Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: 1vDV0fYcw4FYJUwokU+rMcmvmHHWaLPjIUsnfjpiMmc=
Subject key identifier: 84:38:00:AC:E3:07:FB:C9:C6:07:0B:62:D2:AF:61:16:0A:F9:85:B3
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019EB8EABDE64195EC5526FB87EF379B5873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 23:00:52 +0000
Manifest this update: Thu 11 Jun 2026 23:00:52 +0000
Manifest next update: Fri 12 Jun 2026 23:00:52 +0000
Files and hashes: 1: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: X1oNJiqUw/NQulNECpefH33zOewhqoqEKgJVB//B+8M=)
2: ayl3vnvrrdmk5cZvehuS-xb9kOo.roa (hash: RrcMxnc59zE7RGrIC4ZPK4DT+x6V2IkZuo1eiCNAHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:bd:e6:41:95:ec:55:26:fb:87:ef:37:9b:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Jun 11 23:00:52 2026 GMT
Not After : Jun 12 23:00:52 2026 GMT
Subject: CN=843800ace307fbc9c6070b62d2af61160af985b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:f4:f1:4e:6d:c4:a6:fe:b8:1d:f2:fc:62:
d0:60:cb:a6:7b:8d:31:42:73:b4:0b:c5:9c:09:13:
41:49:b1:0a:5b:e9:64:31:f3:cf:e4:1c:49:f0:b1:
42:45:f3:ad:8c:21:9d:d2:75:81:1e:2d:a4:1a:a2:
ac:44:35:2d:b7:78:d3:c2:40:53:2e:5b:e3:05:24:
fd:81:66:05:aa:48:d4:b3:95:9c:f0:83:ea:f4:5e:
4c:d1:7c:65:fb:31:0d:5e:f0:5b:cd:11:91:7e:dd:
27:b3:0b:de:88:ff:27:8b:ec:95:51:12:2c:1c:27:
cc:71:13:ef:00:82:f5:22:0e:e5:97:07:2a:46:ef:
34:4f:76:7b:68:fc:d5:f1:3f:eb:57:43:0e:b5:03:
34:8d:76:75:64:21:41:e3:dc:b6:0f:90:f5:53:17:
4d:10:f4:28:4b:36:c7:ee:57:8d:d3:ac:d7:83:aa:
6c:91:fc:0d:9a:b7:c3:14:b0:96:b7:71:73:8c:44:
43:48:03:25:c7:b6:66:82:43:40:73:ee:eb:b5:28:
21:c3:c9:1b:a5:f3:d1:c6:fa:fe:2f:6c:09:41:b9:
1a:96:57:36:67:dd:82:7f:6a:5a:ef:f4:8d:da:0c:
5d:4b:c4:2c:cc:26:84:98:ab:45:cc:00:7a:d0:51:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:00:AC:E3:07:FB:C9:C6:07:0B:62:D2:AF:61:16:0A:F9:85:B3
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:32:02:52:82:c6:11:98:59:c3:44:ec:0e:2d:44:b4:e9:d8:
8d:46:4b:20:ac:36:89:88:e1:5d:7d:ed:c5:bb:20:06:7f:e6:
9d:ab:4d:06:e7:af:c2:99:1c:cc:2e:6f:03:84:a2:79:e1:46:
fd:10:f8:26:7a:d1:1b:22:28:d3:76:aa:70:8f:29:65:5c:73:
60:5a:d1:19:2c:e1:e4:2a:1e:59:66:26:7e:13:b5:69:fb:10:
b3:2e:37:bd:32:38:c2:ac:51:7a:af:b7:d3:42:05:b3:30:5a:
7f:88:5e:05:04:e9:98:93:00:6a:19:a8:69:38:17:fa:f8:a7:
68:be:be:cb:d5:8d:f1:9d:8d:94:c3:76:a7:82:f2:1e:19:6e:
0d:96:1f:5d:fd:a6:67:87:47:52:96:67:0d:e6:bc:e1:20:38:
80:92:42:d8:a9:39:aa:57:31:70:e6:64:01:86:0e:ef:2d:03:
99:eb:3f:1f:be:97:99:de:ad:35:2d:4d:d5:b8:b7:be:b6:43:
5a:83:83:1b:6e:b5:70:0d:ca:9c:b3:e6:a8:14:d9:d2:34:32:
1e:28:a9:52:da:96:09:ad:7c:cd:2c:6b:73:72:24:76:0b:27:
e2:aa:c7:93:55:9a:ca:66:7d:3f:51:b0:f9:5d:84:b4:f4:78:
03:f6:f5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646r3mQZXsVSb7h+83m1hzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzdiNGJlYzk3ZDYwOGFiZTIzYmM1N2JhMzk4MjQ2Y2Nj
NTc3NjAwHhcNMjYwNjExMjMwMDUyWhcNMjYwNjEyMjMwMDUyWjAzMTEwLwYDVQQD
Eyg4NDM4MDBhY2UzMDdmYmM5YzYwNzBiNjJkMmFmNjExNjBhZjk4NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DP08U5txKb+uB3y/GLQYMume40x
QnO0C8WcCRNBSbEKW+lkMfPP5BxJ8LFCRfOtjCGd0nWBHi2kGqKsRDUtt3jTwkBT
LlvjBST9gWYFqkjUs5Wc8IPq9F5M0Xxl+zENXvBbzRGRft0nswveiP8ni+yVURIs
HCfMcRPvAIL1Ig7llwcqRu80T3Z7aPzV8T/rV0MOtQM0jXZ1ZCFB49y2D5D1UxdN
EPQoSzbH7leN06zXg6pskfwNmrfDFLCWt3FzjERDSAMlx7ZmgkNAc+7rtSghw8kb
pfPRxvr+L2wJQbkallc2Z92Cf2pa7/SN2gxdS8QszCaEmKtFzAB60FEd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ4AKzjB/vJxgcLYtKvYRYK+YWzMB8GA1UdIwQY
MBaAFCw3tL7JfWCKviO8V7o5gkbMxXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgt
MjEwNzY3YmQwYmEyLzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgtMjEwNzY3YmQwYmEy
LzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzICUoLG
EZhZw0TsDi1EtOnYjUZLIKw2iYjhXX3txbsgBn/mnatNBuevwpkczC5vA4SieeFG
/RD4JnrRGyIo03aqcI8pZVxzYFrRGSzh5CoeWWYmfhO1afsQsy43vTI4wqxReq+3
00IFszBaf4heBQTpmJMAahmoaTgX+vinaL6+y9WN8Z2NlMN2p4LyHhluDZYfXf2m
Z4dHUpZnDea84SA4gJJC2Kk5qlcxcOZkAYYO7y0Dmes/H76Xmd6tNS1N1bi3vrZD
WoODG261cA3KnLPmqBTZ0jQyHiipUtqWCa18zSxrc3Ikdgsn4qrHk1WaymZ9P1Gw
+V2EtPR4A/b1Qw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:27 2026 by rpki-client