Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: qnQKI0c54I4yZckq5xraZxqpPMOL1HTSDlhmHufl/Hs=
Subject key identifier: FF:2D:94:8A:92:7D:9E:A4:F4:5C:DE:95:A0:2D:0D:0B:1E:C1:D5:31
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 01A1686B832ACDE2DE76BB9E253F7EE328D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 027C
Signing time: Fri 23 Oct 2026 11:00:38 +0000
Manifest this update: Fri 23 Oct 2026 11:00:38 +0000
Manifest next update: Sat 24 Oct 2026 11:00:38 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: KgNUUR68Yvvxmv5BrA6RmcFaakfnNeBPZK5ZcoaG1Ao=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:83:2a:cd:e2:de:76:bb:9e:25:3f:7e:e3:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Oct 23 11:00:38 2026 GMT
Not After : Oct 24 11:00:38 2026 GMT
Subject: CN=ff2d948a927d9ea4f45cde95a02d0d0b1ec1d531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:b0:06:24:ee:f8:8f:8e:8b:4b:1c:c2:e5:
24:64:1e:08:a8:fe:1c:0b:10:cf:64:42:41:a3:29:
78:2e:9d:72:f6:ba:00:d3:ac:b6:80:ff:73:dd:26:
e6:fd:ff:9d:d9:64:74:07:b0:c7:19:1d:10:e5:23:
53:79:24:0f:b9:2e:a1:b5:80:ab:29:1d:70:96:cd:
bf:a3:fe:89:56:9e:32:d0:1d:c9:26:aa:64:ce:6c:
54:61:43:aa:84:65:70:e6:2d:31:53:4e:dd:f7:dc:
1a:7d:45:a3:69:c5:32:41:a2:fd:97:08:40:03:9c:
75:9c:bf:17:8b:65:a1:51:d4:1b:4e:63:ae:92:da:
1d:a4:9d:f2:db:8e:c8:51:79:9a:43:e8:54:28:0e:
a4:12:1b:6d:23:aa:73:ed:ee:cb:c1:55:aa:53:30:
4c:e2:e5:05:9f:ec:72:c9:92:f0:6f:93:bb:b8:dc:
0e:7e:98:3c:b2:57:c8:46:78:9e:7b:e6:41:a8:8c:
63:a4:fd:2c:f8:55:7b:a2:a4:2f:59:8e:83:a3:08:
81:ba:70:95:e6:ae:b8:ba:e5:4b:ce:23:7b:b1:38:
ad:44:7a:39:d0:c5:bc:05:1a:bd:a2:50:bc:39:28:
8d:b8:7e:94:da:ee:8a:f6:d1:30:31:8c:0a:c0:05:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2D:94:8A:92:7D:9E:A4:F4:5C:DE:95:A0:2D:0D:0B:1E:C1:D5:31
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dc:26:2c:81:8c:11:4b:c8:26:46:93:0a:47:30:09:d7:9b:
19:2a:f5:3a:ed:05:3a:2e:60:70:f7:fd:32:07:e0:da:6b:5d:
18:2d:8a:27:f1:db:ba:92:bf:3b:c3:b7:14:3c:25:2a:f5:04:
30:7e:10:4a:65:59:98:bc:3d:19:5d:c8:16:41:5a:2f:53:e7:
0c:d8:bf:5e:e4:19:9f:c7:2a:0e:c7:a7:40:5f:50:83:5a:66:
ac:12:fc:03:8e:97:7b:e5:40:18:ca:5a:7e:89:1d:da:80:06:
06:96:99:e1:13:ea:21:5a:5c:f3:41:af:ec:dc:6f:14:f8:1f:
17:61:71:5e:22:33:c9:a8:69:c0:b6:bb:bb:41:46:da:b0:4e:
df:fe:e4:3f:2a:35:01:f5:6a:c1:e4:20:5c:7f:2d:ea:32:0a:
e3:fa:35:dd:04:3f:5b:25:c8:56:60:d5:00:56:15:53:ae:ae:
ad:ca:22:a4:d3:d5:4e:97:99:54:0c:e4:b0:c3:c6:f8:b2:a7:
df:dd:35:ef:99:e5:3f:7f:9c:f6:d6:30:42:09:84:69:8d:be:
ed:38:ba:cf:4e:9e:4c:4a:86:78:2c:89:b0:01:db:09:2a:7b:
b1:32:ff:4a:67:8b:e3:55:ce:63:2f:69:25:79:c3:2e:d5:a6:
5f:cb:5b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoa4MqzeLedrueJT9+4yjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYxMDIzMTEwMDM4WhcNMjYxMDI0MTEwMDM4WjAzMTEwLwYDVQQD
EyhmZjJkOTQ4YTkyN2Q5ZWE0ZjQ1Y2RlOTVhMDJkMGQwYjFlYzFkNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztOwBiTu+I+Oi0scwuUkZB4IqP4c
CxDPZEJBoyl4Lp1y9roA06y2gP9z3Sbm/f+d2WR0B7DHGR0Q5SNTeSQPuS6htYCr
KR1wls2/o/6JVp4y0B3JJqpkzmxUYUOqhGVw5i0xU07d99wafUWjacUyQaL9lwhA
A5x1nL8Xi2WhUdQbTmOuktodpJ3y247IUXmaQ+hUKA6kEhttI6pz7e7LwVWqUzBM
4uUFn+xyyZLwb5O7uNwOfpg8slfIRniee+ZBqIxjpP0s+FV7oqQvWY6DowiBunCV
5q64uuVLziN7sTitRHo50MW8BRq9olC8OSiNuH6U2u6K9tEwMYwKwAV/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8tlIqSfZ6k9FzelaAtDQsewdUxMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNwmLIGM
EUvIJkaTCkcwCdebGSr1Ou0FOi5gcPf9Mgfg2mtdGC2KJ/HbupK/O8O3FDwlKvUE
MH4QSmVZmLw9GV3IFkFaL1PnDNi/XuQZn8cqDsenQF9Qg1pmrBL8A46Xe+VAGMpa
fokd2oAGBpaZ4RPqIVpc80Gv7NxvFPgfF2FxXiIzyahpwLa7u0FG2rBO3/7kPyo1
AfVqweQgXH8t6jIK4/o13QQ/WyXIVmDVAFYVU66urcoipNPVTpeZVAzksMPG+LKn
390175nlP3+c9tYwQgmEaY2+7Ti6z06eTEqGeCyJsAHbCSp7sTL/SmeL41XOYy9p
JXnDLtWmX8tbpw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:35:32 2026 by rpki-client