Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
File: LiYtdllpdVicNOYIbO6frynOdS4.mft (raw, json)
Hash identifier: CecvGW2okUAu9Ajl1cj4gV41xWAjkXXtOXBZTB3prF8=
Subject key identifier: F9:65:59:63:61:75:09:51:C5:31:44:2C:B2:E8:29:8F:68:39:C2:14
Authority key identifier: 2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
Certificate issuer: /CN=2e262d76596975589c34e6086cee9faf29ce752e
Certificate serial: 01A0C2565F98294F98D9DE41E12E7883FA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
Manifest number: 52
Signing time: Mon 21 Sep 2026 05:00:35 +0000
Manifest this update: Mon 21 Sep 2026 05:00:35 +0000
Manifest next update: Tue 22 Sep 2026 05:00:35 +0000
Files and hashes: 1: LiYtdllpdVicNOYIbO6frynOdS4.crl (hash: 6RBFPCvorOIhF25/4sggvCebY/eBfGIpUZl6f7Ax778=)
2: qQb0atgavDxv8NkMeAdiHfzr7-Y.roa (hash: AViFVb7x3JIRqF+5JVs+5C5G47Fm5cKGzomGqfeSXyE=)
3: z8NnESnMm31CkiNiQFk0utGBdX0.roa (hash: arwsZJiyIecZlyuebzhSrVKYoD98u/qSY1idgg5RXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:5f:98:29:4f:98:d9:de:41:e1:2e:78:83:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e262d76596975589c34e6086cee9faf29ce752e
Validity
Not Before: Sep 21 05:00:35 2026 GMT
Not After : Sep 22 05:00:35 2026 GMT
Subject: CN=f965596361750951c531442cb2e8298f6839c214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:4a:ae:83:6a:08:a4:20:e7:f6:f6:ae:6c:
a8:c0:6d:45:34:62:03:7e:1c:73:40:f7:ca:fa:a7:
c1:1d:1a:04:39:43:4f:b5:f5:f7:bb:6d:36:c9:b0:
d1:df:3c:35:f4:a6:d7:c0:6a:ca:7c:bd:1d:ef:0b:
1c:06:ab:ad:63:cb:eb:73:75:48:05:8b:67:7a:46:
9e:6d:8a:71:2f:dc:92:53:1e:e4:ea:9a:2e:87:e8:
4f:ab:03:94:60:4c:85:49:25:51:88:e1:89:86:d1:
87:7c:dd:1c:86:e1:37:ed:b1:82:ec:26:a4:65:be:
78:c3:b7:01:02:1b:5d:33:a2:cf:ee:a4:07:19:20:
fa:4a:07:18:fc:22:0c:f1:bd:98:78:3e:d5:77:76:
16:c8:7b:a9:c8:7a:9e:3b:de:1d:ee:56:65:08:99:
cd:ef:32:61:7f:a4:81:c9:65:aa:0f:a1:28:1a:a1:
b5:d1:3a:48:87:c6:99:65:91:8f:ca:1e:6c:49:6f:
08:7e:12:92:2c:47:37:a3:b7:17:b4:80:c1:b9:9b:
ef:aa:a2:cf:b6:db:d6:c7:7f:2c:20:5c:87:4b:25:
34:d1:ed:a1:f7:f4:dc:94:7d:bb:ce:9e:2a:a8:67:
3e:88:45:db:6a:2f:77:9b:99:67:23:c3:e8:db:31:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:59:63:61:75:09:51:C5:31:44:2C:B2:E8:29:8F:68:39:C2:14
X509v3 Authority Key Identifier:
keyid:2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:91:ce:55:63:53:6e:ae:23:12:9e:b8:ed:1a:51:22:f9:
25:a7:90:ad:46:8f:71:43:c4:af:30:47:fb:db:0a:c4:c0:6d:
2a:55:30:56:90:08:72:57:d0:6f:e0:4a:bb:97:a0:34:7c:f1:
53:f6:db:35:60:69:e7:02:ab:fd:9a:f4:6b:28:00:3c:e8:51:
88:e3:52:8f:8c:6d:52:6e:6d:dc:f4:15:42:8a:69:2b:ae:ec:
53:fd:b7:36:36:db:bb:b5:1d:75:5c:2a:96:10:ad:f8:00:19:
89:6a:13:5a:3a:b2:14:1f:bf:6d:9e:28:8c:2b:6a:f4:1f:7d:
ce:85:ef:d6:32:e4:15:ba:56:5d:b2:78:91:54:7c:08:3c:55:
26:89:6a:24:25:6d:bd:60:0d:d5:fa:36:ac:99:6a:c7:76:a6:
e8:0b:fe:79:af:f3:37:2e:fe:ab:4d:9a:3b:49:b0:1f:d0:22:
92:38:fd:ad:25:ba:72:72:06:e0:99:9c:9b:9d:23:16:f2:b3:
07:19:b1:6a:78:b1:06:8c:01:c4:84:f9:59:6f:0c:6d:d1:5c:
60:48:16:d0:8a:6b:98:9e:34:7e:3f:59:aa:43:da:74:31:67:
a8:41:3d:67:27:15:fb:3e:3f:5b:0a:6d:a9:ea:84:b9:c7:dd:
e3:ba:08:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVl+YKU+Y2d5B4S54g/oJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjYyZDc2NTk2OTc1NTg5YzM0ZTYwODZjZWU5ZmFmMjlj
ZTc1MmUwHhcNMjYwOTIxMDUwMDM1WhcNMjYwOTIyMDUwMDM1WjAzMTEwLwYDVQQD
EyhmOTY1NTk2MzYxNzUwOTUxYzUzMTQ0MmNiMmU4Mjk4ZjY4MzljMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVtKroNqCKQg5/b2rmyowG1FNGID
fhxzQPfK+qfBHRoEOUNPtfX3u202ybDR3zw19KbXwGrKfL0d7wscBqutY8vrc3VI
BYtnekaebYpxL9ySUx7k6pouh+hPqwOUYEyFSSVRiOGJhtGHfN0chuE37bGC7Cak
Zb54w7cBAhtdM6LP7qQHGSD6SgcY/CIM8b2YeD7Vd3YWyHupyHqeO94d7lZlCJnN
7zJhf6SByWWqD6EoGqG10TpIh8aZZZGPyh5sSW8IfhKSLEc3o7cXtIDBuZvvqqLP
ttvWx38sIFyHSyU00e2h9/TclH27zp4qqGc+iEXbai93m5lnI8Po2zFs3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPllWWNhdQlRxTFELLLoKY9oOcIUMB8GA1UdIwQY
MBaAFC4mLXZZaXVYnDTmCGzun68pznUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlZdGRsbHBkVmljTk9ZSWJPNmZyeW5PZFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lOGM4YWQtNDQxMC00MTRmLTgzYTkt
NTViNTc2MTZkYzdhLzEvTGlZdGRsbHBkVmljTk9ZSWJPNmZyeW5PZFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lOGM4YWQtNDQxMC00MTRmLTgzYTktNTViNTc2MTZkYzdh
LzEvTGlZdGRsbHBkVmljTk9ZSWJPNmZyeW5PZFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+uRzlVj
U26uIxKeuO0aUSL5JaeQrUaPcUPErzBH+9sKxMBtKlUwVpAIclfQb+BKu5egNHzx
U/bbNWBp5wKr/Zr0aygAPOhRiONSj4xtUm5t3PQVQoppK67sU/23Njbbu7UddVwq
lhCt+AAZiWoTWjqyFB+/bZ4ojCtq9B99zoXv1jLkFbpWXbJ4kVR8CDxVJolqJCVt
vWAN1fo2rJlqx3am6Av+ea/zNy7+q02aO0mwH9Aikjj9rSW6cnIG4Jmcm50jFvKz
BxmxanixBowBxIT5WW8MbdFcYEgW0IprmJ40fj9ZqkPadDFnqEE9ZycV+z4/Wwpt
qeqEucfd47oIeg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:49 2026 by rpki-client