Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
File: LRVM60zslBwgUHpma-ZNiFHEsIY.mft (raw, json)
Hash identifier: TGc3EyqT5PdU3uQCcmCkw17gRxI7nGyzSsbnCakjD0g=
Subject key identifier: A3:07:2B:6D:4A:AF:E1:29:9C:7B:7A:11:30:44:A0:52:2A:A5:49:84
Authority key identifier: 2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
Certificate issuer: /CN=2d154ceb4cec941c20507a666be64d8851c4b086
Certificate serial: 019FA2CDDD1E0D8416324753DCDE24F5F06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:28 +0000
Manifest this update: Mon 27 Jul 2026 09:00:28 +0000
Manifest next update: Tue 28 Jul 2026 09:00:28 +0000
Files and hashes: 1: K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa (hash: MarGqFt+Uv23NQPK5A+4/z+6RD4mCPWX9m3BUAFWy0w=)
2: LRVM60zslBwgUHpma-ZNiFHEsIY.crl (hash: LKvqD3O812eRxL28UDAWA2ZPHobG1bOpkQ5U83htGHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:dd:1e:0d:84:16:32:47:53:dc:de:24:f5:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d154ceb4cec941c20507a666be64d8851c4b086
Validity
Not Before: Jul 27 09:00:28 2026 GMT
Not After : Jul 28 09:00:28 2026 GMT
Subject: CN=a3072b6d4aafe1299c7b7a113044a0522aa54984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:5e:f3:4a:ac:b0:ae:85:90:ab:47:1a:13:
0d:c8:51:ab:4e:f2:21:29:cf:04:f4:96:c2:26:22:
b2:94:e1:84:1b:3c:c4:98:5f:2d:8a:6b:41:24:83:
30:28:2e:ad:ea:e3:ac:46:db:2d:01:09:69:aa:08:
c6:0a:fb:f9:c5:b7:df:ba:de:c2:99:5d:41:1c:a4:
2c:20:e5:2c:0e:0f:5e:a2:47:6b:9c:68:c4:1c:2c:
b1:85:54:e7:dc:e5:43:3c:d6:31:0a:1c:e5:a9:af:
66:68:88:ac:fd:06:90:51:c0:cb:c6:42:3b:16:08:
b5:1e:c5:ef:ee:9a:66:27:82:12:96:0a:c9:5c:01:
65:5e:5f:0a:cd:55:96:38:00:42:1f:06:6e:fc:db:
3a:e1:e9:e5:00:5e:c5:d1:d2:a5:1d:03:e4:b4:f6:
36:2e:64:8a:28:ed:9a:78:b2:91:b9:2b:f3:a3:c4:
b9:19:bc:fe:b5:7d:bb:6b:9a:de:60:83:de:17:9c:
6f:63:f8:f5:28:64:f5:0c:e7:a0:19:32:be:e7:a5:
2f:73:2b:3e:34:d1:52:2f:6d:18:a6:ad:64:a3:51:
40:dd:69:89:3e:a8:1b:6e:b1:6c:3c:fa:ad:6a:9e:
15:a0:4b:97:38:84:52:6c:c4:5a:12:da:c4:9f:1f:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:2B:6D:4A:AF:E1:29:9C:7B:7A:11:30:44:A0:52:2A:A5:49:84
X509v3 Authority Key Identifier:
keyid:2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:bf:36:da:74:e2:86:22:4d:86:05:62:b8:89:5a:a9:13:
0b:e0:04:42:78:aa:51:93:9a:4a:f9:28:67:71:22:0e:1f:ae:
25:d9:3d:46:c5:df:62:95:a6:c3:44:84:7a:37:35:ca:7a:53:
01:99:0a:bf:9c:f3:9e:16:24:3a:a4:43:bc:f4:93:ac:ab:6b:
aa:f4:e7:d7:f9:74:b6:b4:c3:f2:43:f5:e2:f6:46:29:57:e6:
09:6b:85:fa:3e:73:08:7b:8b:43:7e:43:f1:75:00:ad:e8:78:
f8:74:c3:cb:35:8b:b1:25:e2:c5:d9:8e:e6:7c:f3:7d:50:f2:
89:7b:d9:a7:cb:6a:b2:24:ea:96:19:56:eb:ba:68:78:a7:c1:
70:81:63:5a:b1:d0:04:7f:c6:c1:70:1a:89:de:0f:99:46:3e:
27:80:60:1a:92:ad:a0:20:d3:1a:c4:48:55:c1:18:62:28:6f:
90:7b:b0:ac:11:a6:e2:d3:3b:b6:e2:cf:b6:38:e7:d7:00:45:
f5:8c:80:1c:cf:f8:4a:a7:cb:ac:ec:e7:46:fd:e4:91:d5:06:
36:eb:21:f3:cd:86:a0:93:ab:42:6c:38:40:84:ec:93:d8:fa:
dd:29:13:fb:a8:54:1f:67:1f:af:0e:e0:e3:71:37:80:23:a6:
0a:9e:78:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izd0eDYQWMkdT3N4k9fBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTU0Y2ViNGNlYzk0MWMyMDUwN2E2NjZiZTY0ZDg4NTFj
NGIwODYwHhcNMjYwNzI3MDkwMDI4WhcNMjYwNzI4MDkwMDI4WjAzMTEwLwYDVQQD
EyhhMzA3MmI2ZDRhYWZlMTI5OWM3YjdhMTEzMDQ0YTA1MjJhYTU0OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FFe80qssK6FkKtHGhMNyFGrTvIh
Kc8E9JbCJiKylOGEGzzEmF8timtBJIMwKC6t6uOsRtstAQlpqgjGCvv5xbffut7C
mV1BHKQsIOUsDg9eokdrnGjEHCyxhVTn3OVDPNYxChzlqa9maIis/QaQUcDLxkI7
Fgi1HsXv7ppmJ4ISlgrJXAFlXl8KzVWWOABCHwZu/Ns64enlAF7F0dKlHQPktPY2
LmSKKO2aeLKRuSvzo8S5Gbz+tX27a5reYIPeF5xvY/j1KGT1DOegGTK+56Uvcys+
NNFSL20Ypq1ko1FA3WmJPqgbbrFsPPqtap4VoEuXOIRSbMRaEtrEnx8DGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMHK21Kr+EpnHt6ETBEoFIqpUmEMB8GA1UdIwQY
MBaAFC0VTOtM7JQcIFB6ZmvmTYhRxLCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt
NTkyZWQ3Mzc2MWNhLzEvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh
LzEvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv2/Ntp0
4oYiTYYFYriJWqkTC+AEQniqUZOaSvkoZ3EiDh+uJdk9RsXfYpWmw0SEejc1ynpT
AZkKv5zznhYkOqRDvPSTrKtrqvTn1/l0trTD8kP14vZGKVfmCWuF+j5zCHuLQ35D
8XUAreh4+HTDyzWLsSXixdmO5nzzfVDyiXvZp8tqsiTqlhlW67poeKfBcIFjWrHQ
BH/GwXAaid4PmUY+J4BgGpKtoCDTGsRIVcEYYihvkHuwrBGm4tM7tuLPtjjn1wBF
9YyAHM/4SqfLrOznRv3kkdUGNush882GoJOrQmw4QITsk9j63SkT+6hUH2cfrw7g
43E3gCOmCp54lQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:15:35 2026 by rpki-client