Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
File: LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft (raw, json)
Hash identifier: xn2lnMpXwDPxD9rWJdhdhbsvgV1x/xGBQKm/ArcayAI=
Subject key identifier: E4:E8:C4:2A:A7:A6:4A:F9:57:6C:7D:F8:6B:29:4F:AD:01:B1:28:E9
Authority key identifier: 2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
Certificate issuer: /CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Certificate serial: 019F954A4450B7498526418367915A86A1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:39 +0000
Manifest this update: Fri 24 Jul 2026 18:01:39 +0000
Manifest next update: Sat 25 Jul 2026 18:01:39 +0000
Files and hashes: 1: AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa (hash: DWt+8Og+H/O75gxgwKwydNR/wXC9yr0q3HVKTxoYYIE=)
2: LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl (hash: EFHT1w/wyAkYDzNfzYQh4wr8tfgiRkYIix6r50hUf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:44:50:b7:49:85:26:41:83:67:91:5a:86:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Validity
Not Before: Jul 24 18:01:39 2026 GMT
Not After : Jul 25 18:01:39 2026 GMT
Subject: CN=e4e8c42aa7a64af9576c7df86b294fad01b128e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:1d:be:0b:6d:65:ec:7e:32:86:0a:68:f5:
2e:78:df:39:2f:70:5a:cf:dd:e4:e6:c0:1e:7d:1c:
ea:6f:d6:e0:f2:49:87:59:0e:65:c7:38:bb:11:d3:
a7:11:80:c9:47:0b:f8:44:7f:82:a6:36:c2:90:be:
21:db:46:26:0d:a5:17:e9:06:96:15:8e:31:28:61:
07:2f:9b:4f:54:bb:98:6c:06:b8:ad:06:63:cd:c4:
73:d0:85:1e:47:b0:32:e4:38:e8:41:aa:4a:6b:76:
ae:04:c9:9b:09:e2:07:dd:47:7c:20:39:cb:d7:61:
ac:f6:a1:47:98:55:36:1b:29:29:2e:5f:85:6e:4a:
26:82:6c:78:29:9f:7e:31:74:b0:5d:bc:c5:b4:b3:
2f:77:44:af:39:b8:12:a9:ad:0a:ea:0d:1b:0d:fc:
ba:9b:3c:91:27:ea:3b:ec:ea:94:af:31:78:3f:04:
c3:06:39:a5:06:23:46:b7:2d:f5:cb:e6:af:ca:bd:
3b:78:f2:18:95:39:46:55:f3:86:cd:e7:e1:90:dd:
0c:9b:c0:bb:68:29:44:b6:5d:8d:3e:d4:6d:94:33:
83:6c:23:90:74:03:84:dd:d2:b9:88:2d:44:3a:71:
72:8d:11:9f:e4:a5:a7:73:fc:1b:e3:71:39:a7:2f:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:C4:2A:A7:A6:4A:F9:57:6C:7D:F8:6B:29:4F:AD:01:B1:28:E9
X509v3 Authority Key Identifier:
keyid:2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:52:34:a9:5f:5b:2a:02:22:8a:49:d0:df:fc:13:28:51:37:
90:ad:0d:51:1e:12:09:2b:21:e5:83:c5:8f:70:81:76:b5:f9:
22:2f:fc:3c:23:e6:ba:3d:21:d9:64:59:b5:1a:4c:ea:5c:a6:
10:48:44:6e:2a:7a:6d:21:9a:b1:3b:3c:22:35:3c:0e:dd:e0:
e7:1e:a2:99:ca:e1:fc:46:47:7f:38:29:2a:4d:ac:ea:54:f4:
a9:8a:8b:3e:52:ba:60:4e:83:b1:00:2f:c1:c2:83:78:3c:99:
57:72:8b:8d:5c:23:20:04:8d:6c:6e:17:62:d0:c7:9d:39:13:
55:f9:0c:2f:4f:cf:9a:0a:fb:a8:aa:fc:f2:4c:51:f9:1e:8c:
e0:c8:68:a4:ea:8e:fa:a6:04:ae:74:79:05:b1:4e:06:7a:d6:
ab:40:18:97:00:cb:2f:13:87:be:53:15:7a:8d:ee:59:03:f1:
0e:9b:3e:68:00:3a:36:29:73:95:99:d9:17:cd:e7:88:58:60:
a3:4d:e3:69:9d:4a:1d:8a:88:48:61:b8:8b:ec:16:c8:88:5a:
a3:21:92:25:28:49:4e:71:1a:1d:38:4d:de:c6:e5:9a:4d:07:
59:d9:13:7e:55:df:58:b4:87:29:f6:01:cb:b8:20:3e:5c:e7:
fb:14:f9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSkRQt0mFJkGDZ5FahqGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWVjMjdkZGQzZTA1ZDE0ZGYzMWY5ZGY3ODVjZDNmODcx
Y2ExN2QwHhcNMjYwNzI0MTgwMTM5WhcNMjYwNzI1MTgwMTM5WjAzMTEwLwYDVQQD
EyhlNGU4YzQyYWE3YTY0YWY5NTc2YzdkZjg2YjI5NGZhZDAxYjEyOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl90dvgttZex+MoYKaPUueN85L3Ba
z93k5sAefRzqb9bg8kmHWQ5lxzi7EdOnEYDJRwv4RH+CpjbCkL4h20YmDaUX6QaW
FY4xKGEHL5tPVLuYbAa4rQZjzcRz0IUeR7Ay5DjoQapKa3auBMmbCeIH3Ud8IDnL
12Gs9qFHmFU2GykpLl+Fbkomgmx4KZ9+MXSwXbzFtLMvd0SvObgSqa0K6g0bDfy6
mzyRJ+o77OqUrzF4PwTDBjmlBiNGty31y+avyr07ePIYlTlGVfOGzefhkN0Mm8C7
aClEtl2NPtRtlDODbCOQdAOE3dK5iC1EOnFyjRGf5KWnc/wb43E5py/yBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOToxCqnpkr5V2x9+GspT60BsSjpMB8GA1UdIwQY
MBaAFC0ewn3dPgXRTfMfnfeFzT+HHKF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFI3Q2ZkMC1CZEZOOHgtZDk0WE5QNGNjb1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2It
OGY1ZjcxM2IzN2FhLzEvTFI3Q2ZkMC1CZEZOOHgtZDk0WE5QNGNjb1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2ItOGY1ZjcxM2IzN2Fh
LzEvTFI3Q2ZkMC1CZEZOOHgtZDk0WE5QNGNjb1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVI0qV9b
KgIiiknQ3/wTKFE3kK0NUR4SCSsh5YPFj3CBdrX5Ii/8PCPmuj0h2WRZtRpM6lym
EEhEbip6bSGasTs8IjU8Dt3g5x6imcrh/EZHfzgpKk2s6lT0qYqLPlK6YE6DsQAv
wcKDeDyZV3KLjVwjIASNbG4XYtDHnTkTVfkML0/Pmgr7qKr88kxR+R6M4MhopOqO
+qYErnR5BbFOBnrWq0AYlwDLLxOHvlMVeo3uWQPxDps+aAA6NilzlZnZF83niFhg
o03jaZ1KHYqISGG4i+wWyIhaoyGSJShJTnEaHThN3sblmk0HWdkTflXfWLSHKfYB
y7ggPlzn+xT5qA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:56 2026 by rpki-client