Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: t+zwhaNbPwuQMhwuA9Y9Cz6hUT2Ud2PB5oERc+7Vt9g=
Subject key identifier: 10:DA:DB:13:25:D1:ED:34:F0:AC:1E:DB:B7:C3:19:66:49:33:2B:A2
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019D254C4FE51268F5E85588383D3EDB7D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: A6
Signing time: Wed 25 Mar 2026 14:00:51 +0000
Manifest this update: Wed 25 Mar 2026 14:00:51 +0000
Manifest next update: Thu 26 Mar 2026 14:00:51 +0000
Files and hashes: 1: Lj6y-FZHBk0nXBCvZAVa90vB490.asa (hash: LRhgAzghWUw9wnefJgk4F6ixrePoE4mvfQqraKNwKAQ=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: liyUfunBGvuz3u4BYQOzHgDo7vsmKzJggbqSbat+de4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:4f:e5:12:68:f5:e8:55:88:38:3d:3e:db:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Mar 25 14:00:51 2026 GMT
Not After : Mar 26 14:00:51 2026 GMT
Subject: CN=10dadb1325d1ed34f0ac1edbb7c3196649332ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:0f:15:92:fa:2a:91:9b:04:8f:5d:d8:a6:
bb:94:41:80:1b:07:92:4b:e1:47:07:e3:05:58:45:
2a:54:55:5e:c8:dc:0d:c9:40:cb:69:12:7d:38:1e:
74:85:39:d4:66:4a:87:4c:9a:5e:21:47:87:4f:df:
91:85:ae:7a:e4:be:cf:3d:08:cd:1c:1b:72:88:e0:
cf:8f:6f:ee:d8:c7:91:aa:01:c0:08:31:0e:3d:17:
ae:45:aa:8c:1e:18:e1:ca:11:9c:21:a0:23:fa:30:
e0:60:a1:bc:78:a7:dc:dd:ad:dd:fe:fb:a5:07:51:
02:7d:06:47:34:a3:08:64:fb:4e:91:e2:fe:71:5b:
25:c4:45:37:1a:32:7e:c1:71:97:0f:44:ed:59:21:
42:63:af:57:f3:57:0a:ef:05:d6:7d:b4:2b:8e:ed:
52:95:c6:1c:62:d5:2b:2e:cd:a4:7c:91:30:14:cc:
20:c9:a7:32:1a:23:26:1e:52:3f:a9:e5:7b:5e:59:
03:30:79:5d:63:71:db:69:da:f1:e4:b7:2b:04:b1:
19:58:a9:29:89:69:b5:65:78:f1:2d:47:2e:7a:70:
e9:44:ac:09:cc:fc:eb:f8:94:d4:f8:e7:1e:e0:e4:
c5:1d:1f:08:8c:7b:7f:c4:cd:e7:4b:22:a6:28:98:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:DB:13:25:D1:ED:34:F0:AC:1E:DB:B7:C3:19:66:49:33:2B:A2
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:eb:bc:15:bf:b9:b1:d6:37:3e:91:55:46:7c:54:98:2f:
87:68:b0:be:69:50:e1:61:36:26:b5:21:1c:80:ec:c2:d3:3b:
ea:fa:95:e9:d6:5a:95:96:48:d3:d2:9b:f4:04:aa:91:ae:49:
00:94:f6:b5:e5:69:b9:e2:1c:36:a2:78:97:83:04:ac:92:71:
b9:fd:4c:b9:16:49:58:ad:c4:6e:79:ad:21:25:3d:72:80:7b:
d1:fb:fb:d7:11:93:e9:a4:4e:4e:14:0c:04:0a:e6:a1:32:64:
e7:7f:fe:45:e8:e8:38:7b:53:58:ee:b4:71:42:7a:5e:49:47:
6b:64:4c:ca:18:23:0a:81:3d:f4:98:e1:36:04:db:3b:15:e6:
cf:f3:5e:fe:d1:0d:fe:dd:04:bf:78:68:a1:43:ab:fc:df:24:
5c:d5:7d:cc:f7:00:a8:b3:69:21:7e:a7:62:bc:9d:fc:bf:3e:
59:be:46:79:45:bd:ac:cb:4d:2b:ad:64:2c:25:ad:c9:80:a0:
63:76:6e:95:c8:9a:b3:d5:fb:3d:78:5e:d1:78:3c:d6:f9:08:
e9:4a:a8:fe:18:6e:c5:ee:dd:bc:83:8f:f7:7e:aa:43:17:91:
e3:4c:96:31:33:ea:6d:8a:d3:d9:96:06:6e:11:62:8b:ca:40:
b1:56:63:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTE/lEmj16FWIOD0+230fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTJiNmE2ZjM4N2JlYTZlOGJkMmU5NTJhMjM2OTA5Mzky
YjA3MTMwHhcNMjYwMzI1MTQwMDUxWhcNMjYwMzI2MTQwMDUxWjAzMTEwLwYDVQQD
EygxMGRhZGIxMzI1ZDFlZDM0ZjBhYzFlZGJiN2MzMTk2NjQ5MzMyYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA708PFZL6KpGbBI9d2Ka7lEGAGweS
S+FHB+MFWEUqVFVeyNwNyUDLaRJ9OB50hTnUZkqHTJpeIUeHT9+Rha565L7PPQjN
HBtyiODPj2/u2MeRqgHACDEOPReuRaqMHhjhyhGcIaAj+jDgYKG8eKfc3a3d/vul
B1ECfQZHNKMIZPtOkeL+cVslxEU3GjJ+wXGXD0TtWSFCY69X81cK7wXWfbQrju1S
lcYcYtUrLs2kfJEwFMwgyacyGiMmHlI/qeV7XlkDMHldY3Hbadrx5LcrBLEZWKkp
iWm1ZXjxLUcuenDpRKwJzPzr+JTU+Oce4OTFHR8IjHt/xM3nSyKmKJhBEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDa2xMl0e008Kwe27fDGWZJMyuiMB8GA1UdIwQY
MBaAFJWitqbzh76m6L0ulSojaQk5KwcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQt
NWFhOWE0OWQzYjllLzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQtNWFhOWE0OWQzYjll
LzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNXrvBW/
ubHWNz6RVUZ8VJgvh2iwvmlQ4WE2JrUhHIDswtM76vqV6dZalZZI09Kb9ASqka5J
AJT2teVpueIcNqJ4l4MErJJxuf1MuRZJWK3EbnmtISU9coB70fv71xGT6aROThQM
BArmoTJk53/+RejoOHtTWO60cUJ6XklHa2RMyhgjCoE99JjhNgTbOxXmz/Ne/tEN
/t0Ev3hooUOr/N8kXNV9zPcAqLNpIX6nYryd/L8+Wb5GeUW9rMtNK61kLCWtyYCg
Y3Zulcias9X7PXhe0Xg81vkI6Uqo/hhuxe7dvIOP936qQxeR40yWMTPqbYrT2ZYG
bhFii8pAsVZj7Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:45 2026 by rpki-client