Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File: LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier: gcf00VoPe//vIeyR2q+NT7SicSAUIvQpsYhkau23TjU=
Subject key identifier: 31:31:7A:00:17:6C:3F:75:89:6E:6D:5E:EE:9B:25:C5:51:82:E9:6D
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019CB24918EF9460F062F705E026C4373A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number: 36
Signing time: Tue 03 Mar 2026 06:01:00 +0000
Manifest this update: Tue 03 Mar 2026 06:01:00 +0000
Manifest next update: Wed 04 Mar 2026 06:01:00 +0000
Files and hashes: 1: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (hash: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=)
2: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: TCo8JTmP4rDgXW/Cj9uJSt16zI+CgX8mBHV7rxGl8EA=)
3: aXQLtcOwVN8fpurjCOFqsqSeizE.roa (hash: pI93Daua5V7da7QmDH9DHnKxunq64cV74XwDIWCy4RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:49:18:ef:94:60:f0:62:f7:05:e0:26:c4:37:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Mar 3 06:01:00 2026 GMT
Not After : Mar 4 06:01:00 2026 GMT
Subject: CN=31317a00176c3f75896e6d5eee9b25c55182e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:35:7c:48:a1:66:a2:70:fd:9a:ee:ad:53:
14:07:ff:9c:b6:85:b2:25:b4:5b:48:19:41:17:3f:
65:05:58:a2:ce:ca:33:57:8a:af:76:94:a8:0d:52:
a2:e0:9b:aa:92:2f:77:a2:77:e0:64:9d:e9:29:e3:
46:cf:c5:42:1d:fc:b6:fd:47:ce:ac:0e:f6:90:40:
d7:b9:71:56:40:20:56:1b:42:1b:d9:34:7f:6b:5a:
8c:b1:98:18:c1:90:48:1b:64:e3:4b:20:9e:8d:11:
3a:44:31:f0:1d:2e:b7:c7:6b:62:17:51:bc:01:d0:
f4:ad:60:a7:ee:f7:05:d5:2e:28:61:be:bd:68:d2:
99:39:73:93:22:5b:89:64:fc:4b:bf:28:d6:b8:00:
9d:2d:57:66:52:da:d4:6c:c6:50:33:45:24:ed:52:
f7:64:6d:e6:a1:c9:e3:64:6e:f9:d5:26:e4:24:d2:
b2:36:26:c9:cf:dc:fe:79:99:a6:4e:96:53:5b:14:
20:51:a1:64:b8:1b:2b:be:62:22:71:ab:5f:15:c8:
b4:04:a3:cd:c2:9b:e0:5c:22:db:23:e7:1b:b6:a9:
6b:fa:6e:29:8a:a4:e6:72:d0:97:7b:66:62:4b:bc:
ba:99:ee:dd:4c:07:8a:f9:d9:bf:4c:12:8a:18:32:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:7A:00:17:6C:3F:75:89:6E:6D:5E:EE:9B:25:C5:51:82:E9:6D
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:55:85:81:85:82:90:af:10:39:3d:f6:32:22:40:09:f1:
5b:ae:7b:55:67:51:a6:aa:6f:4c:50:64:29:b1:f8:63:fd:d1:
41:99:41:72:7e:d6:af:53:14:9d:68:c1:f8:1c:fc:07:69:9d:
14:9e:9a:74:35:35:6f:c0:dc:bd:e9:36:67:f0:64:57:08:ce:
0d:a8:c4:dd:28:ac:f8:cc:09:66:74:44:e6:11:7e:3c:52:a9:
67:96:11:f3:0e:38:c7:19:1f:48:ba:a5:2f:ff:4a:28:ff:30:
a3:14:ce:c0:15:a8:83:a4:de:94:3e:18:3d:50:2f:a0:15:d9:
6e:18:23:7b:f5:12:49:85:0d:5e:e3:a8:34:a2:2e:a9:37:bf:
c7:91:8f:43:1c:50:98:64:c1:9b:35:de:62:eb:68:e9:35:34:
1c:31:4b:83:68:b7:a8:05:b2:8e:63:72:f9:8e:e5:77:c8:22:
82:84:38:75:a5:81:d9:14:88:d1:c9:14:75:b0:fc:30:2a:f8:
9e:20:d3:0d:0c:e0:dd:5a:4b:64:a7:fe:73:d1:6e:ca:08:38:
1c:c3:8d:07:b7:b4:94:9a:b7:ad:de:53:1e:92:be:1b:a3:ea:
a8:df:3e:29:31:49:38:12:f2:84:47:a2:d5:39:e1:9f:dc:2c:
f7:fd:f4:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyySRjvlGDwYvcF4CbENzqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYwMzAzMDYwMTAwWhcNMjYwMzA0MDYwMTAwWjAzMTEwLwYDVQQD
EygzMTMxN2EwMDE3NmMzZjc1ODk2ZTZkNWVlZTliMjVjNTUxODJlOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2s1fEihZqJw/ZrurVMUB/+ctoWy
JbRbSBlBFz9lBViizsozV4qvdpSoDVKi4Juqki93onfgZJ3pKeNGz8VCHfy2/UfO
rA72kEDXuXFWQCBWG0Ib2TR/a1qMsZgYwZBIG2TjSyCejRE6RDHwHS63x2tiF1G8
AdD0rWCn7vcF1S4oYb69aNKZOXOTIluJZPxLvyjWuACdLVdmUtrUbMZQM0Uk7VL3
ZG3mocnjZG751SbkJNKyNibJz9z+eZmmTpZTWxQgUaFkuBsrvmIicatfFci0BKPN
wpvgXCLbI+cbtqlr+m4piqTmctCXe2ZiS7y6me7dTAeK+dm/TBKKGDJMeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDExegAXbD91iW5tXu6bJcVRgultMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX9VhYGF
gpCvEDk99jIiQAnxW657VWdRpqpvTFBkKbH4Y/3RQZlBcn7Wr1MUnWjB+Bz8B2md
FJ6adDU1b8Dcvek2Z/BkVwjODajE3Sis+MwJZnRE5hF+PFKpZ5YR8w44xxkfSLql
L/9KKP8woxTOwBWog6TelD4YPVAvoBXZbhgje/USSYUNXuOoNKIuqTe/x5GPQxxQ
mGTBmzXeYuto6TU0HDFLg2i3qAWyjmNy+Y7ld8gigoQ4daWB2RSI0ckUdbD8MCr4
niDTDQzg3VpLZKf+c9Fuygg4HMONB7e0lJq3rd5THpK+G6PqqN8+KTFJOBLyhEei
1Tnhn9ws9/30Dw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 08:27:53 2026 by rpki-client