Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: IhJjkbTwNB9k+qI8vB2pt44fY8SXLrqXqBs9/IMiqWk=
Subject key identifier: ED:9E:B1:0E:8D:20:7A:3B:CA:16:84:D3:B9:55:B1:49:41:F8:32:87
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019CAC4775439537E1F509547B2CE05BA28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 04BA
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: wEklqjMO6LohNSBaXpkfzLgnY1pS0wGqqwFngBS843A=)
2: Oz8EKSEHcWY_e4izVRb6ZqBpY-g.roa (hash: WQ/GzCseC8Ss8NihAisrEJ049anzZmJVy7FC4nNnwTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:75:43:95:37:e1:f5:09:54:7b:2c:e0:5b:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=ed9eb10e8d207a3bca1684d3b955b14941f83287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:06:9d:4a:bb:e2:23:db:77:da:a1:cf:3d:
dd:59:c1:50:31:18:8d:b6:0d:d5:4c:38:28:f2:b0:
90:74:a4:a7:5b:86:f1:60:3d:37:6a:26:6a:cf:60:
22:33:d9:83:fe:c8:18:50:b4:b2:ce:42:fb:68:d1:
ed:41:2a:58:53:9c:39:40:67:b5:8f:fd:62:4c:66:
68:55:6a:fd:51:fe:32:2f:d9:63:10:f1:52:da:4e:
83:f0:6e:ff:78:75:8f:b0:c3:74:39:37:51:34:3c:
49:73:4d:27:ef:65:d1:10:2a:43:a7:a1:7e:86:39:
10:d7:aa:fe:66:fd:8e:1b:75:d0:36:a6:60:8b:05:
a3:8b:1d:54:a0:11:08:a0:a4:d2:9a:84:cf:5f:95:
b1:34:e1:21:70:2e:30:0e:15:a9:0d:16:88:ac:be:
8a:07:1b:c3:f8:f9:8c:66:d6:83:84:72:2e:d4:bc:
cc:91:b6:30:f1:92:f8:fc:4a:af:2c:fb:8e:eb:0d:
f3:fc:c8:2a:6d:c2:00:fe:e9:78:2d:34:ca:09:5f:
21:2e:3e:27:d5:05:fa:fb:32:ce:4b:76:69:3c:0b:
89:ea:5e:25:82:7f:2c:f0:00:d1:de:6b:5f:d6:da:
dd:3f:64:39:a5:33:14:a2:01:6e:10:b5:36:40:5f:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:B1:0E:8D:20:7A:3B:CA:16:84:D3:B9:55:B1:49:41:F8:32:87
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:a3:12:71:e1:04:b8:80:af:8e:3d:35:5c:93:cb:2e:2b:
11:de:ad:08:f2:59:8f:a7:c1:ca:f6:42:ed:ee:86:07:e9:58:
5e:6c:f9:86:d9:8f:dc:34:f8:84:6d:a9:04:98:b0:df:7a:c2:
19:9c:30:da:73:95:6c:8c:66:5b:63:90:c8:4a:20:7f:bb:64:
52:81:08:9d:3c:b2:73:bf:8b:3c:e8:4e:d6:2d:0b:7a:8b:88:
d0:49:c0:e1:e6:e8:9a:4d:b4:d9:cb:6f:28:f9:67:95:57:f9:
51:8b:62:dd:48:5a:50:ed:5c:06:93:ed:49:19:d3:bb:c6:7d:
17:7c:c5:cd:52:fb:fa:cb:00:fe:7c:a5:87:56:49:7f:4c:79:
2c:9a:aa:29:6c:06:5f:6f:8f:b5:cc:93:d2:31:75:40:e6:25:
0f:12:1c:e4:e4:7b:0b:70:4f:78:5f:ea:a2:79:db:35:3c:c2:
2c:a6:21:f1:80:a5:87:d2:78:1f:6a:16:b7:80:19:90:cd:0e:
f5:a7:0e:4d:b2:9a:87:08:c1:c8:57:ca:64:ca:16:9f:5c:43:
55:03:bf:34:72:7b:41:b4:da:3d:b8:79:db:0e:12:e4:9c:9c:
26:a9:08:ee:10:df:60:a6:66:a1:3a:67:ad:24:dd:6d:f5:6a:
d2:95:54:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3VDlTfh9QlUeyzgW6KKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZjU4YWE1MjZjODFlMzJjMWI5NTliZmNhZGYwOGMxOWFk
YzQxMmMwHhcNMjYwMzAyMDIwMTI5WhcNMjYwMzAzMDIwMTI5WjAzMTEwLwYDVQQD
EyhlZDllYjEwZThkMjA3YTNiY2ExNjg0ZDNiOTU1YjE0OTQxZjgzMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov8GnUq74iPbd9qhzz3dWcFQMRiN
tg3VTDgo8rCQdKSnW4bxYD03aiZqz2AiM9mD/sgYULSyzkL7aNHtQSpYU5w5QGe1
j/1iTGZoVWr9Uf4yL9ljEPFS2k6D8G7/eHWPsMN0OTdRNDxJc00n72XRECpDp6F+
hjkQ16r+Zv2OG3XQNqZgiwWjix1UoBEIoKTSmoTPX5WxNOEhcC4wDhWpDRaIrL6K
BxvD+PmMZtaDhHIu1LzMkbYw8ZL4/EqvLPuO6w3z/MgqbcIA/ul4LTTKCV8hLj4n
1QX6+zLOS3ZpPAuJ6l4lgn8s8ADR3mtf1trdP2Q5pTMUogFuELU2QF+/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2esQ6NIHo7yhaE07lVsUlB+DKHMB8GA1UdIwQY
MBaAFC31iqUmyB4ywblZv8rfCMGa3EEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODkt
N2U4Yjk3NTI4YjFjLzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODktN2U4Yjk3NTI4YjFj
LzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZY+jEnHh
BLiAr449NVyTyy4rEd6tCPJZj6fByvZC7e6GB+lYXmz5htmP3DT4hG2pBJiw33rC
GZww2nOVbIxmW2OQyEogf7tkUoEInTyyc7+LPOhO1i0LeouI0EnA4ebomk202ctv
KPlnlVf5UYti3UhaUO1cBpPtSRnTu8Z9F3zFzVL7+ssA/nylh1ZJf0x5LJqqKWwG
X2+PtcyT0jF1QOYlDxIc5OR7C3BPeF/qonnbNTzCLKYh8YClh9J4H2oWt4AZkM0O
9acOTbKahwjByFfKZMoWn1xDVQO/NHJ7QbTaPbh52w4S5JycJqkI7hDfYKZmoTpn
rSTdbfVq0pVUHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:54 2026 by rpki-client