
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier: KaRDMBYHZ1qYi6LgQgvArzCfd+fElQ/g5muDpxnaaps=
Subject key identifier: 06:61:50:1F:1E:8C:47:F1:3E:B3:25:59:91:4B:BA:1F:B9:F0:66:ED
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial: 01A151E4175DE797B62A11A8F760F1C9FB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number: 1AAC
Signing time: Mon 19 Oct 2026 02:01:05 +0000
Manifest this update: Mon 19 Oct 2026 02:01:05 +0000
Manifest next update: Tue 20 Oct 2026 02:01:05 +0000
Files and hashes: 1: 3bQ5jO0RUuXsW22069a_-nQHYK0.roa (hash: onknVg8brIZzx6BgExEtaYuz5FQlW8luXFcHhl4b8nc=)
2: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: K3+kVtdrq83X6NiciVAvSvoBKsABaHP30S9zSOdfwr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:17:5d:e7:97:b6:2a:11:a8:f7:60:f1:c9:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Validity
Not Before: Oct 19 02:01:05 2026 GMT
Not After : Oct 20 02:01:05 2026 GMT
Subject: CN=0661501f1e8c47f13eb32559914bba1fb9f066ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:aa:88:1e:2d:36:de:72:e2:86:4b:3b:ef:
b7:34:3b:84:6c:1d:be:37:42:a8:31:35:a3:bc:69:
38:d4:5f:05:45:df:f2:66:2a:36:e3:1c:b1:cd:3c:
ac:97:11:c5:8c:c3:ff:94:78:97:3a:0e:58:82:df:
d2:c4:56:6d:2f:9b:7c:50:9c:16:31:3a:a0:e5:55:
c3:df:82:06:d3:05:0e:18:8c:95:4d:08:8f:2f:bb:
d6:91:5e:45:dd:2b:9f:48:d1:d7:f1:e7:e9:5a:a4:
ee:ac:45:da:c2:6b:25:8c:81:f8:20:2a:01:73:5d:
d1:6e:d3:91:d5:f9:1c:6c:52:e3:31:90:75:bd:7d:
68:e8:15:3c:fc:0a:57:c4:ee:f0:d2:24:91:58:c0:
83:53:a2:00:15:d5:70:b6:da:43:14:44:c9:3a:1d:
8a:10:ae:e3:1f:67:74:56:ff:c9:81:80:64:7a:f0:
6e:bb:2c:b4:92:ee:71:d3:24:3c:22:a7:89:ab:29:
a5:da:e2:c7:33:96:71:b6:c2:c1:41:f9:23:25:f0:
85:bf:7d:04:ec:16:22:b1:fe:d0:aa:9c:ea:55:75:
00:a1:49:62:38:c2:bf:43:b5:7d:3f:e5:8c:95:8a:
6a:78:86:59:3a:ca:a2:ad:c8:0b:c1:da:8f:c6:f0:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:50:1F:1E:8C:47:F1:3E:B3:25:59:91:4B:BA:1F:B9:F0:66:ED
X509v3 Authority Key Identifier:
keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f7:fc:3e:12:36:42:eb:c6:87:f5:c1:21:e6:39:12:e6:d3:
29:2a:a2:f9:04:83:13:1e:8d:fb:44:a3:11:07:bb:f0:78:17:
b9:78:41:41:c9:2d:b1:9e:32:e4:56:1f:7b:12:c8:c3:a2:e7:
8d:e9:69:dc:63:b1:13:96:4e:b4:0e:ac:4a:57:93:e3:84:d0:
15:00:02:c3:d1:f4:c8:46:ee:08:2a:28:fd:34:33:7e:88:27:
ab:59:db:62:42:39:9d:a4:1f:0d:e4:1b:12:13:70:35:87:18:
79:93:8e:7e:9d:bd:98:60:4a:7e:91:1a:41:cd:4c:90:32:fe:
88:cc:60:7e:f2:7d:89:f2:66:51:7e:21:a3:af:95:54:21:4b:
b7:ca:60:f7:3b:a2:53:1c:c1:8e:5a:55:15:b0:9c:2b:22:03:
6d:35:ed:80:50:a9:02:23:93:b5:b3:b7:22:b7:48:84:1a:f2:
68:9b:6e:fc:85:29:e6:ab:88:4d:88:c0:5d:35:2e:90:98:17:
04:d8:8a:18:30:de:f5:0d:8c:d2:ae:e2:02:c5:56:13:99:86:
e1:bb:6a:fa:15:70:ad:95:5f:02:45:7d:9d:94:81:bc:b7:71:
24:ad:ca:da:fd:3f:ca:79:28:86:93:5d:77:0c:7a:4e:64:37:
0c:c9:62:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFR5Bdd55e2KhGo92DxyfuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNWYzZjJlYmY4MGM3NzY2OTI1MGE3NTliZTFlNWM5MWUz
ODg0MzUwHhcNMjYxMDE5MDIwMTA1WhcNMjYxMDIwMDIwMTA1WjAzMTEwLwYDVQQD
EygwNjYxNTAxZjFlOGM0N2YxM2ViMzI1NTk5MTRiYmExZmI5ZjA2NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlmqiB4tNt5y4oZLO++3NDuEbB2+
N0KoMTWjvGk41F8FRd/yZio24xyxzTyslxHFjMP/lHiXOg5Ygt/SxFZtL5t8UJwW
MTqg5VXD34IG0wUOGIyVTQiPL7vWkV5F3SufSNHX8efpWqTurEXawmsljIH4ICoB
c13RbtOR1fkcbFLjMZB1vX1o6BU8/ApXxO7w0iSRWMCDU6IAFdVwttpDFETJOh2K
EK7jH2d0Vv/JgYBkevBuuyy0ku5x0yQ8IqeJqyml2uLHM5ZxtsLBQfkjJfCFv30E
7BYisf7QqpzqVXUAoUliOMK/Q7V9P+WMlYpqeIZZOsqircgLwdqPxvDG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZhUB8ejEfxPrMlWZFLuh+58GbtMB8GA1UdIwQY
MBaAFPNfPy6/gMd2aSUKdZvh5ckeOIQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjkt
NWNhYzk0YjgzNmI2LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjktNWNhYzk0YjgzNmI2
LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/f8PhI2
QuvGh/XBIeY5EubTKSqi+QSDEx6N+0SjEQe78HgXuXhBQcktsZ4y5FYfexLIw6Ln
jelp3GOxE5ZOtA6sSleT44TQFQACw9H0yEbuCCoo/TQzfognq1nbYkI5naQfDeQb
EhNwNYcYeZOOfp29mGBKfpEaQc1MkDL+iMxgfvJ9ifJmUX4ho6+VVCFLt8pg9zui
UxzBjlpVFbCcKyIDbTXtgFCpAiOTtbO3IrdIhBryaJtu/IUp5quITYjAXTUukJgX
BNiKGDDe9Q2M0q7iAsVWE5mG4btq+hVwrZVfAkV9nZSBvLdxJK3K2v0/ynkohpNd
dwx6TmQ3DMlinQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 09:20:24 2026 by rpki-client