Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: pfprHX4IiiYFIZoAiB1OISOFu2az/QcMMPk94Zso3JI=
Subject key identifier: D0:CC:13:C9:A6:34:27:54:44:00:21:28:D6:30:52:47:80:C4:C5:3A
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01A08ED6B40CB8D9BE2645F47967279C3355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1829
Signing time: Fri 11 Sep 2026 05:00:30 +0000
Manifest this update: Fri 11 Sep 2026 05:00:30 +0000
Manifest next update: Sat 12 Sep 2026 05:00:30 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: XXLRm4fHANIxw4u8p7yrxspKiZosWN6lB4rmBwZ7X7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:b4:0c:b8:d9:be:26:45:f4:79:67:27:9c:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Sep 11 05:00:30 2026 GMT
Not After : Sep 12 05:00:30 2026 GMT
Subject: CN=d0cc13c9a634275444002128d630524780c4c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:d3:be:b0:bd:23:67:5e:e8:9b:03:4e:0a:
28:18:eb:1a:98:1e:08:6d:e6:1e:f4:6e:10:19:b0:
cf:da:2a:6e:27:2d:fe:d3:91:2d:1a:23:62:88:ef:
08:65:59:55:74:d7:1f:33:ce:7a:47:8d:bf:34:ba:
e0:8d:88:30:52:63:be:aa:e9:f7:7a:53:db:e3:e9:
62:c9:7d:53:0b:16:13:74:fb:7b:be:a3:89:cb:0f:
22:d3:86:08:de:75:12:62:c9:83:e2:56:8c:66:e4:
15:a0:10:81:51:db:46:3b:69:5b:48:3d:5f:6e:27:
5c:68:39:70:28:81:66:25:14:ff:38:5e:2e:6e:b8:
55:30:66:55:ac:4e:f7:f8:7c:37:33:64:c3:58:77:
78:77:dd:95:99:c2:a0:2f:5f:d8:36:b3:69:6a:1d:
50:e4:24:70:fe:4a:b8:52:fa:40:2b:89:d2:a1:15:
fe:a8:a9:68:b8:88:a1:4c:33:cc:7f:45:22:0c:67:
4d:fd:96:9a:1c:ef:04:e2:20:98:cf:36:17:dc:6e:
08:2e:6e:04:6a:b1:51:ae:d1:c4:6c:62:fc:0c:77:
77:87:53:2c:0b:77:1f:0f:2e:2d:6f:01:29:7f:91:
65:bb:a7:94:1d:a4:e7:3e:43:61:2f:b3:13:f7:1f:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:13:C9:A6:34:27:54:44:00:21:28:D6:30:52:47:80:C4:C5:3A
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:16:49:16:93:b9:19:35:3f:1a:86:22:3b:44:8a:a3:be:
8b:7a:79:16:ad:bd:5a:fa:0c:a8:b3:74:4d:77:c9:34:87:2e:
d5:f5:5c:17:d4:0e:3f:55:14:2d:71:ef:04:33:e0:81:29:d7:
b7:4b:a5:19:92:6a:39:73:5f:d5:dd:14:81:2e:da:c5:b0:25:
c6:40:af:c3:11:83:e0:92:dc:d3:02:3e:32:32:78:15:94:e9:
0f:b8:87:96:be:1e:72:8f:f4:33:8e:1b:d6:2a:a8:65:c7:9a:
49:6b:dc:ec:91:e0:09:66:67:b1:3c:f0:2a:77:c4:f8:4a:2f:
ed:a1:37:1f:a1:18:00:be:95:b7:40:de:ed:51:0b:73:f4:fe:
7f:52:ad:f9:ee:4c:2e:d7:f9:b9:fa:3c:0f:9f:8d:53:11:91:
54:66:12:39:44:75:7f:2f:e6:34:9e:c2:6d:2a:1e:86:97:83:
0c:10:18:5a:65:a7:35:1a:14:28:74:96:b1:27:3e:d7:a7:a9:
c6:f9:6b:49:97:6b:27:09:7b:bd:c1:49:d3:18:54:e0:70:8d:
d3:3e:06:c4:3f:d7:cf:a4:a0:cc:c5:ce:cb:75:f6:48:f0:cf:
9f:52:f4:f4:ff:6a:ca:b2:fe:78:df:87:44:25:69:f8:fd:8c:
24:a8:46:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCO1rQMuNm+JkX0eWcnnDNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjYwOTExMDUwMDMwWhcNMjYwOTEyMDUwMDMwWjAzMTEwLwYDVQQD
EyhkMGNjMTNjOWE2MzQyNzU0NDQwMDIxMjhkNjMwNTI0NzgwYzRjNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4PTvrC9I2de6JsDTgooGOsamB4I
beYe9G4QGbDP2ipuJy3+05EtGiNiiO8IZVlVdNcfM856R42/NLrgjYgwUmO+qun3
elPb4+liyX1TCxYTdPt7vqOJyw8i04YI3nUSYsmD4laMZuQVoBCBUdtGO2lbSD1f
bidcaDlwKIFmJRT/OF4ubrhVMGZVrE73+Hw3M2TDWHd4d92VmcKgL1/YNrNpah1Q
5CRw/kq4UvpAK4nSoRX+qKlouIihTDPMf0UiDGdN/ZaaHO8E4iCYzzYX3G4ILm4E
arFRrtHEbGL8DHd3h1MsC3cfDy4tbwEpf5Flu6eUHaTnPkNhL7MT9x9hjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDME8mmNCdURAAhKNYwUkeAxMU6MB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBYWSRaT
uRk1PxqGIjtEiqO+i3p5Fq29WvoMqLN0TXfJNIcu1fVcF9QOP1UULXHvBDPggSnX
t0ulGZJqOXNf1d0UgS7axbAlxkCvwxGD4JLc0wI+MjJ4FZTpD7iHlr4eco/0M44b
1iqoZceaSWvc7JHgCWZnsTzwKnfE+Eov7aE3H6EYAL6Vt0De7VELc/T+f1Kt+e5M
Ltf5ufo8D5+NUxGRVGYSOUR1fy/mNJ7CbSoehpeDDBAYWmWnNRoUKHSWsSc+16ep
xvlrSZdrJwl7vcFJ0xhU4HCN0z4GxD/Xz6SgzMXOy3X2SPDPn1L09P9qyrL+eN+H
RCVp+P2MJKhGkw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:43:04 2026 by rpki-client