca:
39:fe:f1:a7:7c:a3:66:76:49:3a:cb:1a:68:1c:b8:
f7:40:d0:6d:68:67:28:24:ed:fe:30:1b:a7:bd:1f:
13:19:6d:5e:24:ca:21:c9:10:e7:d6:ec:dd:c6:0e:
2a:97:e4:83:58:a1:eb:53:ac:de:11:ee:dc:6c:56:
2d:04:07:8f:45:be:39:95:1b:49:79:12:28:d9:6a:
7e:98:73:f6:8b:9b:4e:de:25:64:c7:70:51:26:30:
75:09:59:04:d0:38:db:ad:14:70:df:01:f5:44:ba:
2e:b7:10:bf:7a:98:5e:96:e3:f3:5f:dc:7e:40:21:
81:6e:a3:8f:91:05:35:c9:1f:89:10:5a:a0:50:61:
68:d3:41:b9:af:bf:6f:6b:ad:2b:0d:e8:b8:1d:9b:
5f:16:71:1c:d0:9a:45:0f:aa:67:e0:2b:e8:59:0b:
f2:8b:90:63:ea:f8:c4:60:17:a8:cd:9b:89:7b:82:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:BD:46:94:7E:E2:B2:88:FE:15:D5:8A:ED:9F:EF:DE:A8:75:84
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:e2:ea:b9:2f:12:9e:4a:85:7a:6e:11:15:a9:80:05:cf:
38:65:6e:95:27:40:7a:9d:f2:34:8c:ab:ae:00:ce:f7:7e:8f:
50:06:59:6e:dc:f4:4d:bd:3c:1b:8b:0e:2e:27:5b:83:0e:95:
84:1b:33:60:ce:c1:9c:39:55:83:9f:ac:a3:16:54:92:7f:4c:
58:82:35:b8:3d:aa:20:05:ea:c8:68:5f:1c:86:5d:9e:c0:07:
3b:da:4a:9b:b1:1d:fe:ab:dc:23:64:7d:36:e3:96:02:6f:a9:
bc:10:ed:df:99:f4:10:2e:cd:e2:20:a0:4b:7d:91:d9:2f:9b:
85:e2:6e:57:c6:b4:8f:db:ff:b9:47:75:03:46:e4:47:87:2e:
34:d7:9d:2d:e4:c9:d4:6c:e8:c5:b1:39:0e:c4:36:8d:f2:2b:
0f:07:a0:73:c0:b3:e8:6a:c1:14:01:34:c2:47:75:fa:4f:f2:
37:cb:e8:38:f3:8a:4f:c0:4d:7d:e5:6f:d9:aa:f9:c3:1c:c3:
f5:12:4e:a0:3f:46:68:1d:22:3c:93:32:96:e4:bd:92:d8:9a:
6c:2d:6c:53:88:ee:86:11:05:15:29:cc:37:68:d6:82:30:ba:
c2:22:aa:58:ba:df:6a:ff:d8:5d:e2:25:f9:e3:57:42:7e:62:
98:37:df:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5Xtw20O3pCKzWrCSxhpWkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Y2U5MzFmODUyZjQwNDZmZjhkYjQ4MmIzOTQ1MDIxOWY4
YjM4M2EwHhcNMjYwNTI0MDIwMTE0WhcNMjYwNTI1MDIwMTE0WjAzMTEwLwYDVQQD
Eyg2Mjc5YmQ0Njk0N2VlMmIyODhmZTE1ZDU4YWVkOWZlZmRlYTg3NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfxSg+CHdgZGHcm6TPUbIe6PSkNl
PCFDm1gVr54ppcfm4FqDspWrewsuGCtdcReBF7BCsk7u0ieTq+r6RQd5l/bxqVFK
6SJytMo5/vGnfKNmdkk6yxpoHLj3QNBtaGcoJO3+MBunvR8TGW1eJMohyRDn1uzd
xg4ql+SDWKHrU6zeEe7cbFYtBAePRb45lRtJeRIo2Wp+mHP2i5tO3iVkx3BRJjB1
CVkE0DjbrRRw3wH1RLoutxC/epheluPzX9x+QCGBbqOPkQU1yR+JEFqgUGFo00G5
r79va60rDei4HZtfFnEc0JpFD6pn4CvoWQvyi5Bj6vjEYBeozZuJe4IOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ5vUaUfuKyiP4V1Yrtn+/eqHWEMB8GA1UdIwQY
MBaAFJbOkx+FL0BG/420grOUUCGfizg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iYmQ4ZDYtOGY4YS00ZGNiLThjODAt
NzFmMTI1ZjVmNGM3LzEvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iYmQ4ZDYtOGY4YS00ZGNiLThjODAtNzFmMTI1ZjVmNGM3
LzEvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd/i6rkv
Ep5KhXpuERWpgAXPOGVulSdAep3yNIyrrgDO936PUAZZbtz0Tb08G4sOLidbgw6V
hBszYM7BnDlVg5+soxZUkn9MWII1uD2qIAXqyGhfHIZdnsAHO9pKm7Ed/qvcI2R9
NuOWAm+pvBDt35n0EC7N4iCgS32R2S+bheJuV8a0j9v/uUd1A0bkR4cuNNedLeTJ
1GzoxbE5DsQ2jfIrDwegc8Cz6GrBFAE0wkd1+k/yN8voOPOKT8BNfeVv2ar5wxzD
9RJOoD9GaB0iPJMyluS9ktiabC1sU4juhhEFFSnMN2jWgjC6wiKqWLrfav/YXeIl
+eNXQn5imDff4A==
-----END CERTIFICATE-----
Generated at Sun May 24 04:34:51 2026 by rpki-client