Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: KQkeVOYJLcXXBe+WLaVStRYvKU7WqvHSPvtoLUnykHs=
Subject key identifier: B6:06:E9:B9:F6:97:6B:14:3E:22:05:E5:64:86:D5:26:D8:DF:CB:75
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 01A1103AD411D7948054A3B2DF04F8A2B2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0627
Signing time: Tue 06 Oct 2026 08:00:53 +0000
Manifest this update: Tue 06 Oct 2026 08:00:53 +0000
Manifest next update: Wed 07 Oct 2026 08:00:53 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: Xk/MhLFYxd8zHDh7N/RojTy/chqWXKZBslMd/7IrbYY=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3a:d4:11:d7:94:80:54:a3:b2:df:04:f8:a2:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Oct 6 08:00:53 2026 GMT
Not After : Oct 7 08:00:53 2026 GMT
Subject: CN=b606e9b9f6976b143e2205e56486d526d8dfcb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:0c:59:ae:d8:4f:48:fa:6c:49:0f:a1:bd:
30:be:b2:54:ee:6f:82:d4:27:13:6c:bf:c0:4e:a1:
50:4f:0d:98:39:e1:34:c1:e3:d9:ca:bb:44:a1:2a:
4b:4a:11:f7:11:3a:24:c0:3d:8a:be:80:fb:bd:d2:
21:eb:4c:5f:05:00:53:8a:ac:e8:90:07:d3:f2:e0:
0e:08:fe:81:a9:9d:e1:62:45:af:ab:64:38:09:f0:
54:54:e9:f9:70:a7:03:a9:09:20:7b:a5:ed:5d:05:
1b:64:9e:49:f5:6a:df:0e:14:62:5d:67:29:6e:ca:
6d:37:8d:92:81:d3:5b:53:07:3e:b6:21:b2:df:fd:
c4:2c:cf:31:13:5c:f5:cf:49:47:b2:09:5d:82:61:
c3:fb:aa:92:ab:12:66:8e:e7:e9:63:21:9f:58:75:
1d:4a:bd:00:ec:d3:99:cc:55:84:47:75:74:14:53:
d3:7e:66:4c:ae:0d:97:7c:36:4b:f4:ec:08:55:45:
97:16:d4:b4:1c:a5:30:7f:24:4c:01:fa:65:d8:64:
93:a9:06:f2:36:fb:80:bf:18:71:2b:f0:84:07:54:
bc:64:50:aa:2b:68:35:63:78:6e:a0:a7:5b:a8:51:
67:00:90:4c:f7:05:f5:8f:9d:3b:b0:06:c4:34:68:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:E9:B9:F6:97:6B:14:3E:22:05:E5:64:86:D5:26:D8:DF:CB:75
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:37:b8:a8:ad:7b:c7:ef:75:73:78:89:51:13:5a:1d:91:6f:
9d:8b:0b:04:d2:b2:16:51:0e:53:b2:36:12:c5:c1:87:fb:09:
21:e3:06:6d:b4:a6:da:86:80:8c:44:b0:60:c8:e5:fd:e5:e4:
cb:0c:a1:2f:ba:39:d1:9f:c3:2d:ae:69:9c:67:82:4f:a3:ef:
bc:73:6e:7d:14:4d:33:c8:7a:5d:41:26:c1:83:2e:1c:40:63:
58:97:82:2b:07:c6:5d:09:70:7f:e9:7b:9a:bf:e0:3b:47:d6:
71:27:1e:eb:b0:2b:22:e8:71:03:89:05:94:60:86:87:b6:03:
38:df:1a:2b:0c:4e:9b:47:3a:c4:71:4f:ff:1c:e9:03:77:73:
c8:37:0d:ba:b0:d0:92:cb:e4:6d:49:8a:f5:27:6a:09:5e:11:
94:6f:1c:cc:20:07:16:ff:47:d0:f2:12:c7:17:30:c7:35:27:
9d:9f:35:8b:5e:18:95:55:81:34:ff:47:a6:ac:f3:c5:92:0e:
5e:10:11:67:59:9a:f0:6d:f4:47:53:2c:96:0b:c4:4a:e3:af:
5d:12:09:9d:ab:0a:23:9c:dc:6c:53:82:09:aa:09:d9:a2:96:
38:20:80:b0:1b:c7:4e:ef:0b:54:0a:5a:07:02:16:12:89:31:
93:5a:3a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQOtQR15SAVKOy3wT4orKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYxMDA2MDgwMDUzWhcNMjYxMDA3MDgwMDUzWjAzMTEwLwYDVQQD
EyhiNjA2ZTliOWY2OTc2YjE0M2UyMjA1ZTU2NDg2ZDUyNmQ4ZGZjYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcAMWa7YT0j6bEkPob0wvrJU7m+C
1CcTbL/ATqFQTw2YOeE0wePZyrtEoSpLShH3ETokwD2KvoD7vdIh60xfBQBTiqzo
kAfT8uAOCP6BqZ3hYkWvq2Q4CfBUVOn5cKcDqQkge6XtXQUbZJ5J9WrfDhRiXWcp
bsptN42SgdNbUwc+tiGy3/3ELM8xE1z1z0lHsgldgmHD+6qSqxJmjufpYyGfWHUd
Sr0A7NOZzFWER3V0FFPTfmZMrg2XfDZL9OwIVUWXFtS0HKUwfyRMAfpl2GSTqQby
NvuAvxhxK/CEB1S8ZFCqK2g1Y3huoKdbqFFnAJBM9wX1j507sAbENGi+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYG6bn2l2sUPiIF5WSG1SbY38t1MB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDe4qK17
x+91c3iJURNaHZFvnYsLBNKyFlEOU7I2EsXBh/sJIeMGbbSm2oaAjESwYMjl/eXk
ywyhL7o50Z/DLa5pnGeCT6PvvHNufRRNM8h6XUEmwYMuHEBjWJeCKwfGXQlwf+l7
mr/gO0fWcSce67ArIuhxA4kFlGCGh7YDON8aKwxOm0c6xHFP/xzpA3dzyDcNurDQ
ksvkbUmK9SdqCV4RlG8czCAHFv9H0PISxxcwxzUnnZ81i14YlVWBNP9HpqzzxZIO
XhARZ1ma8G30R1MslgvESuOvXRIJnasKI5zcbFOCCaoJ2aKWOCCAsBvHTu8LVApa
BwIWEokxk1o6LA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:23:05 2026 by rpki-client