Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: r5Bic+IY8mJm3NhC8NuYgH+ySxe2l5iKoyYbfghjxFE=
Subject key identifier: 5F:01:B7:5E:94:1A:65:6F:8E:DD:74:C2:9C:6C:95:16:BB:3C:95:FC
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019F37177D61B11E076B24C04A9C008C7915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0532
Signing time: Mon 06 Jul 2026 11:01:54 +0000
Manifest this update: Mon 06 Jul 2026 11:01:54 +0000
Manifest next update: Tue 07 Jul 2026 11:01:54 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: gWoOylavUzUyrgyBcBV0NTvGbQQgHEwSJD3O28Q2WhM=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:17:7d:61:b1:1e:07:6b:24:c0:4a:9c:00:8c:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jul 6 11:01:54 2026 GMT
Not After : Jul 7 11:01:54 2026 GMT
Subject: CN=5f01b75e941a656f8edd74c29c6c9516bb3c95fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:c3:d3:5f:16:a4:81:3a:55:2f:9e:d9:d4:
09:6e:e7:10:c5:59:c9:c0:b8:f1:ff:f9:3d:29:e1:
fd:3f:0f:1e:6d:7c:7b:c0:77:98:ac:46:39:23:73:
f2:c1:0a:b6:80:9c:83:93:70:e9:c9:f2:70:1f:e7:
ca:5d:18:31:e5:ac:5d:46:1b:8f:90:fd:9a:b5:cc:
0e:d9:db:16:59:b1:1e:7a:c1:9b:7e:d3:7f:e1:57:
36:4a:2b:9c:59:75:de:e0:b7:14:3b:b5:9f:e8:85:
00:84:c5:71:e0:87:33:6b:7e:91:73:c8:73:f8:10:
70:43:1b:e7:c1:19:d9:c6:db:c3:28:3d:58:55:64:
59:05:29:81:cf:71:f1:c4:c6:83:6d:a3:a4:2e:ce:
c4:eb:08:3e:d6:ca:fb:f9:c2:b8:24:18:70:8a:ff:
3d:cb:d7:70:2e:5b:7a:b1:ff:7a:a5:cc:68:d5:52:
59:2a:c0:be:6e:60:3b:dd:a6:81:bb:3e:63:34:52:
c2:0c:5b:25:04:80:0c:0c:15:be:8c:65:3d:ce:6a:
ef:4a:75:f0:a9:c8:5e:38:34:8d:25:d7:11:65:aa:
9d:ec:0a:63:65:a8:4f:d9:f1:93:e8:e6:d0:09:6a:
f2:26:72:ca:82:27:4e:2d:f5:8f:49:59:f9:d2:72:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:B7:5E:94:1A:65:6F:8E:DD:74:C2:9C:6C:95:16:BB:3C:95:FC
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:27:03:11:fd:17:d1:31:a2:51:c5:10:e4:51:7d:91:6b:b5:
06:c4:72:b2:54:15:38:0c:00:b6:92:95:ec:51:48:23:4a:99:
5a:4e:10:d1:19:ee:f2:15:2b:ed:8a:f7:ac:d2:63:60:d0:72:
12:2c:24:6b:f7:a6:af:d0:98:71:fb:ed:03:c1:b8:94:6f:a9:
18:db:ee:ca:8c:9e:b6:f2:9d:b2:1c:46:dc:69:a9:cc:9b:5e:
fe:83:92:8f:bf:77:16:71:77:06:8c:8a:d0:e3:70:c3:ed:0f:
b6:a0:16:c9:f1:a3:f7:37:45:73:33:25:10:e3:23:cf:1c:6c:
d0:6b:e6:5e:e5:76:76:27:8f:12:12:34:d4:f5:2a:ac:24:44:
8d:fc:76:fb:37:a8:49:4d:f5:71:e8:fc:d6:a1:b1:52:d7:34:
f6:bb:f2:9d:4a:db:fa:21:fa:0d:d4:70:a1:a3:f3:70:05:f7:
81:de:32:91:1e:9b:6a:6c:12:42:65:c8:1f:c9:5b:92:55:17:
eb:72:5e:37:e3:ee:87:5c:fc:e7:73:c4:0b:5e:31:5a:57:d5:
00:a5:7d:9c:21:bf:e5:a1:aa:11:52:71:a2:ed:92:2e:de:17:
e2:51:83:46:47:be:e7:29:86:ee:f6:72:89:39:c6:da:2e:91:
8f:d0:46:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ83F31hsR4HayTASpwAjHkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwNzA2MTEwMTU0WhcNMjYwNzA3MTEwMTU0WjAzMTEwLwYDVQQD
Eyg1ZjAxYjc1ZTk0MWE2NTZmOGVkZDc0YzI5YzZjOTUxNmJiM2M5NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/D018WpIE6VS+e2dQJbucQxVnJ
wLjx//k9KeH9Pw8ebXx7wHeYrEY5I3PywQq2gJyDk3DpyfJwH+fKXRgx5axdRhuP
kP2atcwO2dsWWbEeesGbftN/4Vc2SiucWXXe4LcUO7Wf6IUAhMVx4Icza36Rc8hz
+BBwQxvnwRnZxtvDKD1YVWRZBSmBz3HxxMaDbaOkLs7E6wg+1sr7+cK4JBhwiv89
y9dwLlt6sf96pcxo1VJZKsC+bmA73aaBuz5jNFLCDFslBIAMDBW+jGU9zmrvSnXw
qcheODSNJdcRZaqd7ApjZahP2fGT6ObQCWryJnLKgidOLfWPSVn50nLanQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8Bt16UGmVvjt10wpxslRa7PJX8MB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIScDEf0X
0TGiUcUQ5FF9kWu1BsRyslQVOAwAtpKV7FFII0qZWk4Q0Rnu8hUr7Yr3rNJjYNBy
Eiwka/emr9CYcfvtA8G4lG+pGNvuyoyetvKdshxG3GmpzJte/oOSj793FnF3BoyK
0ONww+0PtqAWyfGj9zdFczMlEOMjzxxs0GvmXuV2diePEhI01PUqrCREjfx2+zeo
SU31cej81qGxUtc09rvynUrb+iH6DdRwoaPzcAX3gd4ykR6bamwSQmXIH8lbklUX
63JeN+Puh1z853PEC14xWlfVAKV9nCG/5aGqEVJxou2SLt4X4lGDRke+5ymG7vZy
iTnG2i6Rj9BGwQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:58 2026 by rpki-client