Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: tZK5GAwLmDSISizpCn0R48WtvDNocDRsheuahTXmcXA=
Subject key identifier: 04:A0:52:F5:ED:25:50:94:49:3B:AF:44:30:C9:62:C5:6D:14:8A:98
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 01A020C33658943D50E71980A3757BBE6E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 05AB
Signing time: Thu 20 Aug 2026 20:00:59 +0000
Manifest this update: Thu 20 Aug 2026 20:00:59 +0000
Manifest next update: Fri 21 Aug 2026 20:00:59 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: Y3LjuXBvP7h6qlHTXPBIX4uvToOSXD2scAgKfEZI9W4=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:36:58:94:3d:50:e7:19:80:a3:75:7b:be:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Aug 20 20:00:59 2026 GMT
Not After : Aug 21 20:00:59 2026 GMT
Subject: CN=04a052f5ed255094493baf4430c962c56d148a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:bd:30:4c:9b:87:a6:e4:96:b7:c6:86:66:
89:92:29:7e:20:90:88:8f:11:98:2c:a4:04:6f:6f:
05:0e:ae:9a:47:d9:50:48:75:9f:68:7f:31:d5:4d:
55:33:b0:d1:bb:fd:c5:84:c6:16:63:20:46:03:f5:
36:04:a1:5b:01:ff:d9:24:b1:8b:3a:64:fc:49:3b:
53:bc:df:56:aa:04:07:41:a1:4c:b1:fc:54:26:40:
c6:9d:3e:40:02:be:80:7d:2c:bc:7c:7f:c5:b5:18:
a1:ba:c8:50:9a:4f:ae:1f:ad:75:cd:41:20:bb:c8:
82:4c:4e:41:33:ed:c4:68:1d:4d:5f:4e:a4:b3:f3:
e7:24:1f:df:1d:ec:17:27:37:d7:cd:6d:fb:f5:f5:
89:42:a1:28:63:6f:c8:f2:b6:79:22:a0:de:39:c5:
d8:41:e3:2c:df:36:c8:52:4d:74:45:8c:e9:a8:d6:
7b:1c:3d:df:ef:f1:9a:8a:a1:56:27:56:5d:e9:f6:
15:79:fb:57:c1:74:80:b1:de:2f:69:83:bf:6b:38:
b2:3f:92:e4:9d:63:64:51:d5:39:f7:53:ba:c6:ed:
b3:c6:d5:2f:13:b7:68:63:5f:48:ad:27:22:df:36:
05:88:18:49:5c:6f:46:0e:a8:65:c4:f0:4e:0a:38:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:52:F5:ED:25:50:94:49:3B:AF:44:30:C9:62:C5:6D:14:8A:98
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:40:74:4e:99:d8:93:e0:31:3d:0a:c5:84:ab:1e:e9:f1:5c:
e7:14:b3:ba:b0:7e:7e:e8:6d:bf:eb:1f:8e:ca:4b:99:a6:8e:
f7:13:d4:31:87:df:0b:08:67:20:47:73:35:14:93:82:61:cc:
7e:85:c9:6b:37:00:d7:04:b7:64:63:e8:07:70:23:20:99:27:
ff:50:d9:6b:7d:d5:87:53:1e:e5:dd:0a:25:4b:aa:41:a5:60:
4d:67:c7:17:c9:15:1d:b3:15:f8:5f:f1:4e:66:c2:28:29:cf:
78:37:cd:56:42:3d:9d:55:61:94:71:66:9a:bc:ad:1a:fd:95:
0a:de:5f:d6:23:9a:81:af:3e:71:5c:74:c4:be:de:be:93:b5:
b1:f9:b1:17:9a:0e:57:a5:85:8b:74:c8:bd:da:6d:76:1b:f4:
cc:e1:f0:0e:66:32:30:c2:58:cb:7c:00:84:64:a6:b4:00:cb:
31:d6:19:b6:52:fb:72:30:23:8f:b2:b1:3a:22:10:40:04:90:
3a:df:ce:4a:af:39:8d:97:bc:21:bf:c1:9d:99:d8:a5:dd:51:
ff:5c:0b:0b:d2:6d:0e:6f:d6:12:91:25:20:cc:7a:33:f5:c2:
5e:7f:e5:4e:48:b9:ca:b0:fa:b0:6b:32:d1:85:42:2c:1d:de:
d4:da:bd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgwzZYlD1Q5xmAo3V7vm6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwODIwMjAwMDU5WhcNMjYwODIxMjAwMDU5WjAzMTEwLwYDVQQD
EygwNGEwNTJmNWVkMjU1MDk0NDkzYmFmNDQzMGM5NjJjNTZkMTQ4YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrW9MEybh6bklrfGhmaJkil+IJCI
jxGYLKQEb28FDq6aR9lQSHWfaH8x1U1VM7DRu/3FhMYWYyBGA/U2BKFbAf/ZJLGL
OmT8STtTvN9WqgQHQaFMsfxUJkDGnT5AAr6AfSy8fH/FtRihushQmk+uH611zUEg
u8iCTE5BM+3EaB1NX06ks/PnJB/fHewXJzfXzW379fWJQqEoY2/I8rZ5IqDeOcXY
QeMs3zbIUk10RYzpqNZ7HD3f7/GaiqFWJ1Zd6fYVeftXwXSAsd4vaYO/aziyP5Lk
nWNkUdU591O6xu2zxtUvE7doY19IrSci3zYFiBhJXG9GDqhlxPBOCjj8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASgUvXtJVCUSTuvRDDJYsVtFIqYMB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUB0TpnY
k+AxPQrFhKse6fFc5xSzurB+fuhtv+sfjspLmaaO9xPUMYffCwhnIEdzNRSTgmHM
foXJazcA1wS3ZGPoB3AjIJkn/1DZa33Vh1Me5d0KJUuqQaVgTWfHF8kVHbMV+F/x
TmbCKCnPeDfNVkI9nVVhlHFmmrytGv2VCt5f1iOaga8+cVx0xL7evpO1sfmxF5oO
V6WFi3TIvdptdhv0zOHwDmYyMMJYy3wAhGSmtADLMdYZtlL7cjAjj7KxOiIQQASQ
Ot/OSq85jZe8Ib/BnZnYpd1R/1wLC9JtDm/WEpElIMx6M/XCXn/lTki5yrD6sGsy
0YVCLB3e1Nq9eg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:35:31 2026 by rpki-client