Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: /f6aXYBRkJiuqKsFTBLqow+V/OOpMLS+xIcuQY9SzpI=
Subject key identifier: A6:19:78:A8:C5:5F:7F:B4:1D:6A:52:8F:4C:F9:1C:4A:99:A4:7F:3F
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 019F91DB04DECB0B71469BB4C2D4D96201F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 176E
Signing time: Fri 24 Jul 2026 02:01:17 +0000
Manifest this update: Fri 24 Jul 2026 02:01:17 +0000
Manifest next update: Sat 25 Jul 2026 02:01:17 +0000
Files and hashes: 1: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: Uf6869niS2+f41aTTekLABBzpi2+f5CQbjHpK1YxJWY=)
2: y9oIavvpiMrvnU2r-vzh4RLXZAM.roa (hash: 0GqP4mZRL5cj50tTVSJxQrctxG11Svu03EroPoTMkWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:04:de:cb:0b:71:46:9b:b4:c2:d4:d9:62:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jul 24 02:01:17 2026 GMT
Not After : Jul 25 02:01:17 2026 GMT
Subject: CN=a61978a8c55f7fb41d6a528f4cf91c4a99a47f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:b7:38:74:04:bc:09:21:e7:28:36:7c:7c:
c9:39:c7:8c:21:c3:2d:83:08:3e:b9:05:be:fd:e2:
0c:1d:78:a9:b6:d3:4d:b2:c1:b6:da:10:53:5c:30:
8a:e4:36:7c:23:30:10:ce:fa:89:b5:ac:ca:25:7e:
bc:2e:59:77:6f:2c:59:4e:6c:13:48:dc:fe:6c:8b:
92:4a:a2:6b:dd:84:2b:56:13:e4:f9:09:a7:e6:a5:
60:c7:98:95:d1:53:10:14:d8:c5:c0:81:c9:a9:18:
ee:e3:25:21:8e:bd:bb:a2:16:e1:83:64:6b:f0:ff:
e6:20:58:5f:55:c4:bc:13:4d:81:dd:3f:0e:a6:4b:
06:e2:d0:8a:fd:e9:06:31:95:a8:37:fd:ae:d6:d0:
41:d9:a7:ef:c5:80:5e:c2:1c:dc:d0:eb:ed:7d:56:
0e:67:81:dd:06:6d:5d:2d:fe:fd:7a:61:cd:51:15:
3b:53:67:5e:a8:37:a6:7c:65:7d:5b:7f:9a:7b:38:
74:6e:87:f0:ca:86:07:e7:5d:0a:19:d2:70:d1:77:
aa:ac:21:37:78:6a:3a:9a:d6:32:da:ab:7e:0e:b4:
83:75:96:43:1a:a7:bf:4d:06:da:8e:d7:1a:04:d2:
b8:0e:2c:59:62:3e:8a:df:66:5a:2d:ff:31:c5:9d:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:78:A8:C5:5F:7F:B4:1D:6A:52:8F:4C:F9:1C:4A:99:A4:7F:3F
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:4a:04:59:8a:6a:d5:1a:5b:1f:26:a5:3e:70:29:81:65:
db:30:c6:a4:49:60:31:ec:d6:35:7d:18:c3:37:10:38:29:53:
38:e0:1f:8a:a0:34:cf:ba:61:91:d1:f4:c4:2e:d1:19:d2:e8:
a3:cf:4a:dc:4d:a9:56:07:13:d3:a3:59:2d:48:d6:67:65:8b:
d7:86:89:23:7d:d9:42:1a:c0:1e:df:e7:99:46:c8:41:27:c2:
76:bd:a9:f7:cb:d3:39:78:f3:dd:c7:a7:01:d1:1f:56:c3:da:
bc:90:c0:be:d0:ae:be:da:0d:82:0e:c8:e6:48:ce:07:aa:b7:
a5:08:6f:6f:61:0c:4c:07:f7:b2:17:83:77:75:63:74:89:84:
ba:37:93:28:e8:98:c4:a8:2b:50:07:e2:2b:c4:31:4a:d3:a9:
a7:06:59:b5:8d:20:59:4c:87:4d:f6:ab:a2:f0:a6:11:39:73:
26:53:78:21:56:ab:f0:21:4d:d0:f0:15:4c:eb:e4:6c:43:cd:
fd:e9:0d:88:63:c9:d4:68:c4:fe:7d:5c:e5:59:f6:4d:51:f5:
9e:2a:19:fc:09:90:8b:ee:a3:34:6c:a6:42:0d:c7:8f:f5:f9:
47:1d:62:06:1c:ef:2c:9d:d1:60:b6:34:23:7e:f7:e7:64:b9:
be:3d:2d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2wTeywtxRpu0wtTZYgH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMGFjOGQzNjkwNTExMjAzYTMxZWY3ODVlNmQxYzQ0Mzky
Y2EyOGIwHhcNMjYwNzI0MDIwMTE3WhcNMjYwNzI1MDIwMTE3WjAzMTEwLwYDVQQD
EyhhNjE5NzhhOGM1NWY3ZmI0MWQ2YTUyOGY0Y2Y5MWM0YTk5YTQ3ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVW3OHQEvAkh5yg2fHzJOceMIcMt
gwg+uQW+/eIMHXipttNNssG22hBTXDCK5DZ8IzAQzvqJtazKJX68Lll3byxZTmwT
SNz+bIuSSqJr3YQrVhPk+Qmn5qVgx5iV0VMQFNjFwIHJqRju4yUhjr27ohbhg2Rr
8P/mIFhfVcS8E02B3T8OpksG4tCK/ekGMZWoN/2u1tBB2afvxYBewhzc0OvtfVYO
Z4HdBm1dLf79emHNURU7U2deqDemfGV9W3+aezh0bofwyoYH510KGdJw0XeqrCE3
eGo6mtYy2qt+DrSDdZZDGqe/TQbajtcaBNK4DixZYj6K32ZaLf8xxZ0v5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYZeKjFX3+0HWpSj0z5HEqZpH8/MB8GA1UdIwQY
MBaAFCwKyNNpBREgOjHveF5tHEQ5LKKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDkt
NGYzNmM2YTIwYzBlLzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDktNGYzNmM2YTIwYzBl
LzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWJKBFmK
atUaWx8mpT5wKYFl2zDGpElgMezWNX0YwzcQOClTOOAfiqA0z7phkdH0xC7RGdLo
o89K3E2pVgcT06NZLUjWZ2WL14aJI33ZQhrAHt/nmUbIQSfCdr2p98vTOXjz3cen
AdEfVsPavJDAvtCuvtoNgg7I5kjOB6q3pQhvb2EMTAf3sheDd3VjdImEujeTKOiY
xKgrUAfiK8QxStOppwZZtY0gWUyHTfarovCmETlzJlN4IVar8CFN0PAVTOvkbEPN
/ekNiGPJ1GjE/n1c5Vn2TVH1nioZ/AmQi+6jNGymQg3Hj/X5Rx1iBhzvLJ3RYLY0
I37352S5vj0trA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:29 2026 by rpki-client