Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: yh3zWp/FV7TXL6s7sc6fgL+zCvic/jz4NDg4kL6T12M=
Subject key identifier: 9D:FE:9D:80:3F:B0:30:51:A6:1C:D5:11:3C:40:8B:13:E0:E7:D5:0D
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01A18E9DB2701FE63351783E4FD35EAD7BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 137E
Signing time: Fri 30 Oct 2026 21:01:01 +0000
Manifest this update: Fri 30 Oct 2026 21:01:01 +0000
Manifest next update: Sat 31 Oct 2026 21:01:01 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: s8KuUX2CfFHMf+5f/o1inx007WMnhx+mVBRPNaKyxlk=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:b2:70:1f:e6:33:51:78:3e:4f:d3:5e:ad:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Oct 30 21:01:01 2026 GMT
Not After : Oct 31 21:01:01 2026 GMT
Subject: CN=9dfe9d803fb03051a61cd5113c408b13e0e7d50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:a4:f4:ae:ae:21:c3:50:9f:ad:12:c2:7e:
21:01:9b:d7:14:d7:ef:0a:74:98:de:cc:64:75:a3:
17:2f:f5:32:97:bc:db:ff:0a:7e:f3:db:22:a0:d5:
f3:40:ca:50:76:aa:a5:fc:bf:31:e1:c9:d4:d1:7d:
9f:80:80:99:2b:42:1b:ad:0d:84:8b:11:56:93:78:
6f:99:ed:37:54:7e:42:c6:74:94:67:30:19:f1:3d:
f5:8b:c5:a0:1a:e9:8f:48:15:90:ab:b7:00:0a:9f:
9f:1a:23:be:09:4b:5b:31:52:da:ac:9b:5a:84:ba:
4f:28:06:25:b5:bc:fb:fa:e1:8a:31:84:5d:03:be:
1c:2d:24:28:6e:63:12:ea:d0:03:31:5d:8a:14:c6:
8d:e0:54:2b:24:4f:a9:60:be:94:b7:d3:59:67:a0:
79:7e:db:41:43:87:00:db:20:0b:5e:fa:89:60:c2:
dc:8f:98:25:b4:b0:93:5b:86:ae:6e:aa:b7:7a:aa:
e8:16:b6:86:2b:4e:ea:ad:cc:a6:94:4e:66:8b:80:
c6:12:e9:fd:02:a5:2d:22:59:12:f8:c2:62:08:0d:
15:2e:dc:53:a6:84:07:d2:5d:34:23:95:59:36:5d:
a4:c5:a0:d4:ac:ce:bb:dd:01:f2:96:ea:5e:70:05:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:9D:80:3F:B0:30:51:A6:1C:D5:11:3C:40:8B:13:E0:E7:D5:0D
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f9:ec:82:d7:51:dc:53:01:00:a3:b5:3b:14:7d:01:6a:1d:
00:e0:df:88:8e:a9:bf:0e:92:c0:52:a6:1f:91:34:55:14:59:
e1:ac:55:a0:9b:59:38:cd:e7:a1:74:01:3a:4b:02:63:ad:49:
f0:e2:47:b0:f9:21:d4:0a:c3:40:42:83:73:01:8d:71:31:cb:
e0:ef:72:90:b8:0f:38:6b:dc:89:92:9d:17:d8:ee:9a:f4:d3:
18:43:ce:23:29:1e:4b:c2:65:29:3d:c6:ca:8c:ee:a5:5a:10:
61:45:60:62:e7:96:e4:a9:80:74:38:8b:62:a1:05:05:2f:80:
0f:a1:03:95:14:39:2b:30:77:2d:26:ff:23:ce:12:2b:d7:7c:
77:f8:cf:41:07:c9:26:e2:62:3f:de:63:6e:83:85:1d:5d:5e:
bb:18:19:c4:e8:0b:50:7f:4b:3f:a8:a5:f8:2c:2b:9a:bb:8e:
bf:f6:67:35:55:d3:a7:2f:c1:63:9a:e4:26:60:19:e4:26:9f:
b2:9a:46:51:1e:c1:c5:23:e9:13:5a:6c:30:6f:03:a5:c0:c6:
dd:c4:b2:c1:69:88:6c:a3:ab:d1:ba:9b:f3:b1:b9:30:c7:62:
e9:b9:3a:71:e7:1d:bb:eb:d3:59:7b:d5:f3:7d:1c:76:e5:2b:
65:b1:ca:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOnbJwH+YzUXg+T9NerXvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjYxMDMwMjEwMTAxWhcNMjYxMDMxMjEwMTAxWjAzMTEwLwYDVQQD
Eyg5ZGZlOWQ4MDNmYjAzMDUxYTYxY2Q1MTEzYzQwOGIxM2UwZTdkNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw76k9K6uIcNQn60Swn4hAZvXFNfv
CnSY3sxkdaMXL/Uyl7zb/wp+89sioNXzQMpQdqql/L8x4cnU0X2fgICZK0IbrQ2E
ixFWk3hvme03VH5CxnSUZzAZ8T31i8WgGumPSBWQq7cACp+fGiO+CUtbMVLarJta
hLpPKAYltbz7+uGKMYRdA74cLSQobmMS6tADMV2KFMaN4FQrJE+pYL6Ut9NZZ6B5
fttBQ4cA2yALXvqJYMLcj5gltLCTW4aubqq3eqroFraGK07qrcymlE5mi4DGEun9
AqUtIlkS+MJiCA0VLtxTpoQH0l00I5VZNl2kxaDUrM673QHylupecAVFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3+nYA/sDBRphzVETxAixPg59UNMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfnsgtdR
3FMBAKO1OxR9AWodAODfiI6pvw6SwFKmH5E0VRRZ4axVoJtZOM3noXQBOksCY61J
8OJHsPkh1ArDQEKDcwGNcTHL4O9ykLgPOGvciZKdF9jumvTTGEPOIykeS8JlKT3G
yozupVoQYUVgYueW5KmAdDiLYqEFBS+AD6EDlRQ5KzB3LSb/I84SK9d8d/jPQQfJ
JuJiP95jboOFHV1euxgZxOgLUH9LP6il+CwrmruOv/ZnNVXTpy/BY5rkJmAZ5Caf
sppGUR7BxSPpE1psMG8DpcDG3cSywWmIbKOr0bqb87G5MMdi6bk6cecdu+vTWXvV
830cduUrZbHKoA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:54 2026 by rpki-client