Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: YLh9UPW/wkiM+xLmxP6N7oKkMMevJ4aqsgUky46St6Y=
Subject key identifier: B9:A9:BD:25:19:10:56:88:BE:6C:2F:85:5D:77:45:35:32:E1:A6:6B
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01A0FBD84BC18F3C7023A8AF40686F386804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1A86
Signing time: Fri 02 Oct 2026 09:00:51 +0000
Manifest this update: Fri 02 Oct 2026 09:00:51 +0000
Manifest next update: Sat 03 Oct 2026 09:00:51 +0000
Files and hashes: 1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: xiyaJMtDk6uXMIa5hDjYFKAE8+6oDu4brfXUYNVbQ68=)
7: PTxGryENH4mD20Ccz3IFvC8h74s.roa (hash: 3zw+NEm8FaAvgwVFX3LBOptNCA81ya5MsfkEuiCj8Eo=)
8: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:d8:4b:c1:8f:3c:70:23:a8:af:40:68:6f:38:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 2 09:00:51 2026 GMT
Not After : Oct 3 09:00:51 2026 GMT
Subject: CN=b9a9bd2519105688be6c2f855d77453532e1a66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:6b:24:56:67:da:fa:8e:1a:5f:13:0c:54:
07:32:94:36:7d:a5:e2:94:d7:c9:b0:68:63:80:95:
e9:69:3c:4a:ae:9d:ce:1e:06:45:e4:66:f9:86:70:
5f:2c:00:8e:bb:28:71:3f:e6:11:64:c7:c8:c7:48:
02:81:64:b0:db:8a:6b:33:34:37:d5:52:f3:30:c0:
2e:d9:04:eb:c2:b9:06:61:78:81:f2:53:08:72:a8:
69:26:2c:4d:88:df:66:86:d4:40:8a:48:91:0d:3d:
a6:76:6d:d4:b1:96:c9:fe:5b:37:43:88:f7:78:b1:
ba:03:7c:cb:7a:50:f9:03:70:15:17:9d:6f:08:5e:
3b:90:44:11:d8:a5:af:bd:2f:f1:f5:09:ea:42:08:
e5:5a:4c:12:52:e9:4c:c7:f8:a1:81:c3:37:f2:b3:
28:b5:54:10:20:76:b0:66:30:91:1a:ed:9b:1c:3c:
2c:66:61:a5:89:25:4f:bf:30:6a:2f:80:3f:6c:32:
eb:03:db:ef:5a:d7:41:97:13:ee:1f:18:ea:37:e1:
7d:5f:bd:eb:9d:ae:01:7a:cd:47:dc:2c:19:9d:11:
ad:8f:6b:d6:bb:31:7b:cc:ec:9f:fd:3d:d1:78:13:
90:63:9a:f2:c9:c3:35:a9:0d:62:96:2b:8d:0a:8c:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:BD:25:19:10:56:88:BE:6C:2F:85:5D:77:45:35:32:E1:A6:6B
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:8c:0f:e1:95:73:2c:96:2f:3b:9e:a9:41:af:b7:d7:d7:
66:26:c1:28:66:b6:d1:96:be:23:35:9b:33:25:c3:0b:4c:3d:
a4:7b:7e:f7:d0:ce:ca:38:96:28:c0:f3:db:83:ef:fc:d4:b3:
d2:2a:0d:24:c5:80:a4:36:9b:ab:bd:67:dd:0e:42:51:99:2f:
40:e4:0d:92:a5:68:6a:51:d0:e3:c2:04:6d:fa:be:e3:ea:20:
41:df:99:8b:2a:75:c2:7e:19:5b:bb:fa:6e:26:01:8b:6d:5f:
3e:a2:3d:cd:4b:25:54:67:06:fe:70:8c:4c:80:26:48:f7:91:
c3:c4:63:ab:b6:28:df:91:f1:a8:3e:78:b6:f0:ff:e5:8d:4c:
46:7c:c6:71:b8:52:62:0b:dc:aa:07:34:f4:ef:c9:b7:5c:01:
d7:8c:7f:cb:74:1d:64:c9:66:dd:e5:f5:93:3f:46:47:dc:7c:
e2:4d:b0:b8:ad:0d:2c:9c:77:1b:e9:fc:d6:f2:92:30:17:1c:
33:ef:dd:94:ea:f9:40:82:4c:52:21:25:a7:b4:97:43:e5:df:
ac:cd:66:e3:37:bc:d8:1e:82:b8:97:cd:7b:a5:d4:52:7a:3d:
8f:b8:bd:26:f9:74:0a:60:a1:f8:be:f4:3d:b4:88:38:5a:71:
f1:66:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:32:01 2026 by rpki-client