Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: cBLKxGW/fdEiPFmKlIb+ds3Y6H+/DEKiqehpf30WKF4=
Subject key identifier: 10:4E:88:3C:B6:FD:16:D1:D6:3A:A3:6A:72:CD:8B:7D:67:90:62:4A
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01A18CAF1AE8AB3D891A32384E124870533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 12:00:48 +0000
Manifest this update: Fri 30 Oct 2026 12:00:48 +0000
Manifest next update: Sat 31 Oct 2026 12:00:48 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: v55DDwmJfKckTxG85a3GwXId0CUV97b8to/8bDCjJLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:1a:e8:ab:3d:89:1a:32:38:4e:12:48:70:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Oct 30 12:00:48 2026 GMT
Not After : Oct 31 12:00:48 2026 GMT
Subject: CN=104e883cb6fd16d1d63aa36a72cd8b7d6790624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:98:e9:90:67:ea:67:8b:2b:b7:76:7f:a7:
ba:5f:a1:c6:59:81:78:60:3e:ff:dd:f9:30:d5:b3:
1a:1e:ab:7e:4d:74:28:01:77:06:05:dc:60:8e:32:
78:9f:12:3f:85:36:4f:ad:31:e8:7e:d0:db:e6:01:
3b:b7:e4:20:b1:d8:a0:c8:c4:75:48:51:db:ba:f0:
ef:6c:fd:cb:73:af:30:80:d9:ec:5e:22:0e:8d:d4:
1a:7c:50:69:37:8e:60:37:e8:4a:ae:c9:d5:f2:76:
c1:d2:51:62:3b:f1:87:00:07:20:3e:12:cf:fd:64:
a9:84:72:75:ce:74:ca:38:97:95:4b:5d:38:8a:34:
7e:d5:f8:ca:b3:84:04:0a:a3:86:5a:2c:cb:44:ec:
61:54:2e:64:3e:11:ed:4d:39:de:d2:28:46:96:41:
10:1f:e6:82:d3:2a:81:9a:a2:93:f2:58:12:e0:2a:
cd:61:6d:8b:d2:2d:6d:fb:7d:aa:88:3d:6b:03:d2:
15:84:30:f3:94:42:67:1e:59:b2:af:85:49:6d:e6:
d8:98:93:a5:49:79:ff:b6:30:b4:e4:93:e5:78:a4:
00:76:43:af:e1:51:60:14:03:67:67:0b:b8:a7:e9:
d4:f6:62:a8:d9:de:c3:ff:ce:23:7d:75:17:42:bc:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:88:3C:B6:FD:16:D1:D6:3A:A3:6A:72:CD:8B:7D:67:90:62:4A
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1a:7d:94:2b:e7:7a:5c:5d:3d:a7:76:28:89:d4:0b:8e:00:
f9:8a:a0:f4:c2:12:9f:97:6e:c0:20:8a:20:c8:06:4a:17:30:
82:66:45:5c:f7:b8:ec:1d:6a:fe:09:b0:e1:93:c8:a5:5a:6c:
fc:25:07:2e:73:f4:a9:8a:63:52:35:c6:eb:50:74:0c:50:f1:
c5:05:5b:fd:4e:25:bf:9f:44:9c:43:86:35:2e:7a:f8:07:5a:
98:f8:c2:eb:aa:8f:65:3d:89:8f:5c:81:ef:1d:4e:d0:0b:65:
4e:23:02:e8:70:90:bd:ee:06:3f:a8:04:a7:fc:79:5f:c6:48:
f2:a5:aa:b3:da:36:54:83:71:4f:42:ff:2d:78:33:c2:4a:06:
ac:ec:71:18:9c:7c:04:24:3e:c5:01:b2:88:91:d1:b9:00:db:
b5:75:46:5b:14:48:5b:f7:fc:cc:7c:8e:91:b1:5e:e1:48:70:
27:16:75:27:20:45:7d:b4:8a:c4:41:84:46:9f:cf:4f:11:fa:
4a:13:15:44:85:ba:23:0e:40:b3:0d:17:56:2f:3d:50:8b:5e:
58:71:f9:d7:56:cd:8b:fc:32:e2:4f:2a:29:0c:45:7d:c0:a3:
5e:68:5d:84:6b:cc:a2:ed:13:c6:c9:0a:56:3b:ba:9b:e1:1c:
62:42:42:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGMrxroqz2JGjI4ThJIcFM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0
ZDcxZmMwHhcNMjYxMDMwMTIwMDQ4WhcNMjYxMDMxMTIwMDQ4WjAzMTEwLwYDVQQD
EygxMDRlODgzY2I2ZmQxNmQxZDYzYWEzNmE3MmNkOGI3ZDY3OTA2MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1eY6ZBn6meLK7d2f6e6X6HGWYF4
YD7/3fkw1bMaHqt+TXQoAXcGBdxgjjJ4nxI/hTZPrTHoftDb5gE7t+QgsdigyMR1
SFHbuvDvbP3Lc68wgNnsXiIOjdQafFBpN45gN+hKrsnV8nbB0lFiO/GHAAcgPhLP
/WSphHJ1znTKOJeVS104ijR+1fjKs4QECqOGWizLROxhVC5kPhHtTTne0ihGlkEQ
H+aC0yqBmqKT8lgS4CrNYW2L0i1t+32qiD1rA9IVhDDzlEJnHlmyr4VJbebYmJOl
SXn/tjC05JPleKQAdkOv4VFgFANnZwu4p+nU9mKo2d7D/84jfXUXQrwzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBOiDy2/RbR1jqjanLNi31nkGJKMB8GA1UdIwQY
MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt
OWQ3Zjg2ZjBkNDc3LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3
LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxp9lCvn
elxdPad2KInUC44A+Yqg9MISn5duwCCKIMgGShcwgmZFXPe47B1q/gmw4ZPIpVps
/CUHLnP0qYpjUjXG61B0DFDxxQVb/U4lv59EnEOGNS56+AdamPjC66qPZT2Jj1yB
7x1O0AtlTiMC6HCQve4GP6gEp/x5X8ZI8qWqs9o2VINxT0L/LXgzwkoGrOxxGJx8
BCQ+xQGyiJHRuQDbtXVGWxRIW/f8zHyOkbFe4UhwJxZ1JyBFfbSKxEGERp/PTxH6
ShMVRIW6Iw5Asw0XVi89UIteWHH511bNi/wy4k8qKQxFfcCjXmhdhGvMou0TxskK
Vju6m+EcYkJC8w==
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:17 2026 by rpki-client