Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: dlW7kSHY9UZJ+Okole9w1p84BCb4DTSiT2tJTyaMQ7o=
Subject key identifier: 4D:77:E4:5E:15:B9:B7:BE:DC:2A:E3:EA:86:36:64:D4:37:E7:BF:10
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019CADFEC30857465711B93FA74CB670D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0CC5
Signing time: Mon 02 Mar 2026 10:01:20 +0000
Manifest this update: Mon 02 Mar 2026 10:01:20 +0000
Manifest next update: Tue 03 Mar 2026 10:01:20 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: +ZI2pmExmUz0tU/4nKjYxhdaVj1S+Rx+3weY2ZP+160=)
2: kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa (hash: SX4oJ6iuf50pvLJFbaFInsRNowHDyi5Eu+2bcodIAMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c3:08:57:46:57:11:b9:3f:a7:4c:b6:70:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Mar 2 10:01:20 2026 GMT
Not After : Mar 3 10:01:20 2026 GMT
Subject: CN=4d77e45e15b9b7bedc2ae3ea863664d437e7bf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:1a:d2:84:c6:5c:21:26:af:87:7c:ec:d2:
79:84:a1:62:28:c9:00:c6:f1:85:28:0c:df:64:43:
31:09:1f:ba:0f:50:72:e3:44:65:de:9b:af:ec:02:
4f:7f:14:35:71:47:f0:6d:85:1f:48:25:95:3a:b4:
6a:1b:e1:27:23:23:68:18:52:b3:08:b1:46:5a:cc:
1d:ce:41:41:71:13:08:f5:9b:1c:07:af:a6:75:2e:
be:fa:e2:c3:cb:a3:fa:3f:73:11:99:0d:d9:70:5a:
42:8a:94:66:76:c4:ea:0f:0d:4d:16:5d:b5:46:ae:
bb:43:fa:c5:0c:e0:82:97:05:68:1c:41:68:8a:9a:
b8:7b:82:c5:41:07:b4:1f:9f:f4:18:dc:fe:6c:5b:
f7:a7:a7:d5:26:d0:d5:c6:47:ee:99:22:bf:b8:20:
35:79:09:1a:07:35:03:98:03:cc:0c:6c:91:6a:f4:
72:2e:96:c9:09:6a:94:06:ed:af:24:12:a8:b7:80:
cd:4b:1d:fd:19:9b:22:2c:6b:b4:ea:02:9d:04:83:
9e:29:93:e5:79:04:48:ab:9a:b9:25:be:65:0e:13:
58:4a:ee:3b:98:5f:f5:4e:66:13:45:79:2b:e5:74:
d6:74:a3:ae:28:f3:ce:e4:5c:62:42:56:49:09:92:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:E4:5E:15:B9:B7:BE:DC:2A:E3:EA:86:36:64:D4:37:E7:BF:10
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:4f:64:bc:0f:45:22:8f:ed:07:3d:99:56:64:f6:de:e7:
0c:0f:2f:d7:e6:36:a8:50:fa:29:40:f3:36:a3:5f:c3:a3:66:
fd:cf:ab:bf:8a:ae:7c:42:16:37:55:15:ce:4f:fd:3e:55:d3:
d1:73:65:5f:08:fd:89:e8:7f:f2:c2:7c:7f:e3:a0:44:fd:2a:
df:32:e9:4b:bb:c2:b7:3f:ee:69:eb:87:9f:1a:b7:a1:72:1c:
78:4a:6d:4e:f7:46:f0:8e:18:38:8e:59:a2:b1:e2:d3:e5:41:
19:15:75:56:44:de:8e:cc:3f:81:0c:56:ea:79:01:1d:80:42:
e0:d2:a0:41:ed:24:8f:2c:18:9e:45:f9:16:a1:1a:f3:63:41:
17:1c:a5:57:be:7c:8a:04:8d:58:82:f9:fb:2b:0b:a9:37:c8:
94:61:6c:46:32:32:8b:a7:1c:a5:84:3f:a6:f8:74:ff:5c:07:
8b:0f:8b:d7:5f:75:6a:19:cb:7c:d3:be:46:71:53:d3:e2:6c:
09:8e:01:b4:8f:2e:12:8b:21:9e:36:51:f1:ea:48:69:6b:74:
0e:b4:6a:cb:4d:fb:4e:55:c0:1f:82:41:d5:ad:54:83:98:f0:
b7:95:80:01:74:ee:91:7b:17:a7:dc:32:6a:d8:28:91:71:cc:
65:e5:1d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/sMIV0ZXEbk/p0y2cNe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4
MmE4NjYwHhcNMjYwMzAyMTAwMTIwWhcNMjYwMzAzMTAwMTIwWjAzMTEwLwYDVQQD
Eyg0ZDc3ZTQ1ZTE1YjliN2JlZGMyYWUzZWE4NjM2NjRkNDM3ZTdiZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP8a0oTGXCEmr4d87NJ5hKFiKMkA
xvGFKAzfZEMxCR+6D1By40Rl3puv7AJPfxQ1cUfwbYUfSCWVOrRqG+EnIyNoGFKz
CLFGWswdzkFBcRMI9ZscB6+mdS6++uLDy6P6P3MRmQ3ZcFpCipRmdsTqDw1NFl21
Rq67Q/rFDOCClwVoHEFoipq4e4LFQQe0H5/0GNz+bFv3p6fVJtDVxkfumSK/uCA1
eQkaBzUDmAPMDGyRavRyLpbJCWqUBu2vJBKot4DNSx39GZsiLGu06gKdBIOeKZPl
eQRIq5q5Jb5lDhNYSu47mF/1TmYTRXkr5XTWdKOuKPPO5FxiQlZJCZJuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE135F4Vube+3Crj6oY2ZNQ3578QMB8GA1UdIwQY
MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt
NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj
LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrZPZLwP
RSKP7Qc9mVZk9t7nDA8v1+Y2qFD6KUDzNqNfw6Nm/c+rv4qufEIWN1UVzk/9PlXT
0XNlXwj9ieh/8sJ8f+OgRP0q3zLpS7vCtz/uaeuHnxq3oXIceEptTvdG8I4YOI5Z
orHi0+VBGRV1VkTejsw/gQxW6nkBHYBC4NKgQe0kjywYnkX5FqEa82NBFxylV758
igSNWIL5+ysLqTfIlGFsRjIyi6ccpYQ/pvh0/1wHiw+L1191ahnLfNO+RnFT0+Js
CY4BtI8uEoshnjZR8epIaWt0DrRqy037TlXAH4JB1a1Ug5jwt5WAAXTukXsXp9wy
atgokXHMZeUdVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:41 2026 by rpki-client