Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: vq1WFU0ykOVIP4P3km/K2HuPWfb6goAuroPLcJaPDCI=
Subject key identifier: 75:17:4C:FA:0C:DF:A0:F9:C3:86:AD:DD:76:AC:BE:E7:2C:F3:11:33
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 01A07171E61CACA70DAB31F7FD88281E7EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0EA7
Signing time: Sat 05 Sep 2026 12:01:24 +0000
Manifest this update: Sat 05 Sep 2026 12:01:24 +0000
Manifest next update: Sun 06 Sep 2026 12:01:24 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: 7zlN8z5tmQwD/WWNG5yCL8wY1etG7jWOIId5NyEjaBk=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:71:e6:1c:ac:a7:0d:ab:31:f7:fd:88:28:1e:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Sep 5 12:01:24 2026 GMT
Not After : Sep 6 12:01:24 2026 GMT
Subject: CN=75174cfa0cdfa0f9c386addd76acbee72cf31133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:a9:f7:cb:01:8d:4e:b7:6d:62:bf:4c:d7:
95:42:a7:a3:20:32:77:7c:48:18:28:f9:e1:3a:56:
85:54:87:55:e6:87:d8:82:85:04:dc:2a:d2:97:c2:
0c:f4:d4:dd:24:e7:1b:d3:96:eb:31:07:5f:c7:5d:
b0:58:8c:87:95:65:44:48:95:be:cd:67:f4:ef:9c:
f4:62:e8:26:db:06:8c:80:ad:0f:21:98:a4:2a:ae:
6a:b8:56:b0:9c:5c:d8:7c:22:40:71:f4:79:79:d3:
1b:a3:8f:5b:fc:4d:87:e2:d2:11:e2:4c:d5:02:e3:
01:c4:79:8e:44:6a:20:f3:2f:8d:94:7f:47:44:a6:
3a:44:97:2e:8c:1e:3b:80:f6:95:4f:f9:0d:69:d0:
33:db:be:dd:b5:be:c2:02:ba:ee:6a:58:88:ac:cc:
be:80:82:7b:7b:bc:f3:0e:32:cc:d8:31:f3:4c:04:
fb:d4:1b:15:76:1b:85:cb:eb:9a:8f:b0:cc:a7:88:
5f:b6:26:48:1a:c2:3e:95:b1:c7:5f:99:5a:50:d4:
f8:b5:02:8a:42:31:69:4b:cc:c4:03:3b:93:40:38:
c6:69:98:44:df:77:7f:2f:e8:9e:b3:66:5e:57:75:
0c:43:6f:83:da:b1:de:5d:5d:c5:89:9f:11:af:5c:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:4C:FA:0C:DF:A0:F9:C3:86:AD:DD:76:AC:BE:E7:2C:F3:11:33
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0a:34:f9:96:59:a2:32:e0:7b:22:43:3a:d1:be:11:0b:9a:
1a:ed:7b:a3:fc:52:e6:ff:bb:a4:e3:5b:f4:9f:4d:30:92:ed:
84:90:e8:c3:df:b6:0d:6b:4c:28:55:56:36:f0:be:c8:60:0e:
29:8d:a5:63:7e:5d:06:49:00:82:a5:3b:1a:63:c1:70:b2:ba:
9b:42:40:04:2c:38:87:f7:62:ed:8e:6d:ee:f1:6c:89:38:37:
da:04:e2:8e:0d:93:c7:f7:36:c8:84:66:56:e5:97:03:77:4b:
2f:79:de:b9:2a:fe:ba:13:a0:47:3f:32:23:bd:a8:31:07:f6:
04:61:b8:02:5b:9f:75:d2:69:3a:1b:02:c8:8b:a2:3d:7f:48:
f9:7e:4e:52:b3:a1:03:62:50:c3:6f:40:04:19:1d:bd:08:52:
b9:e3:30:d6:4c:9b:54:03:a6:73:07:20:d1:e3:e9:9e:5b:e9:
40:34:f7:d3:4d:ba:b6:08:71:dc:7a:d0:63:e8:f6:2b:12:4f:
76:14:95:e6:9a:06:7d:cc:fc:68:b4:e8:ba:d0:a5:b6:1d:af:
53:e4:f5:62:f8:e0:0d:2b:95:32:50:f9:54:38:5a:6f:24:da:
c9:e1:ee:97:c8:c9:d6:b9:61:9a:e5:76:a7:fc:aa:76:3b:65:
30:86:1a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBxceYcrKcNqzH3/YgoHn6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx
YTg3NWMwHhcNMjYwOTA1MTIwMTI0WhcNMjYwOTA2MTIwMTI0WjAzMTEwLwYDVQQD
Eyg3NTE3NGNmYTBjZGZhMGY5YzM4NmFkZGQ3NmFjYmVlNzJjZjMxMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuup98sBjU63bWK/TNeVQqejIDJ3
fEgYKPnhOlaFVIdV5ofYgoUE3CrSl8IM9NTdJOcb05brMQdfx12wWIyHlWVESJW+
zWf075z0Yugm2waMgK0PIZikKq5quFawnFzYfCJAcfR5edMbo49b/E2H4tIR4kzV
AuMBxHmORGog8y+NlH9HRKY6RJcujB47gPaVT/kNadAz277dtb7CArrualiIrMy+
gIJ7e7zzDjLM2DHzTAT71BsVdhuFy+uaj7DMp4hftiZIGsI+lbHHX5laUNT4tQKK
QjFpS8zEAzuTQDjGaZhE33d/L+ies2ZeV3UMQ2+D2rHeXV3FiZ8Rr1wtZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUXTPoM36D5w4at3Xasvucs8xEzMB8GA1UdIwQY
MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt
OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx
LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgo0+ZZZ
ojLgeyJDOtG+EQuaGu17o/xS5v+7pONb9J9NMJLthJDow9+2DWtMKFVWNvC+yGAO
KY2lY35dBkkAgqU7GmPBcLK6m0JABCw4h/di7Y5t7vFsiTg32gTijg2Tx/c2yIRm
VuWXA3dLL3neuSr+uhOgRz8yI72oMQf2BGG4AlufddJpOhsCyIuiPX9I+X5OUrOh
A2JQw29ABBkdvQhSueMw1kybVAOmcwcg0ePpnlvpQDT30026tghx3HrQY+j2KxJP
dhSV5poGfcz8aLToutClth2vU+T1YvjgDSuVMlD5VDhabyTayeHul8jJ1rlhmuV2
p/yqdjtlMIYaCA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:02:23 2026 by rpki-client