Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: wwF46phRJ/eZG/uViEGtvzvk1uxftbXBKtK7Tm0ydA0=
Subject key identifier: E0:A2:A0:D4:31:36:51:6F:A7:BF:19:E9:B2:C5:7B:A3:C2:1B:55:EF
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019CABA1E904CBD903BD630A7742D2409D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: A_68etnfks3PakbL9Hb45owYZ-w.roa (hash: 8UV8lYEu6iu3XIgtRfYywNlrJ6Qvyca/nSSa6hHK38E=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: A4d+wcLuTQx7CyVH7EMyg0ntOjNzyy3c8Dk+uAXB20s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e9:04:cb:d9:03:bd:63:0a:77:42:d2:40:9d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=e0a2a0d43136516fa7bf19e9b2c57ba3c21b55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:77:49:2f:07:93:64:0e:73:81:81:77:3c:
f6:67:52:b6:07:60:98:bb:48:4f:e3:84:d3:c3:06:
85:c5:e4:45:57:11:9f:8f:2f:1c:0d:bc:ed:c2:b7:
ad:ef:af:d3:18:6e:23:42:2c:d2:11:cc:ed:25:f4:
d1:4b:22:b9:4f:dc:e8:a0:58:63:7e:42:f9:be:bb:
fa:5d:23:b1:ff:dd:eb:0c:c8:91:e6:5f:26:d2:f2:
a0:57:b2:9c:c1:d0:73:2a:15:42:77:a3:a8:1e:d4:
7a:96:43:3d:e5:3d:9c:f6:e5:6f:0f:98:60:28:8e:
2b:54:75:7d:40:cc:66:c6:02:96:8f:3e:d2:9a:8c:
49:59:9d:98:82:fc:be:57:24:d3:9d:1d:67:f8:01:
55:32:0e:57:f4:af:10:a1:21:e2:7d:f5:81:d3:80:
c5:39:2a:9e:3a:d0:b5:e1:77:5b:fa:8e:5c:ac:98:
6b:75:78:89:b6:90:ad:7b:c1:8b:a0:60:94:29:d0:
99:3a:d4:6a:14:54:ea:0b:a2:a7:41:bb:00:e0:9b:
15:8c:2b:a6:85:61:98:99:5f:54:bb:6a:5e:17:8c:
7b:4d:4d:15:3b:12:06:69:34:b1:cc:71:66:ba:87:
c8:b1:22:ab:c2:e8:71:2e:fe:ac:6b:9b:08:fa:07:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:A0:D4:31:36:51:6F:A7:BF:19:E9:B2:C5:7B:A3:C2:1B:55:EF
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:fb:d4:c0:48:ac:fa:78:97:2c:88:51:5d:1e:d1:db:05:
68:45:7e:d8:c7:69:0c:b2:8a:b7:f5:16:9f:d7:c8:ca:48:fd:
69:6b:aa:c4:de:a3:a0:04:c4:a8:ba:4a:7b:4f:1e:f2:ed:84:
af:e3:8d:5c:50:5e:9e:c1:f5:6b:43:17:64:c7:9f:c9:77:58:
1b:be:9c:b5:86:72:84:4c:8c:d7:2d:30:d3:d9:e3:17:00:c3:
e9:e5:62:c2:13:a1:63:ed:ba:61:50:be:7a:dc:9f:15:a1:dc:
86:48:9a:39:dd:41:d9:70:a8:f9:ce:46:50:d5:a6:58:a1:5f:
cd:69:d9:aa:0c:96:0c:41:4b:4c:20:54:51:9c:b8:1e:84:79:
49:70:f5:df:33:e0:ba:06:92:95:9b:c2:20:4d:b9:76:20:7f:
17:df:f1:e2:0b:03:14:a3:5a:fa:08:23:e0:8c:d2:fd:23:16:
ba:7f:85:63:0b:3f:c2:ad:bf:6a:44:e2:05:36:05:32:08:20:
d9:10:16:ad:7d:47:f2:5a:05:7b:e5:5f:70:dc:f3:8e:4a:b1:
6d:29:db:db:1e:a1:75:5c:7d:78:98:cc:af:dc:95:fd:69:e2:
94:b0:e4:40:29:b8:6a:e2:c9:e9:b3:9d:9f:a2:35:2c:d1:90:
20:fb:24:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroekEy9kDvWMKd0LSQJ0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw
NTZhODkwHhcNMjYwMzAxMjMwMDQwWhcNMjYwMzAyMjMwMDQwWjAzMTEwLwYDVQQD
EyhlMGEyYTBkNDMxMzY1MTZmYTdiZjE5ZTliMmM1N2JhM2MyMWI1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bR3SS8Hk2QOc4GBdzz2Z1K2B2CY
u0hP44TTwwaFxeRFVxGfjy8cDbztwret76/TGG4jQizSEcztJfTRSyK5T9zooFhj
fkL5vrv6XSOx/93rDMiR5l8m0vKgV7KcwdBzKhVCd6OoHtR6lkM95T2c9uVvD5hg
KI4rVHV9QMxmxgKWjz7SmoxJWZ2Ygvy+VyTTnR1n+AFVMg5X9K8QoSHiffWB04DF
OSqeOtC14Xdb+o5crJhrdXiJtpCte8GLoGCUKdCZOtRqFFTqC6KnQbsA4JsVjCum
hWGYmV9Uu2peF4x7TU0VOxIGaTSxzHFmuofIsSKrwuhxLv6sa5sI+gcTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCioNQxNlFvp78Z6bLFe6PCG1XvMB8GA1UdIwQY
MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt
MjEwMmQ5NmVlMzU1LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1
LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTD71MBI
rPp4lyyIUV0e0dsFaEV+2MdpDLKKt/UWn9fIykj9aWuqxN6joATEqLpKe08e8u2E
r+ONXFBensH1a0MXZMefyXdYG76ctYZyhEyM1y0w09njFwDD6eViwhOhY+26YVC+
etyfFaHchkiaOd1B2XCo+c5GUNWmWKFfzWnZqgyWDEFLTCBUUZy4HoR5SXD13zPg
ugaSlZvCIE25diB/F9/x4gsDFKNa+ggj4IzS/SMWun+FYws/wq2/akTiBTYFMggg
2RAWrX1H8loFe+VfcNzzjkqxbSnb2x6hdVx9eJjMr9yV/WnilLDkQCm4auLJ6bOd
n6I1LNGQIPskSA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:31 2026 by rpki-client