Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: NizI03NsH+urNgBidfDsUsTGoQN6PBSb4+uZ9gFspMk=
Subject key identifier: C8:CE:14:6C:E0:70:F3:EE:B1:00:8C:C9:E1:F8:85:FA:16:63:45:E2
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01A08BD605A2AF3355B1952DC0A2DFBBB00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 12F8
Signing time: Thu 10 Sep 2026 15:00:54 +0000
Manifest this update: Thu 10 Sep 2026 15:00:54 +0000
Manifest next update: Fri 11 Sep 2026 15:00:54 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: QPa+CrFKTR+xIUlizmB7HFsHAooRrhw46Hrpo+uOlFQ=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:05:a2:af:33:55:b1:95:2d:c0:a2:df:bb:b0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Sep 10 15:00:54 2026 GMT
Not After : Sep 11 15:00:54 2026 GMT
Subject: CN=c8ce146ce070f3eeb1008cc9e1f885fa166345e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:a7:79:fc:05:b9:6b:7b:73:7b:90:52:4c:
ac:ea:67:f0:a1:02:6f:1d:b1:69:14:c3:45:e0:61:
02:cd:3a:7b:86:1e:1b:cb:4e:84:55:3c:7f:11:a0:
47:4b:a3:b1:47:2f:a4:51:1e:cc:c0:84:12:43:52:
e4:79:47:c7:a2:cb:ab:63:5f:6d:ea:c4:b2:5b:86:
18:b8:48:2f:30:9e:80:9e:0e:a5:e9:4f:f8:59:4a:
df:8b:ae:1c:24:4c:ac:5a:12:e2:d2:7b:16:e5:06:
f0:8c:93:da:81:45:34:4b:a1:c4:1d:6a:89:ad:39:
07:77:fd:4d:42:6d:8b:91:0c:c8:1f:0a:ef:4b:8e:
04:40:b9:32:75:da:e5:ff:53:75:d0:ac:36:75:53:
ff:ce:11:3a:a4:5d:ba:b8:76:e9:df:38:d2:d8:b2:
18:3a:c8:16:09:22:99:88:32:a7:b3:6e:5a:6e:b3:
35:4a:ff:54:86:2a:87:5e:a1:af:ef:01:56:8d:71:
51:6d:b7:54:26:79:6e:fa:28:b6:86:a8:52:69:a3:
6a:22:56:01:c3:16:06:0d:33:37:60:64:87:e5:23:
ef:a8:5a:1f:a3:b1:42:27:31:80:d1:22:a5:ba:a5:
45:7b:2d:87:37:e7:51:c2:89:84:1f:e3:24:57:4b:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CE:14:6C:E0:70:F3:EE:B1:00:8C:C9:E1:F8:85:FA:16:63:45:E2
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:75:be:86:9d:7c:b7:ab:39:6f:20:b3:61:30:0f:aa:70:
9f:bb:11:a4:97:59:21:c3:3b:32:36:73:2c:b2:c6:3c:75:8c:
39:b4:09:98:b4:91:f9:d6:ac:79:d6:ec:75:3e:5b:7c:89:5c:
f0:2f:da:3c:9a:ee:3e:5f:74:3f:dd:70:23:df:bd:8b:0f:8e:
27:1e:28:7c:6d:5d:d2:45:63:94:45:2c:7c:5e:cc:5f:c1:dc:
71:3a:0a:d0:0e:7e:6d:de:25:55:c9:60:04:48:c8:27:e6:6f:
f5:b3:62:67:a3:9a:c0:2f:34:7e:2d:3c:93:d0:06:db:55:6f:
b1:91:24:be:d1:ac:9c:38:af:9e:85:de:4d:7a:01:dc:11:94:
eb:6b:c0:3d:67:5b:1b:f7:d9:cb:ec:29:4f:d7:cc:94:82:d2:
fd:a7:41:28:6d:5c:b8:ae:6f:8e:fa:47:ea:6a:5c:fe:ad:8a:
07:45:ae:f7:a9:fc:13:f0:7f:56:2f:b5:13:b9:1e:87:7a:2d:
97:89:45:3b:36:e4:d5:df:57:20:ff:71:c4:a9:fe:e2:6b:c4:
92:42:4d:6c:66:f9:b2:48:26:0b:93:28:48:08:11:97:03:7f:
9e:20:be:69:23:0a:0f:2c:0d:be:7c:2f:0d:29:0e:07:fa:1f:
5b:d9:19:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1gWirzNVsZUtwKLfu7AKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjYwOTEwMTUwMDU0WhcNMjYwOTExMTUwMDU0WjAzMTEwLwYDVQQD
EyhjOGNlMTQ2Y2UwNzBmM2VlYjEwMDhjYzllMWY4ODVmYTE2NjM0NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b+nefwFuWt7c3uQUkys6mfwoQJv
HbFpFMNF4GECzTp7hh4by06EVTx/EaBHS6OxRy+kUR7MwIQSQ1LkeUfHosurY19t
6sSyW4YYuEgvMJ6Ang6l6U/4WUrfi64cJEysWhLi0nsW5QbwjJPagUU0S6HEHWqJ
rTkHd/1NQm2LkQzIHwrvS44EQLkyddrl/1N10Kw2dVP/zhE6pF26uHbp3zjS2LIY
OsgWCSKZiDKns25abrM1Sv9UhiqHXqGv7wFWjXFRbbdUJnlu+ii2hqhSaaNqIlYB
wxYGDTM3YGSH5SPvqFofo7FCJzGA0SKluqVFey2HN+dRwomEH+MkV0taPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjOFGzgcPPusQCMyeH4hfoWY0XiMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgx1voad
fLerOW8gs2EwD6pwn7sRpJdZIcM7MjZzLLLGPHWMObQJmLSR+dasedbsdT5bfIlc
8C/aPJruPl90P91wI9+9iw+OJx4ofG1d0kVjlEUsfF7MX8HccToK0A5+bd4lVclg
BEjIJ+Zv9bNiZ6OawC80fi08k9AG21VvsZEkvtGsnDivnoXeTXoB3BGU62vAPWdb
G/fZy+wpT9fMlILS/adBKG1cuK5vjvpH6mpc/q2KB0Wu96n8E/B/Vi+1E7keh3ot
l4lFOzbk1d9XIP9xxKn+4mvEkkJNbGb5skgmC5MoSAgRlwN/niC+aSMKDywNvnwv
DSkOB/ofW9kZow==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:03 2026 by rpki-client