Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: de6fRyvtXrlsbKjafCET11H5zmbwyD/DGi8npeuN3so=
Subject key identifier: 8A:74:5E:4F:8C:FB:11:5C:80:D3:D2:94:CB:9D:46:52:9A:B7:87:7D
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01A17770BE65EBD639B229645A6F5406D9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 09:00:39 +0000
Manifest this update: Mon 26 Oct 2026 09:00:39 +0000
Manifest next update: Tue 27 Oct 2026 09:00:39 +0000
Files and hashes: 1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: k7rpxKS/w3qBPxdaZOBEEHyk2zmhodwWw7B5t6Tv2XI=)
7: PTxGryENH4mD20Ccz3IFvC8h74s.roa (hash: 3zw+NEm8FaAvgwVFX3LBOptNCA81ya5MsfkEuiCj8Eo=)
8: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:be:65:eb:d6:39:b2:29:64:5a:6f:54:06:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 26 09:00:39 2026 GMT
Not After : Oct 27 09:00:39 2026 GMT
Subject: CN=8a745e4f8cfb115c80d3d294cb9d46529ab7877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:76:33:bd:a4:81:c2:96:4b:f0:23:4d:a7:
ef:11:f3:86:1e:d9:40:2d:9b:e6:1c:e0:b7:e5:02:
b2:ab:b5:e7:d2:cb:f4:d3:4e:1e:c9:1a:be:c6:49:
bc:59:2e:90:bf:1e:9b:17:a0:99:6f:53:46:6e:bc:
6e:2a:01:97:89:30:8d:36:da:36:a5:e5:f9:1f:7c:
1f:97:44:2a:3a:50:eb:87:c3:49:dc:a0:46:52:fe:
5d:cf:64:20:01:f8:4e:d8:51:13:e5:08:b7:89:03:
7b:d8:8b:f6:9e:b5:15:84:19:46:f4:9b:d6:ed:00:
9f:14:b2:d4:a8:4b:08:4d:26:51:60:fb:ae:cd:00:
b4:9e:7d:65:17:a8:03:85:8d:cf:80:c1:a9:65:1e:
42:dd:5d:fc:a7:c4:37:08:f3:4e:ff:f9:db:87:bb:
d8:a9:2f:a5:e1:c8:19:7c:c0:bc:66:78:a7:a9:7d:
61:db:3d:4b:81:cf:81:7e:1a:db:04:2d:4f:87:fe:
c5:18:bc:dd:da:9d:24:84:1f:1c:3f:f4:7b:eb:3c:
a1:2d:de:08:6d:91:36:cc:34:b9:d0:b3:40:80:06:
9f:d3:53:27:09:a2:8b:e3:15:30:2a:c0:53:59:08:
9d:a3:af:1f:19:26:78:42:1e:b1:f0:5d:9f:f0:c3:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:5E:4F:8C:FB:11:5C:80:D3:D2:94:CB:9D:46:52:9A:B7:87:7D
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:20:a9:92:f4:72:4e:bd:a9:c7:9c:58:7c:b9:9c:7b:c8:01:
4c:3b:65:0d:66:74:1b:27:1d:ee:fa:ee:f9:5a:5b:cd:b7:6f:
43:45:97:d3:02:7a:14:9d:b4:71:16:55:d2:6b:d7:04:96:df:
6c:71:0a:41:c5:cc:41:12:3c:73:73:58:55:6d:2a:4f:94:63:
b8:2a:b0:c8:ba:d8:e0:e2:06:25:b1:eb:83:83:c0:a4:29:2c:
69:24:fe:0a:ad:ce:e7:7c:35:a5:0b:47:a0:c5:22:a1:2d:c3:
9c:e9:43:a4:45:01:50:45:52:0e:45:78:ba:5e:11:ac:11:0d:
20:3f:3a:19:c4:58:31:3f:e6:02:c3:27:c2:df:e8:29:11:9c:
18:f5:c4:62:d3:cd:d6:58:b8:b6:20:a3:24:ce:7d:cd:d8:5f:
72:ee:c3:63:56:73:18:84:32:c0:27:dd:87:28:19:40:67:f5:
10:75:fc:2c:25:4a:14:e7:4a:15:4f:af:b8:27:b5:d9:1b:db:
af:6e:5f:d1:11:9e:49:81:9a:7c:c0:05:db:75:1e:6f:b4:40:
5e:ba:59:ee:bd:5e:94:d1:28:4b:f6:0f:8b:17:1d:28:ec:2a:
90:20:8b:cb:3e:f2:d7:03:79:5a:96:c1:8a:49:0e:7b:56:f1:
53:22:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:40 2026 by rpki-client