Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: iTl3N+iftuOi06rtVRb8K5SelIbNXT2WWqZM25BuiD4=
Subject key identifier: AE:39:EA:BE:78:6B:8B:EC:3A:01:54:A8:58:53:9B:14:33:C0:CB:78
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01A1860894C4E05890657F68C6A9B4D5B9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 18A9
Signing time: Thu 29 Oct 2026 05:01:11 +0000
Manifest this update: Thu 29 Oct 2026 05:01:11 +0000
Manifest next update: Fri 30 Oct 2026 05:01:11 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 4vg7tvwwQkLnAdra/FvF0vv1wWcVonXJ/81i/O98WXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:94:c4:e0:58:90:65:7f:68:c6:a9:b4:d5:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Oct 29 05:01:11 2026 GMT
Not After : Oct 30 05:01:11 2026 GMT
Subject: CN=ae39eabe786b8bec3a0154a858539b1433c0cb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a0:e4:2b:3b:25:31:9a:3d:6e:b0:53:cd:63:
0b:58:50:e8:d9:aa:c0:a8:2b:da:bf:05:58:38:0c:
73:a8:03:7b:ef:38:8c:8b:7d:ce:00:76:67:55:66:
6a:fe:39:99:23:59:ec:c8:c7:02:d0:51:2f:53:fa:
00:17:f5:22:e6:3e:07:da:2f:12:87:fa:87:aa:d8:
14:c8:56:b6:d6:33:03:af:da:51:55:29:b7:e1:e4:
8b:0a:cd:ad:01:a2:4c:c5:1d:7f:49:db:d6:f2:f1:
bc:27:1c:a3:7c:8a:20:98:02:90:29:71:68:c6:c4:
39:f9:c8:94:f8:ac:cc:2b:04:a3:2c:44:f7:7f:e8:
44:5b:77:57:64:a8:cc:33:6d:10:1c:03:5b:0a:1e:
d5:3a:e6:30:05:2b:6a:08:f8:94:76:95:39:fe:8a:
8d:d3:ca:da:74:67:b2:44:ea:52:2d:1a:37:bc:50:
d2:0b:86:71:82:44:8f:ee:91:eb:b8:98:01:3e:99:
29:a8:5c:09:6a:a1:b1:85:b8:1b:2e:eb:ef:c0:4c:
48:72:1c:30:f5:a5:3b:f7:7c:b7:11:f0:8f:3f:46:
18:7c:55:93:4d:d9:bf:ad:a2:50:2d:1c:d9:2f:3c:
53:c9:2c:26:24:f8:03:fb:25:a1:ba:74:d7:f8:80:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:EA:BE:78:6B:8B:EC:3A:01:54:A8:58:53:9B:14:33:C0:CB:78
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:3d:53:24:02:e4:09:9d:fa:cc:7f:74:02:b7:c1:b0:9b:
b3:07:28:50:4e:83:af:e8:31:8e:43:bb:c7:41:7c:22:e1:d6:
89:a9:e2:f0:94:68:a9:8b:c5:8f:b7:cc:b8:34:04:86:49:7c:
40:b5:2e:bf:38:b5:44:9e:d2:8e:ad:6a:57:4a:06:3c:4b:d7:
38:97:c1:3c:b0:29:db:f9:01:4d:08:a2:de:7b:dc:d1:30:cf:
c1:c9:1f:dd:b4:b3:38:55:9e:bb:64:79:a7:3c:a7:3e:eb:b4:
f1:cf:93:ab:54:8f:dd:96:54:f7:fa:0b:4f:e7:04:4a:55:e6:
b3:4a:28:22:34:8e:b7:c0:10:53:00:66:66:ca:e7:8b:34:71:
bf:da:61:ee:b7:c3:79:cb:fb:d6:cc:91:2d:78:49:09:2c:5a:
cf:64:2e:f0:cc:fe:be:f7:0a:f3:ef:d6:44:7c:50:4a:21:62:
ad:ca:b6:05:30:bc:cd:c5:b2:05:6f:a6:14:e1:4e:b1:fb:a4:
bf:a0:9b:1b:51:1d:4f:18:dd:af:ab:76:61:bc:1b:cf:c6:fa:
e6:86:6c:12:6a:3a:6f:98:f3:93:f8:23:5f:a7:a8:f1:99:09:
db:87:f8:77:b2:a3:b9:60:ae:60:92:f5:a6:bd:e8:da:f4:e9:
e6:cc:55:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCJTE4FiQZX9oxqm01bnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjYxMDI5MDUwMTExWhcNMjYxMDMwMDUwMTExWjAzMTEwLwYDVQQD
EyhhZTM5ZWFiZTc4NmI4YmVjM2EwMTU0YTg1ODUzOWIxNDMzYzBjYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KDkKzslMZo9brBTzWMLWFDo2arA
qCvavwVYOAxzqAN77ziMi33OAHZnVWZq/jmZI1nsyMcC0FEvU/oAF/Ui5j4H2i8S
h/qHqtgUyFa21jMDr9pRVSm34eSLCs2tAaJMxR1/SdvW8vG8JxyjfIogmAKQKXFo
xsQ5+ciU+KzMKwSjLET3f+hEW3dXZKjMM20QHANbCh7VOuYwBStqCPiUdpU5/oqN
08radGeyROpSLRo3vFDSC4ZxgkSP7pHruJgBPpkpqFwJaqGxhbgbLuvvwExIchww
9aU793y3EfCPP0YYfFWTTdm/raJQLRzZLzxTySwmJPgD+yWhunTX+IC2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK456r54a4vsOgFUqFhTmxQzwMt4MB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5o9UyQC
5Amd+sx/dAK3wbCbswcoUE6Dr+gxjkO7x0F8IuHWiani8JRoqYvFj7fMuDQEhkl8
QLUuvzi1RJ7Sjq1qV0oGPEvXOJfBPLAp2/kBTQii3nvc0TDPwckf3bSzOFWeu2R5
pzynPuu08c+Tq1SP3ZZU9/oLT+cESlXms0ooIjSOt8AQUwBmZsrnizRxv9ph7rfD
ecv71syRLXhJCSxaz2Qu8Mz+vvcK8+/WRHxQSiFircq2BTC8zcWyBW+mFOFOsfuk
v6CbG1EdTxjdr6t2Ybwbz8b65oZsEmo6b5jzk/gjX6eo8ZkJ24f4d7KjuWCuYJL1
pr3o2vTp5sxVEQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:49:03 2026 by rpki-client