Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: l5UhH+8JsCSxjZYdfS0+IM04Y9wcODtjyChxrwC6N+0=
Subject key identifier: C2:B8:1C:6B:2C:AB:E5:B4:DD:62:70:32:2E:C5:9E:05:05:AB:20:1E
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019D269620DC367D6D7E0580AD8BAE646704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 185A
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: XA5IvTsvnMJbfkqQ9dN9QJvqvVKlnPrEaCLJcYxpSjc=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:20:dc:36:7d:6d:7e:05:80:ad:8b:ae:64:67:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=c2b81c6b2cabe5b4dd6270322ec59e0505ab201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:fb:8f:a6:b2:5b:30:1c:86:d4:4e:77:93:
22:9d:3f:c9:95:ad:5b:61:8b:c8:ca:95:a6:de:83:
91:4a:54:6b:bd:32:0f:43:a1:a0:26:78:17:b0:4f:
dd:b5:29:fa:a1:2c:3d:ed:56:b5:c4:56:7f:63:dc:
9e:c3:53:63:9b:63:6b:f2:88:76:3f:46:d2:35:d3:
46:95:37:df:78:66:7f:65:3a:31:f3:dc:d4:e1:6d:
42:58:2c:3f:94:3c:ff:ad:73:0c:31:6f:95:4d:bf:
53:4a:b0:bd:8b:50:6c:2d:eb:82:2c:1b:93:ba:0a:
0b:40:1e:3e:95:69:21:ef:4e:e6:3f:d4:0d:26:41:
01:5a:5f:f1:75:17:03:b1:24:dc:08:89:4b:9e:bd:
d2:78:00:60:14:22:69:75:7d:08:57:42:5f:e2:0b:
98:1a:4f:ff:dc:8c:b1:e9:2d:38:0e:13:ff:f9:02:
5c:51:07:2e:8c:51:9e:0d:c5:2d:ad:66:5e:fd:30:
81:33:89:78:fb:a0:fc:0d:ef:26:8f:a9:46:e3:47:
95:fa:69:f3:92:56:65:36:fa:4d:6f:e9:cd:7f:c6:
24:53:d4:c1:0b:41:ab:ca:62:b7:6e:50:69:70:31:
6a:b1:94:38:66:50:ca:8e:6d:ef:dc:db:53:50:aa:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B8:1C:6B:2C:AB:E5:B4:DD:62:70:32:2E:C5:9E:05:05:AB:20:1E
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:ea:8a:f6:54:15:d7:f3:73:2c:01:08:3c:09:c7:ee:e0:
c0:f1:58:6f:c1:a0:0c:ac:af:c9:aa:27:69:e6:b7:19:d3:f0:
80:ea:44:16:a3:ac:26:49:18:72:31:50:3a:56:c1:91:4c:b2:
78:be:ed:c6:97:ae:87:05:1b:6c:cf:1d:5e:51:83:a2:6e:70:
42:7b:23:3d:2c:60:d0:db:05:6f:7d:11:d7:98:9c:a9:cb:7c:
21:8d:ce:c4:b6:be:15:a5:ce:81:6d:3c:4f:1d:f4:ff:68:f9:
e8:a6:dd:b6:82:28:64:f8:fe:77:90:71:5a:50:e5:71:da:30:
f3:c5:9d:87:54:6a:98:ec:14:df:d4:46:a7:b1:75:85:78:7e:
09:05:7d:82:6a:f3:ec:b4:07:5c:06:b2:83:ba:d6:be:67:19:
05:c8:4d:88:88:1d:82:67:fe:94:46:9f:37:f3:74:00:db:b7:
20:1b:71:83:e4:86:ef:a0:66:1c:e4:d6:c7:1d:3d:70:17:45:
11:d1:50:ff:58:67:d2:df:b9:7e:32:aa:cc:e4:5e:0e:97:c1:
50:f1:b6:11:ef:cf:f9:f3:07:35:b9:8f:30:eb:05:6e:b9:c5:
73:7a:c0:31:5b:c4:c4:71:c9:a9:11:67:a5:24:c9:b9:71:b2:
fd:82:13:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mliDcNn1tfgWArYuuZGcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjYwMzI1MjAwMTA2WhcNMjYwMzI2MjAwMTA2WjAzMTEwLwYDVQQD
EyhjMmI4MWM2YjJjYWJlNWI0ZGQ2MjcwMzIyZWM1OWUwNTA1YWIyMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlj7j6ayWzAchtROd5MinT/Jla1b
YYvIypWm3oORSlRrvTIPQ6GgJngXsE/dtSn6oSw97Va1xFZ/Y9yew1Njm2Nr8oh2
P0bSNdNGlTffeGZ/ZTox89zU4W1CWCw/lDz/rXMMMW+VTb9TSrC9i1BsLeuCLBuT
ugoLQB4+lWkh707mP9QNJkEBWl/xdRcDsSTcCIlLnr3SeABgFCJpdX0IV0Jf4guY
Gk//3Iyx6S04DhP/+QJcUQcujFGeDcUtrWZe/TCBM4l4+6D8De8mj6lG40eV+mnz
klZlNvpNb+nNf8YkU9TBC0GrymK3blBpcDFqsZQ4ZlDKjm3v3NtTUKqtAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK4HGssq+W03WJwMi7FngUFqyAeMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliLqivZU
FdfzcywBCDwJx+7gwPFYb8GgDKyvyaonaea3GdPwgOpEFqOsJkkYcjFQOlbBkUyy
eL7txpeuhwUbbM8dXlGDom5wQnsjPSxg0NsFb30R15icqct8IY3OxLa+FaXOgW08
Tx30/2j56KbdtoIoZPj+d5BxWlDlcdow88Wdh1RqmOwU39RGp7F1hXh+CQV9gmrz
7LQHXAayg7rWvmcZBchNiIgdgmf+lEafN/N0ANu3IBtxg+SG76BmHOTWxx09cBdF
EdFQ/1hn0t+5fjKqzOReDpfBUPG2Ee/P+fMHNbmPMOsFbrnFc3rAMVvExHHJqRFn
pSTJuXGy/YITyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:03 2026 by rpki-client