Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: 1EhRhC6bmxKWtUJDQb8p6Oli6+4bp7PU+IBhTAgmmo8=
Subject key identifier: E3:3D:6A:D5:0F:E1:44:1E:48:8D:86:A3:9A:B4:F8:4E:DB:8F:22:B2
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019CAB6BE9D7C02025291DCA1889C4B9A1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 131A
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: Np3eYvkKZTrUp1xzvQxpfoT7UgFKkJUNTfooY5fk030=)
2: TPBr4qhuEHbVrpx83N8QUJTDNdU.roa (hash: C2m3VR4l9I+Rc76oZzgGxywyrqTLMzeW3a0jSsQhw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e9:d7:c0:20:25:29:1d:ca:18:89:c4:b9:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=e33d6ad50fe1441e488d86a39ab4f84edb8f22b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:04:fc:fd:78:de:c1:29:48:64:1d:62:4b:
7d:2f:b5:b6:26:41:5a:a4:54:7e:5c:aa:dd:c3:bd:
08:3d:6d:f0:ef:4d:4b:e8:cd:37:0e:e4:85:a1:63:
06:aa:c8:e4:de:16:6e:70:c1:b2:63:90:5b:29:2b:
3d:bf:b6:1b:a2:3b:20:50:f9:4f:43:13:42:49:ed:
1a:8e:b4:51:e3:4d:1c:64:aa:8b:9b:94:f8:a9:17:
1c:c4:fb:7d:80:a7:5b:14:53:83:22:35:93:9e:50:
a9:48:02:99:61:72:7b:b0:0f:9a:76:0f:04:c9:26:
a9:56:0a:19:25:10:bf:c6:3e:6d:10:fa:ec:9f:b2:
33:b7:65:fa:cb:3d:c9:58:c5:89:74:73:29:31:56:
01:15:ba:cc:f4:96:75:d5:10:0f:2c:5e:68:0a:6d:
e1:db:d1:91:87:14:2f:09:f4:6a:88:67:0d:79:f2:
2a:e4:48:59:b6:07:e5:9d:7e:17:43:cb:b5:04:83:
96:c3:74:f4:a3:d8:d1:a3:45:79:40:3d:43:fc:88:
00:69:25:b1:28:ca:99:f8:59:d7:85:5e:f2:00:4e:
d4:48:5f:1a:84:16:e1:e2:55:f0:64:d2:12:26:c1:
b5:2a:f9:6b:9d:17:1e:01:da:18:86:0f:48:25:1f:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:6A:D5:0F:E1:44:1E:48:8D:86:A3:9A:B4:F8:4E:DB:8F:22:B2
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:47:f3:93:89:5a:97:45:a6:f0:59:ad:1a:ca:4f:86:87:ae:
4c:0c:66:9b:4c:1c:38:02:04:21:ba:9d:33:8e:45:71:01:32:
f5:52:53:e3:34:db:d1:24:f8:c8:88:51:c5:f2:bb:69:0e:cd:
bc:06:7f:39:33:01:51:55:0e:7a:58:33:be:d0:71:0c:2b:ff:
0a:c0:ae:8d:7c:23:1d:09:4c:82:d8:3e:36:2e:9c:a1:be:e4:
c5:1a:f8:f8:75:b2:e6:8e:34:b7:95:c0:f6:8c:95:b7:c8:9b:
88:d9:f9:0c:3d:90:cb:33:df:a8:57:13:c3:59:d1:26:fd:87:
85:be:8f:ef:69:31:d5:23:0d:8d:34:0e:ac:84:95:8c:63:59:
af:6d:37:8a:a2:99:01:ba:1d:85:3d:20:7b:2d:b9:b7:47:d0:
2f:7a:a2:1b:6b:18:b0:20:5a:47:bc:3b:ea:e2:a1:36:48:23:
68:8b:28:6c:10:af:54:17:9c:90:1c:33:c2:4e:89:e7:22:4f:
a5:7e:c3:8e:d0:69:0f:b9:72:5e:aa:63:ed:e1:06:b6:ed:34:
5d:2d:b4:7b:76:7a:eb:8f:35:e4:c5:2b:37:4d:a4:6f:16:51:
66:ed:9c:ab:9e:a5:12:eb:a6:db:65:24:72:c8:b4:f7:49:38:
d2:9c:4e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+nXwCAlKR3KGInEuaHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjYwMzAxMjIwMTQxWhcNMjYwMzAyMjIwMTQxWjAzMTEwLwYDVQQD
EyhlMzNkNmFkNTBmZTE0NDFlNDg4ZDg2YTM5YWI0Zjg0ZWRiOGYyMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLkE/P143sEpSGQdYkt9L7W2JkFa
pFR+XKrdw70IPW3w701L6M03DuSFoWMGqsjk3hZucMGyY5BbKSs9v7YbojsgUPlP
QxNCSe0ajrRR400cZKqLm5T4qRccxPt9gKdbFFODIjWTnlCpSAKZYXJ7sA+adg8E
ySapVgoZJRC/xj5tEPrsn7Izt2X6yz3JWMWJdHMpMVYBFbrM9JZ11RAPLF5oCm3h
29GRhxQvCfRqiGcNefIq5EhZtgflnX4XQ8u1BIOWw3T0o9jRo0V5QD1D/IgAaSWx
KMqZ+FnXhV7yAE7USF8ahBbh4lXwZNISJsG1KvlrnRceAdoYhg9IJR+g1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM9atUP4UQeSI2Go5q0+E7bjyKyMB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkfzk4la
l0Wm8FmtGspPhoeuTAxmm0wcOAIEIbqdM45FcQEy9VJT4zTb0ST4yIhRxfK7aQ7N
vAZ/OTMBUVUOelgzvtBxDCv/CsCujXwjHQlMgtg+Ni6cob7kxRr4+HWy5o40t5XA
9oyVt8ibiNn5DD2QyzPfqFcTw1nRJv2Hhb6P72kx1SMNjTQOrISVjGNZr203iqKZ
AbodhT0gey25t0fQL3qiG2sYsCBaR7w76uKhNkgjaIsobBCvVBeckBwzwk6J5yJP
pX7DjtBpD7lyXqpj7eEGtu00XS20e3Z664815MUrN02kbxZRZu2cq56lEuum22Uk
csi090k40pxOug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:41 2026 by rpki-client