Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: SwjyJ9+PUfvWhb5ci3Q5s7aciYiINu1yXIWwvEIT77k=
Subject key identifier: CD:00:87:5F:41:37:E1:7C:B6:4B:A6:C3:CF:74:F3:4F:B8:C9:B8:80
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 01A10F27AEC762E8F749D48A93270E10B66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1A8B
Signing time: Tue 06 Oct 2026 03:00:21 +0000
Manifest this update: Tue 06 Oct 2026 03:00:21 +0000
Manifest next update: Wed 07 Oct 2026 03:00:21 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: p/ovc0g3EQuNTvJibAaTzDxJhhvEk7GcbNHRTY5MvPI=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:ae:c7:62:e8:f7:49:d4:8a:93:27:0e:10:b6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Oct 6 03:00:21 2026 GMT
Not After : Oct 7 03:00:21 2026 GMT
Subject: CN=cd00875f4137e17cb64ba6c3cf74f34fb8c9b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:28:7c:69:13:cc:38:ce:e0:08:5a:a8:ac:
b5:32:2b:87:8a:20:c2:3c:3b:29:c7:f7:61:98:84:
d9:5a:6c:66:da:41:b4:6f:46:54:e6:16:25:93:c7:
7d:ab:31:ba:ce:9f:28:8d:84:42:6c:29:c5:e1:43:
27:b3:0a:36:c3:53:aa:e1:97:e7:4e:c7:9d:85:9a:
8d:9a:d3:dd:ad:ba:01:9f:5c:b0:85:44:48:b8:90:
9a:50:d5:a0:be:ba:89:00:80:16:75:b4:dc:b2:ee:
ee:d2:48:a5:41:fc:90:0b:02:99:0a:20:54:fd:9c:
3d:3f:7a:97:af:55:7e:60:85:04:6a:29:8b:d5:06:
b6:ee:4b:e0:9e:67:99:f6:fc:63:78:1c:58:6d:1a:
8c:19:82:b8:17:4d:02:5c:bb:b6:80:9a:9b:7e:e2:
02:6d:44:b4:32:3e:8c:a4:df:36:26:66:33:3a:d9:
e6:b0:46:c4:ed:95:98:c1:9d:99:06:ea:4e:cf:83:
f5:69:9c:3f:b3:d9:9b:0b:63:cc:f7:3a:c8:f8:e1:
c4:1e:06:79:ab:45:87:fc:1b:56:9b:2c:72:5c:f4:
a4:52:50:3b:a9:71:7a:09:cd:1e:b2:e3:5c:57:cf:
fe:de:75:7f:b9:28:47:b5:5a:eb:59:7f:41:5c:5a:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:87:5F:41:37:E1:7C:B6:4B:A6:C3:CF:74:F3:4F:B8:C9:B8:80
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:3e:b4:f9:76:10:05:d4:f1:82:f4:34:aa:e8:c4:fe:0e:
16:7c:db:76:ba:2c:3e:da:e9:23:48:31:0f:3e:20:fd:64:6a:
fb:d2:08:51:c5:d6:37:4e:1c:0c:4a:69:db:f1:39:25:48:1d:
15:3a:31:e3:47:34:d8:c6:e4:00:37:24:39:1c:e5:0d:dd:68:
4b:4e:e9:af:4d:a8:25:bc:68:45:33:07:76:93:4f:4d:cb:c9:
95:3c:89:ad:71:47:7c:f6:4e:bb:70:d0:de:30:29:af:23:20:
c1:37:74:ba:90:cc:e2:d6:70:5a:ff:ea:02:6b:1d:a5:59:f7:
3d:99:c5:d9:86:d2:8b:1a:92:91:84:af:1f:55:75:75:fa:ac:
ad:49:dd:b7:2b:fd:ed:85:fb:06:15:32:2c:f7:7d:09:6f:fd:
02:05:a6:f0:47:ac:d8:60:e0:57:74:84:2e:27:2f:aa:0c:bf:
7d:f8:4f:f4:50:f0:5d:ee:d6:3b:58:6b:1c:4b:50:c7:7c:ca:
fd:9a:8f:0d:6d:4e:9e:63:7f:33:9a:cd:a4:9b:20:8d:a1:10:
fb:70:3f:67:67:80:46:f6:ec:f8:60:56:52:10:3e:04:62:8c:
51:93:2c:0d:8f:49:bb:43:9a:7d:53:ad:ae:91:75:6d:c0:77:
5b:f6:b5:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPJ67HYuj3SdSKkycOELZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1
NTM4NmMwHhcNMjYxMDA2MDMwMDIxWhcNMjYxMDA3MDMwMDIxWjAzMTEwLwYDVQQD
EyhjZDAwODc1ZjQxMzdlMTdjYjY0YmE2YzNjZjc0ZjM0ZmI4YzliODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gIofGkTzDjO4AhaqKy1MiuHiiDC
PDspx/dhmITZWmxm2kG0b0ZU5hYlk8d9qzG6zp8ojYRCbCnF4UMnswo2w1Oq4Zfn
TsedhZqNmtPdrboBn1ywhURIuJCaUNWgvrqJAIAWdbTcsu7u0kilQfyQCwKZCiBU
/Zw9P3qXr1V+YIUEaimL1Qa27kvgnmeZ9vxjeBxYbRqMGYK4F00CXLu2gJqbfuIC
bUS0Mj6MpN82JmYzOtnmsEbE7ZWYwZ2ZBupOz4P1aZw/s9mbC2PM9zrI+OHEHgZ5
q0WH/BtWmyxyXPSkUlA7qXF6Cc0esuNcV8/+3nV/uShHtVrrWX9BXFpNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0Ah19BN+F8tkumw89080+4ybiAMB8GA1UdIwQY
MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt
NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3
LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf4+tPl2
EAXU8YL0NKroxP4OFnzbdrosPtrpI0gxDz4g/WRq+9IIUcXWN04cDEpp2/E5JUgd
FTox40c02MbkADckORzlDd1oS07pr02oJbxoRTMHdpNPTcvJlTyJrXFHfPZOu3DQ
3jApryMgwTd0upDM4tZwWv/qAmsdpVn3PZnF2YbSixqSkYSvH1V1dfqsrUndtyv9
7YX7BhUyLPd9CW/9AgWm8Ees2GDgV3SELicvqgy/ffhP9FDwXe7WO1hrHEtQx3zK
/ZqPDW1OnmN/M5rNpJsgjaEQ+3A/Z2eARvbs+GBWUhA+BGKMUZMsDY9Ju0OafVOt
rpF1bcB3W/a1RA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:38:40 2026 by rpki-client