Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: Z1nmIYok20AfBt2aUd7H9lGjFp1m7x2koOkRQqp4O4I=
Subject key identifier: 53:1E:8D:1C:95:83:BF:E6:EC:87:A5:7C:A0:3F:2C:50:3A:43:38:C4
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019E1DFE6190E2178AE7186A8D4C877A5485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 02D9
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: pgLkHVQM0HB9lU5ng/mrCeoO9d9vOEMRKp3bGhFLhw0=)
4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:61:90:e2:17:8a:e7:18:6a:8d:4c:87:7a:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=531e8d1c9583bfe6ec87a57ca03f2c503a4338c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:75:1d:ee:d0:1f:e8:7d:d4:f9:5e:2e:54:
59:3a:88:09:18:41:03:dc:5e:5e:8e:ac:e2:e2:f4:
ce:ab:68:06:02:ec:64:c3:bc:c7:22:cd:c6:7b:77:
7f:7d:ff:58:4d:f5:ae:2c:6b:c3:ec:01:01:5c:aa:
70:09:ec:80:e3:20:3e:eb:71:c5:d8:85:df:76:35:
dc:8e:5f:f0:b3:8b:8a:e3:d6:2f:db:c6:e8:77:4b:
34:a8:f2:2b:05:36:ce:19:1a:2c:58:ab:83:41:b6:
e3:09:db:15:60:f4:73:44:8e:b9:c6:82:b4:3b:c1:
c4:85:14:19:3e:ea:0b:d3:28:2b:10:3d:eb:57:0d:
ff:00:2e:27:ae:a8:b5:17:9a:de:3b:68:00:49:0d:
d7:2d:92:b4:3b:b1:aa:75:18:fd:bd:55:4a:40:0b:
92:81:a9:aa:fd:14:31:45:b7:21:d1:ef:26:a0:04:
57:34:fd:69:1b:15:3e:3f:5c:83:93:55:d4:ed:bc:
cb:32:98:64:0f:9c:e1:a2:4a:17:cb:66:1a:f7:f3:
0c:04:ff:01:49:d4:78:dd:e9:83:c7:cb:b2:2e:39:
c7:ea:bb:6b:bf:aa:4a:62:77:d2:34:d9:d2:ce:dd:
2b:1a:25:d5:03:2f:2c:6d:b4:44:a7:a4:e4:4f:e2:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:8D:1C:95:83:BF:E6:EC:87:A5:7C:A0:3F:2C:50:3A:43:38:C4
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:ac:e1:2d:66:69:52:0d:37:05:27:e6:80:a8:cf:ef:4e:
b9:86:28:f1:8a:c1:90:ec:79:7c:33:9f:cd:d5:7c:64:f2:a4:
40:9a:c6:92:de:c9:72:cd:e1:53:53:8e:85:51:bf:05:23:bf:
ad:a7:a5:ea:32:a0:7d:7c:17:f0:6a:61:95:34:ac:4f:db:47:
ee:0a:09:cf:d0:ad:3e:a6:77:3e:32:fe:95:18:82:2f:e7:b7:
32:7a:7b:4d:ea:f7:cc:8b:f6:c0:a1:e4:80:ee:cb:ed:e4:3a:
36:2a:fa:ce:16:96:57:de:55:19:29:40:d0:35:af:5e:74:c0:
77:9f:53:67:58:3e:5f:1a:42:bb:3e:0c:c9:e6:53:f7:90:b1:
1b:d3:52:41:61:4a:b8:e2:c3:e9:54:b1:87:db:d4:37:80:2c:
19:c5:17:4f:6a:6e:0b:1b:6b:d0:6f:97:b7:67:5a:50:7b:dc:
ea:01:57:7c:cd:8f:7e:a3:9b:77:c7:58:07:fe:49:1e:ed:f1:
93:b6:ad:c4:2c:e8:24:c1:76:e6:45:29:92:34:8a:e2:3c:81:
96:02:c4:60:18:ab:be:a1:fb:28:ee:c4:7b:26:a6:25:7a:81:
19:5f:85:27:81:06:3e:70:e1:20:48:88:46:f6:76:de:72:7b:
bd:29:b5:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/mGQ4heK5xhqjUyHelSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2Q1YWRiMWQwNjQzNjliN2U0MWJhZWJkYjBlOGUxMzVk
NjU3NjMwHhcNMjYwNTEyMjEwMTEwWhcNMjYwNTEzMjEwMTEwWjAzMTEwLwYDVQQD
Eyg1MzFlOGQxYzk1ODNiZmU2ZWM4N2E1N2NhMDNmMmM1MDNhNDMzOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRd1He7QH+h91PleLlRZOogJGEED
3F5ejqzi4vTOq2gGAuxkw7zHIs3Ge3d/ff9YTfWuLGvD7AEBXKpwCeyA4yA+63HF
2IXfdjXcjl/ws4uK49Yv28bod0s0qPIrBTbOGRosWKuDQbbjCdsVYPRzRI65xoK0
O8HEhRQZPuoL0ygrED3rVw3/AC4nrqi1F5reO2gASQ3XLZK0O7GqdRj9vVVKQAuS
gamq/RQxRbch0e8moARXNP1pGxU+P1yDk1XU7bzLMphkD5zhokoXy2Ya9/MMBP8B
SdR43emDx8uyLjnH6rtrv6pKYnfSNNnSzt0rGiXVAy8sbbREp6TkT+LdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMejRyVg7/m7IelfKA/LFA6QzjEMB8GA1UdIwQY
MBaAFC49WtsdBkNpt+Qbrr2w6OE11ldjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMt
YmViZjQyZmJlODQ2LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMtYmViZjQyZmJlODQ2
LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW2s4S1m
aVINNwUn5oCoz+9OuYYo8YrBkOx5fDOfzdV8ZPKkQJrGkt7Jcs3hU1OOhVG/BSO/
rael6jKgfXwX8GphlTSsT9tH7goJz9CtPqZ3PjL+lRiCL+e3Mnp7Ter3zIv2wKHk
gO7L7eQ6Nir6zhaWV95VGSlA0DWvXnTAd59TZ1g+XxpCuz4MyeZT95CxG9NSQWFK
uOLD6VSxh9vUN4AsGcUXT2puCxtr0G+Xt2daUHvc6gFXfM2PfqObd8dYB/5JHu3x
k7atxCzoJMF25kUpkjSK4jyBlgLEYBirvqH7KO7EeyamJXqBGV+FJ4EGPnDhIEiI
RvZ23nJ7vSm1yA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:10 2026 by rpki-client