Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: a35dd93ATc4NF++a6BgvGoI5T5fofSp1pxiV7j1yGas=
Subject key identifier: EB:D8:EF:9D:C4:1A:E4:2B:32:D6:C4:58:3D:B9:DA:55:1B:0E:DC:4B
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 019CAB6B3789FAB0332C79E67211A7E72A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: 1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa (hash: GhIPKfB66xl/U3CpScF6j5w7weYfFaK0TgCynT83hYQ=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: NNvUVG5EH9BGbDxvYcUzig8gQCzg7xJgbCfgoWDR/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:37:89:fa:b0:33:2c:79:e6:72:11:a7:e7:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=ebd8ef9dc41ae42b32d6c4583db9da551b0edc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:86:1b:bc:ca:55:8d:b9:e3:f6:4b:cb:e1:
f6:24:07:d8:d2:47:5e:71:98:c8:36:7c:3a:aa:49:
51:bd:47:a0:b3:06:e4:38:f8:09:79:38:3b:27:6c:
ba:a3:67:de:e1:cc:b4:5b:a8:3a:df:5e:a9:d8:ff:
a8:03:5c:7d:1c:6e:a5:51:69:be:23:6e:79:ed:9d:
cc:f4:99:56:f0:06:c7:76:e4:5e:3e:5d:bd:f6:48:
ed:33:b6:18:21:8b:61:bd:6d:c2:6e:4b:53:5a:f8:
27:7c:c5:45:8f:42:b5:93:21:59:05:d4:77:50:1a:
ae:09:09:5a:e1:ad:aa:88:3e:3f:2b:23:a9:4b:98:
6c:50:be:88:f0:ff:d3:1c:ca:06:28:86:60:10:6b:
c7:bc:51:85:71:6c:1a:7c:ea:98:85:d7:fb:ee:07:
e6:f9:60:2d:e7:48:67:d7:d3:cf:47:16:1b:06:a0:
2c:96:7c:0b:10:80:77:77:00:77:bb:92:9a:d1:64:
87:52:97:f6:04:ce:b8:33:04:2e:fc:22:e2:22:59:
28:09:ab:eb:b8:72:67:89:67:40:84:ba:a9:12:0b:
02:1f:88:96:03:c3:89:85:bb:1e:f1:24:67:81:f5:
a7:a1:82:d2:94:7e:fd:8e:4a:b9:68:d4:e3:9d:fb:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:EF:9D:C4:1A:E4:2B:32:D6:C4:58:3D:B9:DA:55:1B:0E:DC:4B
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:30:83:d1:de:3e:b9:fb:d5:16:24:ff:37:7b:ec:c2:0f:
99:31:fe:4f:14:c9:f1:4b:4a:9a:32:53:d7:76:2a:ff:be:85:
9d:64:e7:17:36:70:b6:b3:e6:d7:4b:6b:5b:16:56:75:28:bd:
f1:45:5e:e2:d5:0f:c6:54:cd:3a:1b:e2:9b:cd:92:32:4b:83:
cf:75:7a:34:9d:34:b7:1d:65:49:9b:9f:d7:55:62:93:69:f1:
ec:1d:ee:64:d6:42:11:c1:72:18:f4:42:0d:dd:ad:09:f7:c5:
3b:88:a7:11:fb:be:f7:d3:a6:ae:70:98:8c:40:8d:5d:1c:6f:
9a:91:c8:d6:83:f4:65:3a:d3:46:52:c9:75:fa:3c:d5:a7:47:
1c:77:8b:4b:e2:e9:b4:f6:82:46:97:cf:e4:52:7e:55:fc:89:
71:8b:86:f2:81:46:a4:c5:7c:8f:91:78:de:70:b6:32:fe:4f:
3e:aa:8b:7f:09:12:e4:42:1b:eb:7c:cb:a4:5c:5a:5d:93:4b:
cf:82:3f:8e:5d:af:7c:86:ae:9d:8f:ef:75:ad:97:c6:ad:40:
e3:73:12:7a:0f:29:f5:05:69:15:6e:12:1f:18:7d:7a:21:e9:
75:07:27:54:1b:e9:b9:2b:78:e4:d2:4e:bb:2f:a1:c5:1d:de:
67:5f:48:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazeJ+rAzLHnmchGn5ypTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5
NmJlMDkwHhcNMjYwMzAxMjIwMDU2WhcNMjYwMzAyMjIwMDU2WjAzMTEwLwYDVQQD
EyhlYmQ4ZWY5ZGM0MWFlNDJiMzJkNmM0NTgzZGI5ZGE1NTFiMGVkYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3yGG7zKVY254/ZLy+H2JAfY0kde
cZjINnw6qklRvUegswbkOPgJeTg7J2y6o2fe4cy0W6g6316p2P+oA1x9HG6lUWm+
I2557Z3M9JlW8AbHduRePl299kjtM7YYIYthvW3CbktTWvgnfMVFj0K1kyFZBdR3
UBquCQla4a2qiD4/KyOpS5hsUL6I8P/THMoGKIZgEGvHvFGFcWwafOqYhdf77gfm
+WAt50hn19PPRxYbBqAslnwLEIB3dwB3u5Ka0WSHUpf2BM64MwQu/CLiIlkoCavr
uHJniWdAhLqpEgsCH4iWA8OJhbse8SRngfWnoYLSlH79jkq5aNTjnfuY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvY753EGuQrMtbEWD252lUbDtxLMB8GA1UdIwQY
MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt
NjQzYTJmYzQ0NzNlLzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl
LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7owg9He
Prn71RYk/zd77MIPmTH+TxTJ8UtKmjJT13Yq/76FnWTnFzZwtrPm10trWxZWdSi9
8UVe4tUPxlTNOhvim82SMkuDz3V6NJ00tx1lSZuf11Vik2nx7B3uZNZCEcFyGPRC
Dd2tCffFO4inEfu+99OmrnCYjECNXRxvmpHI1oP0ZTrTRlLJdfo81adHHHeLS+Lp
tPaCRpfP5FJ+VfyJcYuG8oFGpMV8j5F43nC2Mv5PPqqLfwkS5EIb63zLpFxaXZNL
z4I/jl2vfIaunY/vda2Xxq1A43MSeg8p9QVpFW4SHxh9eiHpdQcnVBvpuSt45NJO
uy+hxR3eZ19I9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:48 2026 by rpki-client