Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: NPI4n3Nk7cZQb3AsbEJGVgMtSbfQSPSxx3NritNwrCs=
Subject key identifier: BE:48:81:B5:FF:98:C8:E8:8D:F7:4C:98:F9:C3:D0:32:04:FA:A9:E9
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019D9D07EA9FB0B344204FF0AC3C2BEB66A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 84
Signing time: Fri 17 Apr 2026 20:00:34 +0000
Manifest this update: Fri 17 Apr 2026 20:00:34 +0000
Manifest next update: Sat 18 Apr 2026 20:00:34 +0000
Files and hashes: 1: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
2: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: N5xQAz975CYWOVHLR/ZSOOq1QeaExy8w/aBHF0HKpwo=)
3: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
4: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
5: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
6: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
7: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
8: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:ea:9f:b0:b3:44:20:4f:f0:ac:3c:2b:eb:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Apr 17 20:00:34 2026 GMT
Not After : Apr 18 20:00:34 2026 GMT
Subject: CN=be4881b5ff98c8e88df74c98f9c3d03204faa9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:ef:7f:c9:da:80:7a:84:61:ce:0a:6c:ef:
1e:47:de:72:8a:aa:d3:8f:54:75:af:46:e2:15:4a:
de:cc:b1:79:7e:4b:c5:47:5e:f5:81:49:2f:43:b0:
70:05:c0:6e:f5:96:4a:4e:15:a1:d7:f5:72:ce:9f:
27:be:05:66:b4:f0:3b:19:9e:e1:22:c1:4e:fa:bf:
78:a0:12:c5:23:7b:ca:4d:e0:18:08:63:4d:a0:8c:
44:08:2e:59:e9:f0:98:7c:6f:55:f2:38:bf:f5:32:
bd:99:13:53:e9:3d:88:8c:bd:38:03:7a:17:bb:77:
80:68:d1:7f:20:ce:dc:eb:05:7e:2e:de:0c:ae:cb:
39:32:7a:6b:c0:29:7f:ce:8f:ae:09:03:01:cd:bc:
0f:eb:b0:81:2d:b2:d3:05:9b:c5:4a:94:7c:93:f6:
0b:76:dd:a2:25:fb:88:71:62:bd:cb:ef:88:4c:fa:
a0:26:05:bd:21:72:d5:80:01:8a:29:cd:37:b0:f0:
9b:87:c5:7a:53:4c:1a:90:df:07:64:1d:4d:00:70:
66:5e:35:98:a7:c8:d2:f7:e4:bd:8b:c0:b7:36:6e:
2d:b4:56:8b:4b:2e:3a:a5:a3:4e:64:bc:d6:13:ab:
ae:0b:99:8d:4a:b3:c6:cc:da:f6:00:b2:f5:bd:db:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:81:B5:FF:98:C8:E8:8D:F7:4C:98:F9:C3:D0:32:04:FA:A9:E9
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:3b:72:22:69:a6:b1:7e:15:de:5b:93:43:1a:e9:c5:2a:
b6:ef:e6:0e:b1:5e:9d:24:39:ff:b5:5d:07:04:4d:c3:00:a4:
23:a8:cf:be:49:45:cc:3a:39:39:b4:b1:9b:d2:0a:54:a6:9b:
8c:06:56:2f:b6:9c:8d:81:5a:24:a0:6c:4f:66:00:a5:38:03:
4d:9d:8c:9f:52:2f:dc:fb:6c:47:6c:27:04:e4:c9:85:f1:27:
b7:2c:7e:10:44:f4:27:ba:ab:16:be:06:c5:7a:7d:d2:18:28:
04:af:c5:f0:83:c6:2f:7b:2c:7b:9f:8b:a0:a8:2a:57:cc:22:
3d:7e:e2:51:27:47:58:4c:84:40:21:22:47:8f:9c:76:1d:71:
e1:62:02:17:40:b6:93:9d:9b:cb:70:d9:af:25:8d:a4:4a:e3:
b8:25:09:57:44:19:e3:10:55:16:f1:53:77:fe:f5:54:4a:a0:
e4:7f:73:99:98:a9:a9:20:8d:ca:f6:bb:aa:a6:d2:fe:4b:7b:
fe:d8:64:7a:b3:dc:04:54:8d:4a:95:4c:4d:2a:03:6d:b9:c0:
6b:f2:32:08:89:f0:ce:3c:f1:9e:4f:67:7e:a9:58:e6:42:60:
d0:d9:25:d9:9b:cb:ee:2d:42:87:f2:fd:90:91:c5:0b:04:6e:
14:a2:cf:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB+qfsLNEIE/wrDwr62amMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwNDE3MjAwMDM0WhcNMjYwNDE4MjAwMDM0WjAzMTEwLwYDVQQD
EyhiZTQ4ODFiNWZmOThjOGU4OGRmNzRjOThmOWMzZDAzMjA0ZmFhOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbDvf8nagHqEYc4KbO8eR95yiqrT
j1R1r0biFUrezLF5fkvFR171gUkvQ7BwBcBu9ZZKThWh1/Vyzp8nvgVmtPA7GZ7h
IsFO+r94oBLFI3vKTeAYCGNNoIxECC5Z6fCYfG9V8ji/9TK9mRNT6T2IjL04A3oX
u3eAaNF/IM7c6wV+Lt4Mrss5MnprwCl/zo+uCQMBzbwP67CBLbLTBZvFSpR8k/YL
dt2iJfuIcWK9y++ITPqgJgW9IXLVgAGKKc03sPCbh8V6U0wakN8HZB1NAHBmXjWY
p8jS9+S9i8C3Nm4ttFaLSy46paNOZLzWE6uuC5mNSrPGzNr2ALL1vdvjgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5IgbX/mMjojfdMmPnD0DIE+qnpMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpY7ciJp
prF+Fd5bk0Ma6cUqtu/mDrFenSQ5/7VdBwRNwwCkI6jPvklFzDo5ObSxm9IKVKab
jAZWL7acjYFaJKBsT2YApTgDTZ2Mn1Iv3PtsR2wnBOTJhfEntyx+EET0J7qrFr4G
xXp90hgoBK/F8IPGL3sse5+LoKgqV8wiPX7iUSdHWEyEQCEiR4+cdh1x4WICF0C2
k52by3DZryWNpErjuCUJV0QZ4xBVFvFTd/71VEqg5H9zmZipqSCNyva7qqbS/kt7
/thkerPcBFSNSpVMTSoDbbnAa/IyCInwzjzxnk9nfqlY5kJg0Nkl2ZvL7i1Ch/L9
kJHFCwRuFKLP7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:20 2026 by rpki-client