
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: 5irTXy8PxeaR6HgK+eEwzy2jcImnd94f1uMbUg3Vrb8=
Subject key identifier: A2:AA:02:AA:14:94:3B:70:5C:BE:5E:B7:B5:B0:35:7D:61:CB:41:40
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 019FF6EC4A94BDC75C1F7B372B7CBEC42C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 01ED
Signing time: Wed 12 Aug 2026 17:01:48 +0000
Manifest this update: Wed 12 Aug 2026 17:01:48 +0000
Manifest next update: Thu 13 Aug 2026 17:01:48 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: MtOWZo6yui28AquekiBPd2IUTw4SFoy2ykYozKhm1QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:ec:4a:94:bd:c7:5c:1f:7b:37:2b:7c:be:c4:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Aug 12 17:01:48 2026 GMT
Not After : Aug 13 17:01:48 2026 GMT
Subject: CN=a2aa02aa14943b705cbe5eb7b5b0357d61cb4140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:48:7e:2b:3b:34:a1:c9:23:16:85:09:4e:
c5:8c:b5:3c:ca:9e:c1:5d:85:dd:03:2f:a4:78:66:
a2:d7:be:b6:8c:91:f9:3b:48:ff:11:8a:48:8f:a9:
fd:c9:02:f0:39:71:3b:45:d4:76:05:d9:10:41:8a:
a3:53:9e:00:3a:5d:4c:f4:03:ca:63:67:9e:c8:eb:
2b:13:38:fe:8f:65:9d:58:40:82:fb:17:86:f8:f0:
c1:33:ea:eb:b9:66:82:5c:8e:83:6e:75:ca:97:b3:
a5:06:55:df:f1:67:40:c8:a6:98:4b:d5:c0:76:02:
2b:5e:0a:16:8d:78:1d:c2:35:c9:78:3c:73:bb:8d:
22:05:8d:0a:5c:e9:83:3c:6f:72:41:cb:43:5a:82:
71:62:7d:73:4d:3f:94:33:50:3d:dc:da:37:c8:19:
cc:c2:52:0d:6e:0e:19:ca:22:22:7c:be:e5:d4:3b:
c7:ff:12:9b:e8:09:5c:be:08:42:20:98:b3:bc:d5:
04:b5:6b:93:36:0b:4e:41:e7:54:9d:d6:9a:df:dc:
cb:0b:4a:e2:be:2f:a2:a2:93:bb:ab:98:77:3f:8f:
21:b8:7d:65:63:90:14:8d:c5:18:44:5e:5a:52:28:
92:7a:cd:53:da:05:36:50:7c:fc:8e:4f:cc:e9:bc:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:02:AA:14:94:3B:70:5C:BE:5E:B7:B5:B0:35:7D:61:CB:41:40
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:a5:b5:92:43:11:f1:b1:d5:20:5b:d2:26:67:d8:01:51:
58:ed:0a:ac:47:8c:e1:18:29:40:4b:64:23:a0:28:94:d4:96:
93:48:ae:ba:53:c6:74:81:9e:21:f2:ac:5b:26:86:91:2a:ab:
0f:45:63:c4:9d:a0:eb:84:a5:76:2c:a7:be:a4:f8:37:8b:d4:
ed:80:d7:18:c6:ec:fe:7f:ca:af:8b:2c:92:33:ff:aa:dc:0f:
4e:20:d0:f6:da:14:b0:4d:a6:e5:de:36:ca:f5:e6:9b:0e:a7:
1d:e6:97:57:68:6a:cd:02:c0:bf:2e:de:2d:df:19:b4:e5:05:
a2:b7:24:fc:a6:2a:da:fc:48:3d:d2:af:d6:d2:70:7f:a5:dc:
1d:d2:d7:e9:86:6a:ca:db:e7:8a:ac:8a:93:5d:6c:fa:95:4f:
3b:e5:ad:7e:5e:67:4c:1c:9f:14:bf:ed:32:dd:40:37:89:c3:
d6:f5:34:52:6a:37:23:7d:bb:6a:59:83:66:25:18:04:34:6a:
6f:96:da:c1:2a:ae:93:52:33:38:2f:e9:78:d5:ea:c4:47:96:
31:30:ff:e1:86:f8:98:e6:00:a0:9e:aa:a2:30:1d:e4:1b:fa:
d4:ca:46:af:4c:d5:ff:35:1f:e7:98:46:0f:ca:9e:ec:d9:4a:
54:c1:0d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/27EqUvcdcH3s3K3y+xCyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzBjMjczYWY5ZWI1NTY2NDMwODhlNDNiZWYzYTZhMTgx
Yzg3YzIwHhcNMjYwODEyMTcwMTQ4WhcNMjYwODEzMTcwMTQ4WjAzMTEwLwYDVQQD
EyhhMmFhMDJhYTE0OTQzYjcwNWNiZTVlYjdiNWIwMzU3ZDYxY2I0MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1Ifis7NKHJIxaFCU7FjLU8yp7B
XYXdAy+keGai1762jJH5O0j/EYpIj6n9yQLwOXE7RdR2BdkQQYqjU54AOl1M9APK
Y2eeyOsrEzj+j2WdWECC+xeG+PDBM+rruWaCXI6DbnXKl7OlBlXf8WdAyKaYS9XA
dgIrXgoWjXgdwjXJeDxzu40iBY0KXOmDPG9yQctDWoJxYn1zTT+UM1A93No3yBnM
wlINbg4ZyiIifL7l1DvH/xKb6AlcvghCIJizvNUEtWuTNgtOQedUndaa39zLC0ri
vi+iopO7q5h3P48huH1lY5AUjcUYRF5aUiiSes1T2gU2UHz8jk/M6bxD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKqAqoUlDtwXL5et7WwNX1hy0FAMB8GA1UdIwQY
MBaAFJcwwnOvnrVWZDCI5DvvOmoYHIfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAt
ZjJkNDBhZGUzYjliLzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAtZjJkNDBhZGUzYjli
LzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRWltZJD
EfGx1SBb0iZn2AFRWO0KrEeM4RgpQEtkI6AolNSWk0iuulPGdIGeIfKsWyaGkSqr
D0VjxJ2g64SldiynvqT4N4vU7YDXGMbs/n/Kr4sskjP/qtwPTiDQ9toUsE2m5d42
yvXmmw6nHeaXV2hqzQLAvy7eLd8ZtOUForck/KYq2vxIPdKv1tJwf6XcHdLX6YZq
ytvniqyKk11s+pVPO+Wtfl5nTByfFL/tMt1AN4nD1vU0Umo3I327almDZiUYBDRq
b5bawSquk1IzOC/peNXqxEeWMTD/4Yb4mOYAoJ6qojAd5Bv61MpGr0zV/zUf55hG
D8qe7NlKVMEN6w==
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:21:57 2026 by rpki-client