Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: y5Z5FgyDME+eX4+G+ckUF5Uocl5DL3tbjUTrLC5h7cI=
Subject key identifier: 36:A5:0C:2F:58:13:63:47:B0:21:86:08:F8:C6:B4:6F:2C:B1:4F:4F
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01A12654FB8F7CB1C6CF54D47D8C408489E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 15:01:05 +0000
Manifest this update: Sat 10 Oct 2026 15:01:05 +0000
Manifest next update: Sun 11 Oct 2026 15:01:05 +0000
Files and hashes: 1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: uETHCncCwjdQM7Dz3L63mPWgxiWqoxGAHwWT2GQr2/I=)
7: PTxGryENH4mD20Ccz3IFvC8h74s.roa (hash: 3zw+NEm8FaAvgwVFX3LBOptNCA81ya5MsfkEuiCj8Eo=)
8: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:54:fb:8f:7c:b1:c6:cf:54:d4:7d:8c:40:84:89:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 10 15:01:05 2026 GMT
Not After : Oct 11 15:01:05 2026 GMT
Subject: CN=36a50c2f58136347b0218608f8c6b46f2cb14f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:68:54:7f:da:7a:dd:e2:d7:04:5d:bf:7a:
e5:32:03:4a:09:2c:b7:90:0d:67:9d:7f:00:43:dd:
1c:6f:b5:b9:c3:88:de:5a:a8:bd:4a:fe:c7:27:cf:
13:af:b9:4e:ad:a7:52:fd:fb:a2:df:b3:42:66:f6:
8a:1f:fa:b9:9d:68:22:87:7c:c6:c3:32:fc:8f:c0:
1e:8b:aa:71:fe:43:ad:0d:ef:99:6b:0b:bc:c1:19:
e1:b2:72:35:66:40:20:b7:2b:b4:fd:a2:2f:ea:eb:
f9:31:d4:37:34:19:b0:8e:62:ba:0c:29:a4:84:40:
e2:c0:5e:e3:2d:4b:4c:e5:ce:9f:df:c4:6c:9a:1d:
06:e8:be:fe:72:25:11:9c:55:72:57:4e:f3:af:dd:
6b:cf:04:f6:d6:15:87:69:0e:b9:8d:15:0f:f1:89:
97:07:8e:b7:8f:1d:53:87:f6:b1:f6:a8:16:6b:a9:
72:3d:82:ff:71:42:e4:4f:9d:fc:f9:95:2f:5c:51:
32:3b:ed:7c:69:3b:a5:96:4b:14:2b:87:78:df:d3:
a1:40:a8:85:bb:f2:b6:02:b2:21:01:b9:5b:58:4d:
d1:ad:d1:45:6c:79:ac:b5:8b:04:3a:ed:4d:0c:70:
9b:be:e8:58:dc:b0:8d:2c:cc:95:02:7c:49:02:62:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:0C:2F:58:13:63:47:B0:21:86:08:F8:C6:B4:6F:2C:B1:4F:4F
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:60:39:52:ad:4d:74:6c:95:1e:69:78:ac:67:b3:9a:e6:
d5:ff:70:73:e4:6b:27:82:1e:71:d0:c1:25:68:af:87:37:71:
dd:71:61:b5:3d:47:1d:ff:4f:76:19:46:67:c7:1e:fd:db:cd:
7d:11:6b:f1:dd:ef:31:4c:79:52:47:ac:fb:a7:f2:5c:93:5c:
36:ef:ae:e3:65:e9:75:a8:81:1a:60:2f:8a:72:0e:9d:d8:21:
b7:b2:ac:1c:2e:c4:b9:2d:83:62:70:e5:61:ed:48:5e:0f:d5:
c8:3f:0d:32:29:dd:44:0f:97:00:5b:68:e5:e8:ad:54:43:f6:
12:d9:a0:1e:05:5f:b3:a9:ec:e3:0e:e4:3f:d9:6a:9f:90:fe:
6c:17:30:8b:41:3a:ad:33:82:57:29:42:d3:fc:62:67:dd:4b:
87:5a:eb:e3:bd:ac:13:9e:ef:7e:d0:88:92:3f:5f:04:b1:bd:
56:36:5d:77:b2:9a:d0:00:d6:30:4d:1c:34:60:30:b5:cb:1a:
44:fb:fa:2c:09:65:9a:36:b0:88:b1:2f:de:23:f7:a3:da:07:
85:97:ba:e5:9e:bc:06:a8:14:e3:cc:b1:7f:16:4f:5b:0c:44:
ee:99:08:fe:ea:04:fb:3c:bb:dd:35:55:57:a5:c9:b9:ca:87:
5e:da:6f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmVPuPfLHGz1TUfYxAhInnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0
NzdmNzUwHhcNMjYxMDEwMTUwMTA1WhcNMjYxMDExMTUwMTA1WjAzMTEwLwYDVQQD
EygzNmE1MGMyZjU4MTM2MzQ3YjAyMTg2MDhmOGM2YjQ2ZjJjYjE0ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4JoVH/aet3i1wRdv3rlMgNKCSy3
kA1nnX8AQ90cb7W5w4jeWqi9Sv7HJ88Tr7lOradS/fui37NCZvaKH/q5nWgih3zG
wzL8j8Aei6px/kOtDe+Zawu8wRnhsnI1ZkAgtyu0/aIv6uv5MdQ3NBmwjmK6DCmk
hEDiwF7jLUtM5c6f38Rsmh0G6L7+ciURnFVyV07zr91rzwT21hWHaQ65jRUP8YmX
B463jx1Th/ax9qgWa6lyPYL/cULkT538+ZUvXFEyO+18aTullksUK4d439OhQKiF
u/K2ArIhAblbWE3RrdFFbHmstYsEOu1NDHCbvuhY3LCNLMyVAnxJAmIcDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDalDC9YE2NHsCGGCPjGtG8ssU9PMB8GA1UdIwQY
MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt
OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1
LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUItgOVKt
TXRslR5peKxns5rm1f9wc+RrJ4IecdDBJWivhzdx3XFhtT1HHf9PdhlGZ8ce/dvN
fRFr8d3vMUx5Ukes+6fyXJNcNu+u42XpdaiBGmAvinIOndght7KsHC7EuS2DYnDl
Ye1IXg/VyD8NMindRA+XAFto5eitVEP2EtmgHgVfs6ns4w7kP9lqn5D+bBcwi0E6
rTOCVylC0/xiZ91Lh1rr472sE57vftCIkj9fBLG9VjZdd7Ka0ADWME0cNGAwtcsa
RPv6LAllmjawiLEv3iP3o9oHhZe65Z68BqgU48yxfxZPWwxE7pkI/uoE+zy73TVV
V6XJucqHXtpvmQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:27 2026 by rpki-client