Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: 8eO6eKsgCQ18FYsgTAeydg/92iVmcCBV5CwoEsSd1jc=
Subject key identifier: A3:46:03:CE:19:59:F4:A5:56:3D:8B:05:86:B5:C4:C7:DE:6F:D3:58
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019E1F110BAD57D950F6310F3E2BE265AFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:01:11 +0000
Manifest this update: Wed 13 May 2026 02:01:11 +0000
Manifest next update: Thu 14 May 2026 02:01:11 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: gmkGHH1+UlW9yTXLOIcvKiyK2hfWWL9pLVSod6bKKhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:0b:ad:57:d9:50:f6:31:0f:3e:2b:e2:65:af:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: May 13 02:01:11 2026 GMT
Not After : May 14 02:01:11 2026 GMT
Subject: CN=a34603ce1959f4a5563d8b0586b5c4c7de6fd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:1d:ee:4d:b1:06:a6:bf:45:36:3b:dc:e4:
6b:f0:d0:eb:59:1e:c7:11:15:f3:95:a1:e1:96:0b:
f2:17:d3:9b:a0:2c:a4:d9:39:e5:f5:c3:29:78:12:
62:1e:62:1b:b2:8c:f7:70:f1:4c:4b:bb:a8:5f:51:
29:75:79:ce:57:de:2c:cf:38:28:02:3c:61:f9:e0:
89:03:9b:de:16:67:fd:30:cb:30:cd:98:29:62:9d:
30:31:32:8e:82:25:72:2c:ca:61:39:5a:ab:ee:35:
2d:1d:aa:75:3a:22:2b:d4:ff:87:ed:05:a6:c4:40:
82:57:6a:e5:cc:49:5f:c5:00:1f:30:d1:9e:f1:c0:
9e:f8:1e:9d:f1:81:64:ea:64:8c:76:33:b1:3a:fd:
83:84:2f:2e:bb:a1:c3:cb:49:dc:d8:52:6a:0f:fc:
6a:a0:8c:f3:d5:03:49:87:ec:f8:a5:3e:99:bd:25:
e1:2c:1a:c4:46:f0:38:d4:f3:06:a6:01:d6:fc:cb:
a7:53:33:dc:1f:a5:16:9a:51:6e:00:11:52:c2:20:
49:73:c2:ff:2c:73:03:29:25:66:97:34:9b:58:3b:
2a:a1:46:90:bc:df:97:cd:de:29:36:35:e4:33:40:
e2:e4:c2:1d:e0:21:ca:4e:74:77:fa:7f:65:41:28:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:03:CE:19:59:F4:A5:56:3D:8B:05:86:B5:C4:C7:DE:6F:D3:58
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:45:38:f7:74:2b:de:36:7c:a1:4c:66:f1:82:2a:fb:81:e5:
86:0a:d5:81:ac:08:d4:ce:67:39:7a:df:97:1a:d4:ae:2c:82:
a5:ae:96:41:86:bc:be:16:b1:aa:22:75:c7:4e:1f:e9:85:e5:
31:e0:9e:1c:f0:58:04:6a:60:a3:36:08:9d:d8:4c:03:86:5b:
48:c6:79:2f:a7:74:f9:b1:c4:85:f9:01:4a:c0:88:02:26:ac:
cc:4e:3f:2a:75:6f:70:b2:21:4f:20:fa:49:7d:be:00:47:68:
00:83:da:0a:dc:65:48:5d:c7:c6:87:3c:7f:6d:8d:e4:98:3c:
36:a9:65:0e:7e:64:37:de:b9:f0:20:5f:25:46:8c:d3:cf:d1:
ea:a1:9a:13:71:6b:cb:2d:17:d9:6f:86:63:47:be:97:33:b8:
78:9d:9d:5d:0a:df:6e:b7:63:9f:b1:94:bf:68:16:36:34:d0:
f6:90:30:24:37:f5:53:03:3c:83:be:17:a6:cb:59:2c:fa:6a:
3e:81:b6:fc:f4:8d:84:30:00:44:48:24:31:4d:92:b2:1e:31:
9c:14:35:0a:ab:1e:a6:0b:8d:39:b9:0d:42:05:8f:92:dd:d1:
8f:25:26:56:5a:1d:7f:90:12:2e:d3:58:ae:82:78:cc:f8:7e:
cc:ca:b9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEQutV9lQ9jEPPiviZa/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2FlMmMzN2M4NjYzMGU2MWFmZGY4OTAzZmUxNzRkZThi
OTQ1YmUwHhcNMjYwNTEzMDIwMTExWhcNMjYwNTE0MDIwMTExWjAzMTEwLwYDVQQD
EyhhMzQ2MDNjZTE5NTlmNGE1NTYzZDhiMDU4NmI1YzRjN2RlNmZkMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS4d7k2xBqa/RTY73ORr8NDrWR7H
ERXzlaHhlgvyF9OboCyk2Tnl9cMpeBJiHmIbsoz3cPFMS7uoX1EpdXnOV94szzgo
Ajxh+eCJA5veFmf9MMswzZgpYp0wMTKOgiVyLMphOVqr7jUtHap1OiIr1P+H7QWm
xECCV2rlzElfxQAfMNGe8cCe+B6d8YFk6mSMdjOxOv2DhC8uu6HDy0nc2FJqD/xq
oIzz1QNJh+z4pT6ZvSXhLBrERvA41PMGpgHW/MunUzPcH6UWmlFuABFSwiBJc8L/
LHMDKSVmlzSbWDsqoUaQvN+Xzd4pNjXkM0Di5MId4CHKTnR3+n9lQSiV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNGA84ZWfSlVj2LBYa1xMfeb9NYMB8GA1UdIwQY
MBaAFJXK4sN8hmMOYa/fiQP+F03ouUW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUt
MzUxNDg0MWYzNmFlLzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUtMzUxNDg0MWYzNmFl
LzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckU493Qr
3jZ8oUxm8YIq+4HlhgrVgawI1M5nOXrflxrUriyCpa6WQYa8vhaxqiJ1x04f6YXl
MeCeHPBYBGpgozYIndhMA4ZbSMZ5L6d0+bHEhfkBSsCIAiaszE4/KnVvcLIhTyD6
SX2+AEdoAIPaCtxlSF3Hxoc8f22N5Jg8NqllDn5kN9658CBfJUaM08/R6qGaE3Fr
yy0X2W+GY0e+lzO4eJ2dXQrfbrdjn7GUv2gWNjTQ9pAwJDf1UwM8g74XpstZLPpq
PoG2/PSNhDAAREgkMU2Ssh4xnBQ1CqsepguNObkNQgWPkt3RjyUmVlodf5ASLtNY
roJ4zPh+zMq5aA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:30 2026 by rpki-client