
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
File: LRVM60zslBwgUHpma-ZNiFHEsIY.mft (raw, json)
Hash identifier: Oii00ZM+LHDIDSrQb0+ROFrkpWoXXavKWraalbKwQk0=
Subject key identifier: 25:2D:72:08:13:8B:8D:92:95:8E:4C:68:E4:E0:86:70:8E:46:67:04
Authority key identifier: 2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
Certificate issuer: /CN=2d154ceb4cec941c20507a666be64d8851c4b086
Certificate serial: 01A181BEC293D6842937323BA850EBC48F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:02:04 +0000
Manifest this update: Wed 28 Oct 2026 09:02:04 +0000
Manifest next update: Thu 29 Oct 2026 09:02:04 +0000
Files and hashes: 1: K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa (hash: MarGqFt+Uv23NQPK5A+4/z+6RD4mCPWX9m3BUAFWy0w=)
2: LRVM60zslBwgUHpma-ZNiFHEsIY.crl (hash: 66NL4lMQYY9cdnxNZo+iD+hf+wBFLBPiGgCmoyY3Who=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:c2:93:d6:84:29:37:32:3b:a8:50:eb:c4:8f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d154ceb4cec941c20507a666be64d8851c4b086
Validity
Not Before: Oct 28 09:02:04 2026 GMT
Not After : Oct 29 09:02:04 2026 GMT
Subject: CN=252d7208138b8d92958e4c68e4e086708e466704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:4f:3e:cf:f0:d6:06:9d:3d:c4:ab:c7:65:
3c:eb:94:75:c7:76:04:da:00:8b:28:26:76:ee:56:
25:a5:87:e0:f0:09:24:4a:33:a1:e9:20:9b:eb:f6:
7d:01:db:7e:6c:25:9c:b7:02:85:ea:7e:bb:94:fe:
40:d2:9e:7a:b2:5b:80:64:68:79:d6:6c:c6:62:30:
15:7f:80:d4:77:11:22:8e:66:de:e3:30:75:00:9d:
b5:0a:1c:f9:70:eb:13:d5:90:2c:2d:0b:b4:d1:9a:
fc:a9:24:1f:8c:78:95:31:9f:c4:37:0c:bd:4d:08:
80:f0:dc:37:20:47:6c:92:4f:64:43:59:8f:ca:8c:
96:b3:06:59:56:f1:a8:dc:92:8a:5f:85:47:b4:27:
1f:74:57:c5:c8:a5:2c:f2:f7:63:06:ae:cb:a7:db:
4f:93:ed:f0:a4:df:ca:40:cd:b4:9f:e6:01:92:ab:
86:9b:93:69:a1:65:2e:87:ac:c7:9e:f7:95:46:9e:
61:e8:f5:a2:eb:ae:46:41:b8:3d:3c:18:77:8a:be:
10:08:97:93:7b:ca:4c:71:f1:d2:9b:8f:98:e3:92:
41:f2:9e:0e:57:58:a8:62:fc:6c:57:9b:58:46:f7:
4d:9d:94:be:fa:83:e9:6f:56:41:f0:84:bf:cd:64:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:72:08:13:8B:8D:92:95:8E:4C:68:E4:E0:86:70:8E:46:67:04
X509v3 Authority Key Identifier:
keyid:2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:d1:c9:c4:da:8c:1d:ad:a5:0c:64:15:0b:e6:26:f9:b3:
17:9a:03:95:a0:97:75:dc:b8:ba:ab:8d:b3:fb:c7:a5:53:e8:
7f:97:cd:fc:ae:fb:3f:0a:4a:d7:3c:3a:f2:76:fc:51:4b:1b:
45:50:ca:8a:86:97:cf:32:5c:15:91:ac:a5:65:d4:47:e8:11:
70:10:e7:af:aa:dd:38:ba:2b:c0:06:92:f0:98:33:39:e4:35:
53:c3:73:48:a4:8a:a8:b8:ee:a2:85:c4:65:fa:89:ea:62:5a:
6b:77:6d:f0:d0:1f:07:51:ac:0e:e7:b0:5b:22:cf:09:1c:20:
29:39:4b:f8:b0:f3:94:2f:71:c7:c4:91:7b:82:32:7e:00:b2:
35:ed:2c:bc:25:47:78:66:f0:06:e6:56:81:0c:81:6b:57:5e:
10:10:89:19:0a:6a:05:42:55:be:f5:09:9d:b6:32:03:c1:66:
e4:61:df:80:78:7e:cd:72:0a:74:01:62:5a:ca:e2:17:e7:40:
eb:cc:d3:2e:49:65:21:31:a1:f2:e4:28:74:12:f1:49:97:6d:
f8:00:34:4c:1f:84:ed:aa:78:81:02:4e:82:c5:87:18:20:a0:
f0:34:ff:7e:5a:5a:e5:29:ab:75:80:bd:00:b2:06:b6:be:34:
aa:59:95:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvsKT1oQpNzI7qFDrxI8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTU0Y2ViNGNlYzk0MWMyMDUwN2E2NjZiZTY0ZDg4NTFj
NGIwODYwHhcNMjYxMDI4MDkwMjA0WhcNMjYxMDI5MDkwMjA0WjAzMTEwLwYDVQQD
EygyNTJkNzIwODEzOGI4ZDkyOTU4ZTRjNjhlNGUwODY3MDhlNDY2NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZxPPs/w1gadPcSrx2U865R1x3YE
2gCLKCZ27lYlpYfg8AkkSjOh6SCb6/Z9Adt+bCWctwKF6n67lP5A0p56sluAZGh5
1mzGYjAVf4DUdxEijmbe4zB1AJ21Chz5cOsT1ZAsLQu00Zr8qSQfjHiVMZ/ENwy9
TQiA8Nw3IEdskk9kQ1mPyoyWswZZVvGo3JKKX4VHtCcfdFfFyKUs8vdjBq7Lp9tP
k+3wpN/KQM20n+YBkquGm5NpoWUuh6zHnveVRp5h6PWi665GQbg9PBh3ir4QCJeT
e8pMcfHSm4+Y45JB8p4OV1ioYvxsV5tYRvdNnZS++oPpb1ZB8IS/zWRUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUtcggTi42SlY5MaOTghnCORmcEMB8GA1UdIwQY
MBaAFC0VTOtM7JQcIFB6ZmvmTYhRxLCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt
NTkyZWQ3Mzc2MWNhLzEvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh
LzEvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGw3RycTa
jB2tpQxkFQvmJvmzF5oDlaCXddy4uquNs/vHpVPof5fN/K77PwpK1zw68nb8UUsb
RVDKioaXzzJcFZGspWXUR+gRcBDnr6rdOLorwAaS8JgzOeQ1U8NzSKSKqLjuooXE
ZfqJ6mJaa3dt8NAfB1GsDuewWyLPCRwgKTlL+LDzlC9xx8SRe4IyfgCyNe0svCVH
eGbwBuZWgQyBa1deEBCJGQpqBUJVvvUJnbYyA8Fm5GHfgHh+zXIKdAFiWsriF+dA
68zTLkllITGh8uQodBLxSZdt+AA0TB+E7ap4gQJOgsWHGCCg8DT/flpa5SmrdYC9
ALIGtr40qlmVIA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:05 2026 by rpki-client