Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: 3XbOFISKl+tu9F9hXWXg1BN9y2/udqp0iV98secQRck=
Subject key identifier: 8B:E5:9A:0E:19:5D:0E:10:E4:9C:8B:B3:4B:1B:2A:8B:CC:84:C7:64
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 01A12E0EEFA9FD185AA33B00E62CC1527B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 14A8
Signing time: Mon 12 Oct 2026 03:01:33 +0000
Manifest this update: Mon 12 Oct 2026 03:01:33 +0000
Manifest next update: Tue 13 Oct 2026 03:01:33 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: NckT6sQV5GET8Eu9iusq3F3MhFptdDiKHQXW+vbHn+k=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:0e:ef:a9:fd:18:5a:a3:3b:00:e6:2c:c1:52:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Oct 12 03:01:33 2026 GMT
Not After : Oct 13 03:01:33 2026 GMT
Subject: CN=8be59a0e195d0e10e49c8bb34b1b2a8bcc84c764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:2c:33:4d:ed:ce:58:e3:61:89:88:73:c6:
19:c6:54:a9:a5:3c:e9:ca:78:03:9a:58:d0:ed:3d:
83:a6:5d:73:19:a5:23:a3:9d:aa:6a:b7:00:2b:ee:
c3:cc:c2:28:89:c9:51:9b:8b:23:ff:7c:9b:fc:1c:
58:bd:23:00:9d:ca:c8:58:a3:27:97:f1:7a:06:3d:
8b:84:d9:36:67:3a:13:79:0f:51:9c:5a:23:c2:bc:
38:d5:ba:a2:fe:0b:6d:cf:ad:f9:d6:e4:80:aa:30:
94:ce:0a:1d:1a:dd:0e:61:2b:26:e6:32:85:5f:34:
03:b6:d6:18:ff:f2:20:59:1e:e4:01:89:a3:a3:21:
14:04:08:2d:b1:3f:76:9f:73:57:7c:a8:58:05:3d:
98:e3:af:c7:f5:97:d7:36:74:16:f2:c8:5d:ed:87:
a0:5b:7b:0c:72:6e:a5:5d:38:77:36:ed:3d:01:59:
b1:cd:d4:38:de:b2:b3:1f:9c:1f:a6:c6:21:14:ca:
6e:35:3b:87:d2:4d:86:9f:4b:7a:ac:53:6b:0d:79:
08:3d:30:29:c6:cc:76:c3:1c:be:16:78:eb:2a:9a:
cc:e6:8b:dc:c9:74:a9:1d:ce:ab:38:f9:a9:e1:03:
b3:f3:df:02:ed:ea:ab:b0:ee:ec:c2:26:e1:f8:5a:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:9A:0E:19:5D:0E:10:E4:9C:8B:B3:4B:1B:2A:8B:CC:84:C7:64
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c8:51:20:e8:47:13:f5:49:1e:b1:6f:67:f4:d8:30:4b:ab:
56:c2:40:d2:5e:bc:44:bd:58:7b:e5:39:a9:8e:0b:fb:fb:9a:
55:a6:c4:d8:a1:24:30:fb:57:04:f7:58:c7:54:b7:5b:57:62:
69:52:29:a8:34:37:d2:1f:cc:9c:bb:f6:19:6f:dd:14:b3:1b:
f7:b2:d2:22:de:51:7a:92:ed:ce:4c:90:e8:5d:c5:a1:46:d9:
68:f3:eb:aa:b8:fb:ce:d4:7d:a1:ad:80:ae:fd:66:a4:ba:d5:
af:fc:8a:68:95:d5:0a:b9:8f:ee:b3:d7:0b:dc:f1:33:d9:6a:
6c:3b:4b:d2:06:47:6d:ab:fe:1f:d3:1a:21:de:63:4b:bf:d9:
3f:3a:ee:81:65:98:03:81:f2:d0:f3:c0:f2:56:65:94:3b:cb:
74:77:be:d5:3a:da:c4:c5:fa:fc:44:51:83:25:8c:e8:ef:e6:
ae:e9:d0:81:9a:22:c5:ef:93:4d:cc:5b:9b:05:80:29:f6:06:
67:62:fe:a5:35:fa:fd:4d:5a:43:4b:c9:12:5c:ef:63:dc:99:
67:8e:37:98:3b:2a:5b:68:65:aa:43:3f:72:75:4c:9b:74:0c:
72:dc:79:80:e9:ee:79:69:f9:62:c9:2a:fb:c7:6c:af:43:08:
f3:81:04:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEuDu+p/RhaozsA5izBUntoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2
OGFjOWIwHhcNMjYxMDEyMDMwMTMzWhcNMjYxMDEzMDMwMTMzWjAzMTEwLwYDVQQD
Eyg4YmU1OWEwZTE5NWQwZTEwZTQ5YzhiYjM0YjFiMmE4YmNjODRjNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0sM03tzljjYYmIc8YZxlSppTzp
yngDmljQ7T2Dpl1zGaUjo52qarcAK+7DzMIoiclRm4sj/3yb/BxYvSMAncrIWKMn
l/F6Bj2LhNk2ZzoTeQ9RnFojwrw41bqi/gttz6351uSAqjCUzgodGt0OYSsm5jKF
XzQDttYY//IgWR7kAYmjoyEUBAgtsT92n3NXfKhYBT2Y46/H9ZfXNnQW8shd7Yeg
W3sMcm6lXTh3Nu09AVmxzdQ43rKzH5wfpsYhFMpuNTuH0k2Gn0t6rFNrDXkIPTAp
xsx2wxy+FnjrKprM5ovcyXSpHc6rOPmp4QOz898C7eqrsO7swibh+FrDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvlmg4ZXQ4Q5JyLs0sbKovMhMdkMB8GA1UdIwQY
MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt
OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm
LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATchRIOhH
E/VJHrFvZ/TYMEurVsJA0l68RL1Ye+U5qY4L+/uaVabE2KEkMPtXBPdYx1S3W1di
aVIpqDQ30h/MnLv2GW/dFLMb97LSIt5RepLtzkyQ6F3FoUbZaPPrqrj7ztR9oa2A
rv1mpLrVr/yKaJXVCrmP7rPXC9zxM9lqbDtL0gZHbav+H9MaId5jS7/ZPzrugWWY
A4Hy0PPA8lZllDvLdHe+1TraxMX6/ERRgyWM6O/mrunQgZoixe+TTcxbmwWAKfYG
Z2L+pTX6/U1aQ0vJElzvY9yZZ443mDsqW2hlqkM/cnVMm3QMctx5gOnueWn5Yskq
+8dsr0MI84EENQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 13:58:05 2026 by rpki-client