Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: tFgTFe7EyxiaSV7pJlRGaIGJUNCa2prgR4PVkIrZaF8=
Subject key identifier: F8:E1:70:45:1A:5C:DE:C1:41:00:60:3B:F8:C2:3D:60:05:87:EE:9C
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019CAD2246D6EB1B7048767746BD03CA2C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 1696
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: sBRQu66lFeec8yBVjM4Urg6ErK1FdsLAiXH5iStRGvo=)
2: s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa (hash: 3dNcn5nfQCOn3nOuz9gztwsMAWS61sZQeaI9Kk8/SgM=)
3: y4V7z4zgAZ-xkRHwN15WVILbdEA.roa (hash: 9JMbptZqg78oPgN1kW4Etd7vu4uHSobcSaTHaJbvEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:46:d6:eb:1b:70:48:76:77:46:bd:03:ca:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=f8e170451a5cdec14100603bf8c23d600587ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:af:dd:d9:ef:d9:c7:b9:cd:02:bf:fb:a1:
64:66:b6:96:dc:48:14:9e:7f:94:bf:e4:64:3a:f7:
cc:57:e2:a7:45:95:3c:1c:57:5d:22:01:6a:9c:a5:
e6:5b:7b:a3:f3:82:40:c0:1e:95:7d:d3:82:82:69:
1a:4b:90:e6:f6:47:3d:d9:c4:31:51:34:73:a5:5a:
41:7d:c4:e7:f1:a1:a9:50:21:bd:7b:fc:d2:c6:67:
fa:52:f1:7a:4e:67:9f:58:84:d1:46:70:6f:1a:a7:
b2:1d:1b:c8:3f:c9:9f:2a:55:b5:70:5a:6c:c8:93:
07:b9:68:82:af:af:38:d6:aa:26:94:04:61:06:25:
e1:50:e4:a7:0f:79:c2:bd:97:4a:a9:ce:7e:e9:0e:
cf:8e:2b:29:d0:ae:d2:ed:dd:7a:1d:3b:ee:03:a5:
2d:03:98:6b:7a:9e:e0:c9:b3:23:25:e9:0f:09:1b:
68:2c:eb:76:93:5b:db:0a:9c:6c:63:39:98:29:38:
af:db:a5:a6:22:d0:ec:b4:98:ad:77:ab:5a:bb:83:
7b:b6:a4:2d:6b:5b:0c:cc:90:28:9d:dd:67:e1:82:
44:60:9f:15:25:2b:f9:44:a9:24:81:7b:61:69:ee:
da:63:94:4d:a6:94:f5:d3:b9:7e:d1:15:04:66:e4:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:70:45:1A:5C:DE:C1:41:00:60:3B:F8:C2:3D:60:05:87:EE:9C
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9b:0b:67:92:2c:8f:8a:f4:4a:cf:e4:66:d7:4a:56:03:37:
5d:04:b8:52:14:36:00:2b:d8:f1:e7:2f:d2:37:73:e1:28:51:
4c:cd:0d:2d:ad:80:f4:7a:9c:30:a7:45:a0:72:08:63:00:98:
de:2f:4b:bc:85:1d:23:aa:c4:75:9a:92:b7:7d:cc:60:b2:2e:
1f:d8:ad:8b:c1:12:26:4d:ce:e1:66:55:f2:50:a3:32:b0:1a:
22:be:73:9e:52:1b:32:29:50:4f:c4:5d:47:33:4e:7b:67:ab:
70:69:38:a2:7e:a1:e3:0d:a2:ed:b3:52:5a:68:3d:c4:e3:f5:
3d:71:0c:b8:2e:15:f7:a8:ff:78:89:46:89:76:11:d9:54:4e:
c6:da:52:11:02:18:90:b3:dd:6d:da:5f:17:06:20:4a:bc:e5:
8d:5a:93:d7:4a:09:2d:23:dd:0f:ba:f0:5c:f7:e6:8f:f6:f5:
e6:3f:b2:f2:50:3c:51:2c:8e:f1:e4:8d:f5:21:37:72:2f:6e:
e4:bd:e0:62:08:67:8d:24:fe:8e:5f:26:25:b3:e0:d5:8f:0e:
22:fa:34:27:bb:39:92:a5:67:fe:95:a8:d2:b4:3a:68:c4:ed:
39:31:c4:2f:69:9d:92:e5:f1:1d:df:f1:21:8c:7b:46:b7:23:
3f:6b:06:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIkbW6xtwSHZ3Rr0Dyiw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3
NWExMmIwHhcNMjYwMzAyMDYwMDMwWhcNMjYwMzAzMDYwMDMwWjAzMTEwLwYDVQQD
EyhmOGUxNzA0NTFhNWNkZWMxNDEwMDYwM2JmOGMyM2Q2MDA1ODdlZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M2v3dnv2ce5zQK/+6FkZraW3EgU
nn+Uv+RkOvfMV+KnRZU8HFddIgFqnKXmW3uj84JAwB6VfdOCgmkaS5Dm9kc92cQx
UTRzpVpBfcTn8aGpUCG9e/zSxmf6UvF6TmefWITRRnBvGqeyHRvIP8mfKlW1cFps
yJMHuWiCr6841qomlARhBiXhUOSnD3nCvZdKqc5+6Q7Pjisp0K7S7d16HTvuA6Ut
A5hrep7gybMjJekPCRtoLOt2k1vbCpxsYzmYKTiv26WmItDstJitd6tau4N7tqQt
a1sMzJAond1n4YJEYJ8VJSv5RKkkgXthae7aY5RNppT107l+0RUEZuS9/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjhcEUaXN7BQQBgO/jCPWAFh+6cMB8GA1UdIwQY
MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It
YmM3YTI0YzJlMjE5LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5
LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpsLZ5Is
j4r0Ss/kZtdKVgM3XQS4UhQ2ACvY8ecv0jdz4ShRTM0NLa2A9HqcMKdFoHIIYwCY
3i9LvIUdI6rEdZqSt33MYLIuH9iti8ESJk3O4WZV8lCjMrAaIr5znlIbMilQT8Rd
RzNOe2ercGk4on6h4w2i7bNSWmg9xOP1PXEMuC4V96j/eIlGiXYR2VROxtpSEQIY
kLPdbdpfFwYgSrzljVqT10oJLSPdD7rwXPfmj/b15j+y8lA8USyO8eSN9SE3ci9u
5L3gYghnjST+jl8mJbPg1Y8OIvo0J7s5kqVn/pWo0rQ6aMTtOTHEL2mdkuXxHd/x
IYx7RrcjP2sGSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:16 2026 by rpki-client