Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: CewM0OevyQqmUVUBBwOXivzlrUKS+NUpHSPTZYqvjpQ=
Subject key identifier: DC:BD:93:78:DD:4D:C6:C7:56:B9:EF:A1:F8:00:C2:82:0D:8E:F1:5F
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 01A059D6CDEF2BF6568EDCDE66017E809347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 06A2
Signing time: Mon 31 Aug 2026 22:00:44 +0000
Manifest this update: Mon 31 Aug 2026 22:00:44 +0000
Manifest next update: Tue 01 Sep 2026 22:00:44 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: s03WPvT9uMSo7UKM5W0IK2vaxV66Ow5jbRjtqn2js2w=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:d6:cd:ef:2b:f6:56:8e:dc:de:66:01:7e:80:93:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Aug 31 22:00:44 2026 GMT
Not After : Sep 1 22:00:44 2026 GMT
Subject: CN=dcbd9378dd4dc6c756b9efa1f800c2820d8ef15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:3c:75:12:7b:7f:f5:e4:e7:2b:01:09:1e:
96:f6:14:49:50:52:44:3b:d4:40:e5:ce:7b:b9:92:
f1:28:cc:a5:3b:90:32:8f:24:fc:c1:d9:47:a1:71:
46:f8:a0:c0:30:f3:b3:cd:13:d2:b3:0f:06:3b:b5:
a4:1c:71:89:f1:06:2c:4a:ce:45:1c:9d:f5:e1:99:
2c:00:da:8d:be:d5:ac:54:20:82:b6:73:16:21:f5:
71:4c:45:34:d6:bb:07:58:0c:dc:31:4b:78:19:35:
c6:3a:27:4e:ae:72:03:20:63:a8:3d:1e:6f:68:6e:
86:0f:80:9d:2b:c2:fb:e0:56:7a:8e:1f:83:6e:a7:
7b:48:80:21:99:77:da:36:6f:ab:ef:d9:44:71:a6:
cf:e3:93:99:00:c7:5d:f8:db:b5:60:d3:db:7d:1f:
84:8e:ab:64:d3:5d:d7:7d:9b:45:38:d5:86:cb:47:
02:52:11:66:26:ff:c7:be:c5:73:3e:cb:c5:e9:7b:
72:9d:70:3f:fe:54:0b:9e:dd:12:b3:26:b2:10:f7:
9c:f5:16:87:36:d2:c4:ed:61:22:d9:be:2d:8b:b3:
c1:10:d1:42:80:ae:92:54:84:67:d2:e0:e4:6d:a7:
85:eb:2c:3a:c9:e2:a7:62:c8:3f:19:23:0b:10:b4:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:93:78:DD:4D:C6:C7:56:B9:EF:A1:F8:00:C2:82:0D:8E:F1:5F
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6c:43:64:9e:af:b9:35:5d:53:0a:51:b8:f2:ef:34:66:12:
93:d8:14:e5:c7:7e:19:17:1a:23:1a:6c:18:14:96:3b:19:58:
15:a8:71:38:3f:6b:27:8b:dd:95:5f:a8:88:f3:6d:b3:8b:4e:
64:ce:2b:e7:28:63:ab:1c:f8:a3:a1:75:2a:d3:b2:6a:86:2d:
81:5c:93:4b:59:2d:47:46:44:d7:0f:fc:28:29:db:27:48:47:
2e:e0:19:4b:59:83:cb:44:43:57:ff:c1:50:36:06:dd:68:90:
f4:d9:55:50:b8:34:49:84:42:b6:e0:c4:79:4e:f2:74:56:96:
97:db:25:53:74:fe:ea:5c:25:bb:03:91:7e:1a:7e:b2:68:73:
3e:9e:18:5f:1f:7f:b6:76:d5:a8:15:49:45:e1:23:bf:cb:fe:
67:f4:13:13:7f:c9:da:d5:02:e6:0c:68:ab:fb:9b:07:d8:2f:
bb:d9:92:f4:37:a3:18:ee:e8:e2:db:f9:28:22:45:d1:26:3a:
63:74:b6:c0:d0:29:ca:b1:3f:d1:65:d8:ee:ae:74:6e:e9:7c:
97:9a:4d:c5:09:72:5c:9b:9a:60:49:ad:f5:ea:a8:ab:f6:12:
d6:5a:f8:50:6a:1c:c2:48:05:a7:56:3a:5d:fe:d5:22:8d:cc:
52:6e:f9:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBZ1s3vK/ZWjtzeZgF+gJNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwODMxMjIwMDQ0WhcNMjYwOTAxMjIwMDQ0WjAzMTEwLwYDVQQD
EyhkY2JkOTM3OGRkNGRjNmM3NTZiOWVmYTFmODAwYzI4MjBkOGVmMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQQ8dRJ7f/Xk5ysBCR6W9hRJUFJE
O9RA5c57uZLxKMylO5AyjyT8wdlHoXFG+KDAMPOzzRPSsw8GO7WkHHGJ8QYsSs5F
HJ314ZksANqNvtWsVCCCtnMWIfVxTEU01rsHWAzcMUt4GTXGOidOrnIDIGOoPR5v
aG6GD4CdK8L74FZ6jh+Dbqd7SIAhmXfaNm+r79lEcabP45OZAMdd+Nu1YNPbfR+E
jqtk013XfZtFONWGy0cCUhFmJv/HvsVzPsvF6XtynXA//lQLnt0SsyayEPec9RaH
NtLE7WEi2b4ti7PBENFCgK6SVIRn0uDkbaeF6yw6yeKnYsg/GSMLELTyuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy9k3jdTcbHVrnvofgAwoINjvFfMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWxDZJ6v
uTVdUwpRuPLvNGYSk9gU5cd+GRcaIxpsGBSWOxlYFahxOD9rJ4vdlV+oiPNts4tO
ZM4r5yhjqxz4o6F1KtOyaoYtgVyTS1ktR0ZE1w/8KCnbJ0hHLuAZS1mDy0RDV//B
UDYG3WiQ9NlVULg0SYRCtuDEeU7ydFaWl9slU3T+6lwluwORfhp+smhzPp4YXx9/
tnbVqBVJReEjv8v+Z/QTE3/J2tUC5gxoq/ubB9gvu9mS9DejGO7o4tv5KCJF0SY6
Y3S2wNApyrE/0WXY7q50bul8l5pNxQlyXJuaYEmt9eqoq/YS1lr4UGocwkgFp1Y6
Xf7VIo3MUm75ew==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:07:28 2026 by rpki-client