Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: qs28y+vhDUvB+AMPHaApx8tDwnhVi3pyiNBbSEtv+40=
Subject key identifier: B8:C2:E9:4D:3B:38:18:D1:9C:49:15:D5:28:3A:CF:6B:B0:7A:28:A0
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019F92B5ECB6CAB1F4FE7EB4B2BFCECFD956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 1277
Signing time: Fri 24 Jul 2026 06:00:23 +0000
Manifest this update: Fri 24 Jul 2026 06:00:23 +0000
Manifest next update: Sat 25 Jul 2026 06:00:23 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: 3XjqXxtuMU76RcrCgUz0GmuJZPMVOoTwcPhiywTd6A4=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ec:b6:ca:b1:f4:fe:7e:b4:b2:bf:ce:cf:d9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jul 24 06:00:23 2026 GMT
Not After : Jul 25 06:00:23 2026 GMT
Subject: CN=b8c2e94d3b3818d19c4915d5283acf6bb07a28a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:de:e8:4a:18:d9:ad:fa:0f:ab:ef:8a:91:
9e:ff:73:fb:5c:2a:77:f8:67:ca:2d:41:3e:01:4f:
5d:85:00:23:8b:57:ad:39:f2:11:84:c5:8a:7a:67:
fa:21:cf:12:e9:98:34:10:e3:f0:53:46:81:98:7a:
77:99:45:be:8f:11:d4:6f:a3:57:1f:2d:a5:46:00:
12:d3:dc:27:fa:aa:23:67:d1:d3:87:ac:cc:fa:cd:
3b:76:aa:25:ea:f8:34:f2:80:df:76:13:d6:c8:37:
b1:e3:b3:cd:17:e6:ed:e3:f3:36:1d:32:37:be:4a:
55:ff:af:c6:91:40:69:90:10:3a:a3:b9:cb:18:e4:
8c:0e:da:26:bb:87:bd:39:90:31:c1:a5:06:4f:54:
66:04:f2:30:93:1c:44:e6:0e:2f:a2:60:54:b0:5b:
27:c4:cc:db:c7:52:4f:5f:b6:ae:22:e6:bc:d3:75:
b3:7d:3e:73:55:c5:00:1d:5c:d4:d5:d6:d5:f5:01:
af:73:69:b0:f2:eb:79:f1:d7:62:d4:28:a1:e9:7f:
36:b0:92:2d:3d:55:89:53:59:da:f6:b6:36:e1:89:
70:16:3e:23:fc:b7:7d:75:60:7d:7a:e5:ad:40:6f:
92:06:44:7a:6e:94:8f:92:be:59:2e:e7:84:6a:d1:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:E9:4D:3B:38:18:D1:9C:49:15:D5:28:3A:CF:6B:B0:7A:28:A0
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:4e:12:7e:2a:e4:d2:c9:ce:ae:51:1c:88:46:e8:28:52:
e8:b2:a1:14:0c:27:fd:de:bf:3c:4c:6c:5e:b3:91:e9:67:11:
3a:20:ef:14:17:8f:10:97:9d:db:87:7d:01:dc:f6:c9:6a:f4:
48:55:af:1b:72:3e:66:06:02:e7:0a:e9:ca:7b:96:ed:85:54:
f4:2b:99:c1:71:a1:72:dc:f9:13:fb:00:6e:b1:96:e6:93:6d:
1e:06:30:90:16:33:d6:99:f0:c5:19:ce:c5:9c:f0:71:43:bf:
0d:f6:38:49:ac:e3:7f:d8:74:6f:5b:dd:a0:07:ba:06:52:85:
94:9d:da:62:be:30:a5:62:32:fe:eb:3e:9b:9d:d5:cf:0a:91:
ac:1a:02:ce:fa:d9:5f:cd:9a:8e:e6:ef:28:f8:41:c9:79:b4:
44:a7:1f:ce:e0:02:56:2c:4c:cf:1a:63:4d:da:e1:d3:e7:5b:
2e:12:0e:5f:7a:4b:94:f2:ac:9f:f7:16:86:d6:05:54:38:35:
1d:13:75:42:84:18:9e:55:d5:3f:d2:46:bf:74:d7:96:c4:c8:
aa:73:17:74:2d:77:66:9f:30:e4:c7:62:13:9f:27:e9:11:dc:
88:3c:29:74:c5:31:9c:17:40:c3:70:a4:3a:1c:88:88:9f:a2:
6f:a3:39:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Stey2yrH0/n60sr/Oz9lWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjYwNzI0MDYwMDIzWhcNMjYwNzI1MDYwMDIzWjAzMTEwLwYDVQQD
EyhiOGMyZTk0ZDNiMzgxOGQxOWM0OTE1ZDUyODNhY2Y2YmIwN2EyOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qne6EoY2a36D6vvipGe/3P7XCp3
+GfKLUE+AU9dhQAji1etOfIRhMWKemf6Ic8S6Zg0EOPwU0aBmHp3mUW+jxHUb6NX
Hy2lRgAS09wn+qojZ9HTh6zM+s07dqol6vg08oDfdhPWyDex47PNF+bt4/M2HTI3
vkpV/6/GkUBpkBA6o7nLGOSMDtomu4e9OZAxwaUGT1RmBPIwkxxE5g4vomBUsFsn
xMzbx1JPX7auIua803WzfT5zVcUAHVzU1dbV9QGvc2mw8ut58ddi1Cih6X82sJIt
PVWJU1na9rY24YlwFj4j/Ld9dWB9euWtQG+SBkR6bpSPkr5ZLueEatFC8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjC6U07OBjRnEkV1Sg6z2uweiigMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD89OEn4q
5NLJzq5RHIhG6ChS6LKhFAwn/d6/PExsXrOR6WcROiDvFBePEJed24d9Adz2yWr0
SFWvG3I+ZgYC5wrpynuW7YVU9CuZwXGhctz5E/sAbrGW5pNtHgYwkBYz1pnwxRnO
xZzwcUO/DfY4Sazjf9h0b1vdoAe6BlKFlJ3aYr4wpWIy/us+m53VzwqRrBoCzvrZ
X82ajubvKPhByXm0RKcfzuACVixMzxpjTdrh0+dbLhIOX3pLlPKsn/cWhtYFVDg1
HRN1QoQYnlXVP9JGv3TXlsTIqnMXdC13Zp8w5MdiE58n6RHciDwpdMUxnBdAw3Ck
OhyIiJ+ib6M5aA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:04 2026 by rpki-client