
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: IYJHip2mo6k+Smi1zuw4va0CsTFNwNQqAsMZ8hgvGQA=
Subject key identifier: 48:08:90:4D:02:94:BE:0E:95:57:B9:6A:A8:04:06:62:47:65:13:41
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019EBDDA4909C77063E10EDDC71E94329A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 013E
Signing time: Fri 12 Jun 2026 22:00:59 +0000
Manifest this update: Fri 12 Jun 2026 22:00:59 +0000
Manifest next update: Sat 13 Jun 2026 22:00:59 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: pFAJUSDm+1Ls0xvhCgaUmhig3neqZYxeDVF0ExI0tVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:49:09:c7:70:63:e1:0e:dd:c7:1e:94:32:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Jun 12 22:00:59 2026 GMT
Not After : Jun 13 22:00:59 2026 GMT
Subject: CN=4808904d0294be0e9557b96aa804066247651341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:3a:ba:f4:37:d5:e4:66:b6:93:61:a4:b6:
05:ff:1b:d0:bc:0f:b1:8d:b9:8c:53:c7:64:56:44:
85:bc:1c:e5:97:e1:51:6b:24:10:8b:de:6f:21:e6:
ab:ea:fb:59:65:fe:f7:ac:93:a3:d5:be:35:20:0c:
be:fe:77:02:36:2a:05:9b:e9:ef:80:8d:c9:c2:d1:
fa:0e:93:94:0b:50:b8:2e:6f:f7:05:2c:29:54:46:
12:fb:13:69:2a:de:f5:61:b6:1e:06:7b:a6:1f:df:
b8:10:8b:f2:6c:b7:49:87:ea:9d:c6:8a:ca:23:a9:
a2:32:48:b0:6c:d4:9c:6a:98:66:47:3c:4e:e4:a3:
8e:5a:95:2f:58:3b:7c:b4:7f:1d:c1:ea:55:85:87:
2f:2b:11:d6:1b:7f:51:2c:1d:4a:4f:a9:9b:96:9e:
4f:78:63:3e:6c:25:18:85:2c:6b:17:10:cf:56:4f:
ca:87:cc:4b:38:ac:aa:18:a7:7e:ea:f5:29:31:b9:
a7:bd:74:58:d0:d7:41:76:f5:b1:6a:c0:89:5f:8f:
3f:f3:4b:50:40:7a:59:f5:4e:6b:ad:ee:af:2b:e5:
b6:57:ec:f9:78:87:09:b6:dd:26:de:dc:31:8a:3a:
f1:be:55:b1:0e:8c:74:56:12:b0:73:61:8b:d2:64:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:90:4D:02:94:BE:0E:95:57:B9:6A:A8:04:06:62:47:65:13:41
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:81:a9:db:58:98:b0:d8:22:09:50:ff:24:6c:45:e1:16:
f7:7b:0d:a2:70:68:3e:99:69:b4:db:41:44:96:85:02:9d:96:
c0:5e:01:cc:16:c2:6f:43:57:f5:d0:44:73:41:52:c2:71:d7:
d6:a7:e3:a3:6a:69:67:b5:31:a3:30:ab:88:b7:64:d2:39:ab:
1c:28:c4:c4:12:fa:d0:ef:f2:d4:84:21:ad:ce:7d:fe:a8:70:
6b:33:46:e4:eb:ee:8a:83:7d:73:df:a7:95:67:54:b7:79:56:
03:ba:07:0e:a3:f3:9e:7c:d1:15:d3:c9:2f:9a:55:2f:8f:0c:
c3:fd:a6:4f:36:fd:f8:6b:3e:71:ee:ea:6f:3a:d6:de:28:83:
c0:98:f0:cf:03:05:79:48:9d:58:3e:75:e5:43:6b:c1:f2:03:
50:eb:21:c4:a7:99:0a:6e:44:cf:5a:a3:d6:9e:01:38:1d:9c:
7a:8d:02:98:d7:59:5a:e1:1b:76:ad:dd:08:72:41:c6:03:ee:
ce:a3:2b:14:e3:e8:6d:63:29:5f:69:98:14:20:df:88:b8:72:
e3:ce:d0:09:fd:25:2f:56:ed:5b:a9:04:62:09:54:47:a8:63:
1f:54:d3:e9:5d:c9:8e:85:21:11:ac:64:30:94:19:8c:9c:b4:
46:aa:e0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692kkJx3Bj4Q7dxx6UMppwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTM3ZTk5NjZkNGJhZmY3YzM5MjAzOGQ0MzMxN2QyYWY5
MTRiYTcwHhcNMjYwNjEyMjIwMDU5WhcNMjYwNjEzMjIwMDU5WjAzMTEwLwYDVQQD
Eyg0ODA4OTA0ZDAyOTRiZTBlOTU1N2I5NmFhODA0MDY2MjQ3NjUxMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05s6uvQ31eRmtpNhpLYF/xvQvA+x
jbmMU8dkVkSFvBzll+FRayQQi95vIear6vtZZf73rJOj1b41IAy+/ncCNioFm+nv
gI3JwtH6DpOUC1C4Lm/3BSwpVEYS+xNpKt71YbYeBnumH9+4EIvybLdJh+qdxorK
I6miMkiwbNScaphmRzxO5KOOWpUvWDt8tH8dwepVhYcvKxHWG39RLB1KT6mblp5P
eGM+bCUYhSxrFxDPVk/Kh8xLOKyqGKd+6vUpMbmnvXRY0NdBdvWxasCJX48/80tQ
QHpZ9U5rre6vK+W2V+z5eIcJtt0m3twxijrxvlWxDox0VhKwc2GL0mSF3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgIkE0ClL4OlVe5aqgEBmJHZRNBMB8GA1UdIwQY
MBaAFJUTfplm1Lr/fDkgONQzF9KvkUunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMt
OWM2NjdmMzBmZjhkLzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMtOWM2NjdmMzBmZjhk
LzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi2BqdtY
mLDYIglQ/yRsReEW93sNonBoPplptNtBRJaFAp2WwF4BzBbCb0NX9dBEc0FSwnHX
1qfjo2ppZ7UxozCriLdk0jmrHCjExBL60O/y1IQhrc59/qhwazNG5OvuioN9c9+n
lWdUt3lWA7oHDqPznnzRFdPJL5pVL48Mw/2mTzb9+Gs+ce7qbzrW3iiDwJjwzwMF
eUidWD515UNrwfIDUOshxKeZCm5Ez1qj1p4BOB2ceo0CmNdZWuEbdq3dCHJBxgPu
zqMrFOPobWMpX2mYFCDfiLhy487QCf0lL1btW6kEYglUR6hjH1TT6V3JjoUhEaxk
MJQZjJy0Rqrg1A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:58 2026 by rpki-client