Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: KoYwL4CjjPyfMdGMFrdCFuln2T0DBpknzAv10HANQMU=
Subject key identifier: F1:27:E6:72:BF:14:AB:1C:3B:73:EC:39:31:AE:15:CA:D9:57:EB:5A
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019E9BF271023852A900156D2FB89F001278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 0109
Signing time: Sat 06 Jun 2026 08:00:17 +0000
Manifest this update: Sat 06 Jun 2026 08:00:17 +0000
Manifest next update: Sun 07 Jun 2026 08:00:17 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: N3MMDvEKn0XVcU5+g1Y6JQqj0ipg5eKCUsU8LgkTFiY=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:71:02:38:52:a9:00:15:6d:2f:b8:9f:00:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Jun 6 08:00:17 2026 GMT
Not After : Jun 7 08:00:17 2026 GMT
Subject: CN=f127e672bf14ab1c3b73ec3931ae15cad957eb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:9d:46:78:cc:10:de:fc:6b:9f:ea:bd:6f:
71:7f:ef:e8:c3:d4:7a:c2:77:77:f7:10:bf:be:9b:
1c:2c:74:30:e1:ab:6d:b5:37:6a:5c:ea:b5:66:9d:
31:12:27:d3:44:35:fa:09:db:62:32:69:a4:e7:73:
ff:81:18:5e:7c:ab:2b:74:0a:23:18:27:42:a2:7f:
95:56:da:28:a8:05:70:4c:e5:f8:97:65:94:91:97:
e0:3b:68:25:20:b9:d4:a3:33:97:39:3b:b0:cd:5a:
7c:95:c1:7d:8e:20:8e:1a:d9:c7:f8:00:f0:20:f4:
5a:b5:c2:c5:de:ee:2b:95:96:db:52:95:b2:dd:e8:
f5:a1:61:9b:8d:2e:c2:64:20:ab:59:aa:b5:17:ae:
e9:aa:a1:1b:e5:56:cb:b1:44:ef:0c:0d:00:55:ad:
93:c5:27:ed:94:d6:bf:b8:cf:54:a5:86:56:d6:2a:
38:19:00:9c:55:08:5c:d9:79:f0:8f:e1:f7:2c:1d:
61:78:e6:1a:ef:9f:bf:df:0f:b5:4b:06:97:89:db:
4d:5b:99:c9:83:dd:e7:bc:07:2e:46:ad:7a:2f:5e:
b7:07:79:be:13:16:40:15:36:f5:ca:52:2b:57:a0:
cd:9f:b7:84:49:8a:54:d5:16:3f:4c:1b:46:49:f7:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:E6:72:BF:14:AB:1C:3B:73:EC:39:31:AE:15:CA:D9:57:EB:5A
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:a6:2d:fb:b0:fc:db:bd:44:c4:51:4f:f1:6f:90:78:df:
79:2e:ee:4b:da:e5:b5:cb:12:75:19:dd:95:27:24:10:1a:b8:
1b:05:2f:d1:d2:e8:1e:73:8d:05:76:22:5f:86:32:98:d9:12:
a8:6f:36:0e:72:5c:bb:7f:7e:89:a1:3a:2b:45:03:07:65:37:
0f:fc:03:09:ea:ab:97:d8:a8:d2:4d:aa:bc:07:2e:62:fc:19:
46:2f:51:65:b7:1e:c6:52:66:4b:06:e5:08:ef:1c:b2:aa:4d:
e2:22:10:78:c1:bd:16:08:e5:9a:29:7a:b8:bc:7a:59:2e:b5:
21:60:2d:e0:2b:6f:9a:f2:b8:fa:11:c3:b6:42:32:84:c0:ce:
9c:b9:6f:b8:a1:56:57:7f:d9:fc:38:17:0a:21:33:98:a8:2f:
08:af:6e:92:cf:55:4e:56:08:7c:3e:2b:d1:bd:05:16:66:76:
91:7e:70:77:30:38:85:7b:4a:9e:ac:7d:87:d3:d4:67:b5:ac:
cd:2a:b7:41:21:e5:98:61:65:83:3a:66:08:87:be:81:2e:6b:
1d:a9:cf:5b:d5:02:43:cf:46:a1:83:bd:04:eb:06:0f:24:f5:
1e:96:21:e3:91:cc:d7:c5:e0:ce:e6:0f:f1:29:8e:18:f1:c8:
ee:b7:d2:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8nECOFKpABVtL7ifABJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwNjA2MDgwMDE3WhcNMjYwNjA3MDgwMDE3WjAzMTEwLwYDVQQD
EyhmMTI3ZTY3MmJmMTRhYjFjM2I3M2VjMzkzMWFlMTVjYWQ5NTdlYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv2dRnjMEN78a5/qvW9xf+/ow9R6
wnd39xC/vpscLHQw4atttTdqXOq1Zp0xEifTRDX6CdtiMmmk53P/gRhefKsrdAoj
GCdCon+VVtooqAVwTOX4l2WUkZfgO2glILnUozOXOTuwzVp8lcF9jiCOGtnH+ADw
IPRatcLF3u4rlZbbUpWy3ej1oWGbjS7CZCCrWaq1F67pqqEb5VbLsUTvDA0AVa2T
xSftlNa/uM9UpYZW1io4GQCcVQhc2Xnwj+H3LB1heOYa75+/3w+1SwaXidtNW5nJ
g93nvAcuRq16L163B3m+ExZAFTb1ylIrV6DNn7eESYpU1RY/TBtGSfcAmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEn5nK/FKscO3PsOTGuFcrZV+taMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC2mLfuw
/Nu9RMRRT/FvkHjfeS7uS9rltcsSdRndlSckEBq4GwUv0dLoHnONBXYiX4YymNkS
qG82DnJcu39+iaE6K0UDB2U3D/wDCeqrl9io0k2qvAcuYvwZRi9RZbcexlJmSwbl
CO8csqpN4iIQeMG9Fgjlmil6uLx6WS61IWAt4CtvmvK4+hHDtkIyhMDOnLlvuKFW
V3/Z/DgXCiEzmKgvCK9uks9VTlYIfD4r0b0FFmZ2kX5wdzA4hXtKnqx9h9PUZ7Ws
zSq3QSHlmGFlgzpmCIe+gS5rHanPW9UCQ89GoYO9BOsGDyT1HpYh45HM18XgzuYP
8SmOGPHI7rfSVw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:59:54 2026 by rpki-client