Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: rspYouoZ+t9AM0D1OvdGftrURFwT4CklN+ZgNNx+xqg=
Subject key identifier: 20:88:F4:4C:8C:CF:D3:55:92:86:7F:4E:DB:BF:08:55:50:22:ED:AF
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01A08A55C11C8AAB19A6F23FCAE21891533E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 08:01:10 +0000
Manifest this update: Thu 10 Sep 2026 08:01:10 +0000
Manifest next update: Fri 11 Sep 2026 08:01:10 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: yPv0koWJ7P7Zx/OWXBrix8cbGCnl9xsEuM4/geZ5bvQ=)
4: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (hash: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=)
5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:c1:1c:8a:ab:19:a6:f2:3f:ca:e2:18:91:53:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Sep 10 08:01:10 2026 GMT
Not After : Sep 11 08:01:10 2026 GMT
Subject: CN=2088f44c8ccfd35592867f4edbbf08555022edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:af:94:18:ce:32:f5:29:9e:f5:a5:93:9a:
d2:90:40:ed:8e:4e:65:14:df:04:b1:1f:fa:63:c2:
1e:2d:aa:68:df:e9:7a:60:87:22:68:7e:fc:80:36:
65:5e:44:73:42:dd:8d:6e:23:a9:fa:35:d4:02:bf:
0b:b5:ab:d0:0c:1a:27:d6:96:b8:96:03:cf:49:fe:
7b:ac:b3:9a:44:42:ce:a0:2d:94:fd:a5:34:63:3b:
be:6a:98:e3:10:a8:8c:b7:7b:7f:d0:10:d3:8f:b3:
d0:1e:62:3b:be:ac:8c:db:e5:6d:24:f9:ff:3f:5b:
d2:83:d3:f8:6f:c1:81:43:08:02:ab:70:e1:b0:2d:
f5:87:60:33:16:c2:cc:78:86:e1:c0:9a:d8:ae:2b:
fc:c6:3b:8d:86:d2:6b:05:6b:8e:15:44:de:9a:9f:
1f:25:e0:bf:44:0f:88:a5:ad:75:60:b7:4f:d9:fe:
eb:37:1b:c3:41:20:77:c6:5e:43:ca:8a:d8:27:e1:
d5:af:6a:c6:db:e2:11:3b:6f:cc:6b:cd:d9:1e:44:
54:1b:c3:b4:fe:63:4a:60:9b:41:3c:0a:0b:53:d5:
6a:cf:ca:dd:af:26:0d:c2:0b:4f:ad:37:c1:7f:1a:
3f:c8:03:f2:3a:47:65:87:ef:36:fa:fd:26:21:eb:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:F4:4C:8C:CF:D3:55:92:86:7F:4E:DB:BF:08:55:50:22:ED:AF
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:72:44:9a:33:8e:cc:72:82:a5:ec:5d:67:db:2d:0e:79:64:
43:07:19:d3:58:b1:6c:d0:21:65:ee:4c:5c:26:52:be:9a:ed:
10:01:a3:63:2e:b3:74:de:54:cb:e9:3f:a7:78:76:d6:0f:1a:
f2:33:05:ae:b2:2b:a9:0b:f3:5f:2b:c0:12:89:a9:11:f2:f6:
0c:63:aa:72:78:75:e0:fa:03:a9:f3:7e:0e:e9:02:9a:73:6c:
3f:4a:0b:4d:25:83:32:85:75:b1:fa:a5:ca:6b:6c:34:00:12:
eb:07:f4:91:6c:59:f1:ad:0d:c4:33:24:89:8e:f2:f1:be:ef:
45:06:26:fe:91:9e:cd:0f:f8:40:e4:c8:0e:5d:68:e6:17:1b:
11:81:40:9f:2f:ba:ba:e6:d6:86:d3:6e:d5:df:8b:33:9f:3d:
bb:9c:74:08:9f:25:c0:e4:d3:04:ab:b3:49:0b:a4:ed:30:14:
6e:c7:59:52:21:3a:f3:5b:48:c7:8c:32:96:e9:de:fa:39:99:
61:0e:90:17:41:a7:01:57:64:4f:97:4e:8f:bc:a5:99:cd:63:
2e:35:99:a1:85:33:d5:c6:71:a0:bb:39:1f:73:20:5e:96:41:
c7:a4:8a:88:59:c6:a7:65:f5:1c:d5:e8:72:2e:4c:5c:d0:68:
73:f4:07:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVcEciqsZpvI/yuIYkVM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1
MzU0N2MwHhcNMjYwOTEwMDgwMTEwWhcNMjYwOTExMDgwMTEwWjAzMTEwLwYDVQQD
EygyMDg4ZjQ0YzhjY2ZkMzU1OTI4NjdmNGVkYmJmMDg1NTUwMjJlZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSavlBjOMvUpnvWlk5rSkEDtjk5l
FN8EsR/6Y8IeLapo3+l6YIciaH78gDZlXkRzQt2NbiOp+jXUAr8LtavQDBon1pa4
lgPPSf57rLOaRELOoC2U/aU0Yzu+apjjEKiMt3t/0BDTj7PQHmI7vqyM2+VtJPn/
P1vSg9P4b8GBQwgCq3DhsC31h2AzFsLMeIbhwJrYriv8xjuNhtJrBWuOFUTemp8f
JeC/RA+Ipa11YLdP2f7rNxvDQSB3xl5DyorYJ+HVr2rG2+IRO2/Ma83ZHkRUG8O0
/mNKYJtBPAoLU9Vqz8rdryYNwgtPrTfBfxo/yAPyOkdlh+82+v0mIetqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCI9EyMz9NVkoZ/Ttu/CFVQIu2vMB8GA1UdIwQY
MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt
MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1
LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnJEmjOO
zHKCpexdZ9stDnlkQwcZ01ixbNAhZe5MXCZSvprtEAGjYy6zdN5Uy+k/p3h21g8a
8jMFrrIrqQvzXyvAEompEfL2DGOqcnh14PoDqfN+DukCmnNsP0oLTSWDMoV1sfql
ymtsNAAS6wf0kWxZ8a0NxDMkiY7y8b7vRQYm/pGezQ/4QOTIDl1o5hcbEYFAny+6
uubWhtNu1d+LM589u5x0CJ8lwOTTBKuzSQuk7TAUbsdZUiE681tIx4wylune+jmZ
YQ6QF0GnAVdkT5dOj7ylmc1jLjWZoYUz1cZxoLs5H3MgXpZBx6SKiFnGp2X1HNXo
ci5MXNBoc/QH4w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:50:03 2026 by rpki-client