Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: 7+3DZaFudFIOp3ImYbfI6hFYeCApH3XMYqN40aGgGZA=
Subject key identifier: 6C:0A:21:FB:39:EC:81:46:42:4C:43:93:BC:03:AA:90:16:DC:79:47
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 01A02921FE8604253CF2DDEF8476B4298F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: 0130
Signing time: Sat 22 Aug 2026 11:01:28 +0000
Manifest this update: Sat 22 Aug 2026 11:01:28 +0000
Manifest next update: Sun 23 Aug 2026 11:01:28 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: wJM1jHKzV7/vh5U57jgVxAIOkUSd54LqJUjOs0EFF4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:fe:86:04:25:3c:f2:dd:ef:84:76:b4:29:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: Aug 22 11:01:28 2026 GMT
Not After : Aug 23 11:01:28 2026 GMT
Subject: CN=6c0a21fb39ec8146424c4393bc03aa9016dc7947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:48:7e:ab:47:e4:64:ba:83:ca:2e:13:12:
11:82:aa:5c:77:02:ac:03:b3:ae:a7:8c:0f:93:b4:
15:d4:82:38:a3:58:ea:a5:9e:1b:16:d7:d7:a6:14:
b9:2d:7c:80:99:d1:fc:5a:e6:13:31:92:85:a5:dd:
bb:bf:33:40:a5:a7:81:f2:d7:4a:62:0f:61:f4:a0:
22:a9:ba:28:37:fe:b5:ec:d8:b0:d1:4e:19:f2:12:
4e:a8:92:71:9a:e1:b8:d6:90:a2:f3:c7:c3:2a:43:
f5:24:5e:fa:95:72:05:c8:1f:5c:16:de:06:31:0b:
1c:8d:07:b6:eb:ac:d3:4f:c1:83:df:ba:3e:16:2f:
1e:b4:da:86:68:bd:ae:8e:e7:79:9b:42:80:14:fd:
3f:96:14:a2:8a:80:63:3c:54:d2:f8:45:90:db:b8:
23:ef:30:a7:1d:f7:b4:46:67:3a:9c:1d:21:e5:02:
8f:c5:ba:c5:6f:8e:0f:58:45:3c:2c:75:87:df:4c:
6e:87:a7:4f:af:14:05:5a:92:08:94:59:fd:ba:37:
3b:27:7b:75:06:4c:da:23:35:db:96:8e:8e:8a:8f:
a5:4e:a4:32:0f:3e:4a:ad:ca:48:f4:2f:2b:1f:be:
37:d7:de:7d:d5:80:c9:8a:d2:34:4c:0c:8c:14:71:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0A:21:FB:39:EC:81:46:42:4C:43:93:BC:03:AA:90:16:DC:79:47
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e7:f6:b7:95:c9:79:81:a7:30:8b:18:a6:fb:79:2e:c8:9a:
0c:f6:3e:28:3d:4a:6e:ba:c4:45:ad:76:89:6f:59:5a:90:c4:
66:e4:65:95:7c:bb:1e:7a:49:9e:b3:6e:76:49:40:d5:81:e2:
3d:6e:90:96:09:1f:c4:60:92:b6:34:42:2f:08:11:0f:4d:25:
9b:50:bf:2a:6d:e6:43:e6:96:65:2d:ae:b9:fe:1b:d2:ff:3d:
e3:83:a7:07:9b:c4:42:00:05:7d:4c:b1:96:52:85:ff:c1:0c:
1a:52:e0:ea:65:4f:dc:cf:ca:69:5e:cb:a6:24:5a:a4:87:ea:
8e:ee:74:d8:7e:54:b3:45:c4:ad:7e:0b:c3:07:da:9d:99:12:
d1:6f:bd:12:d7:ba:5d:8a:8b:6a:6a:29:e2:11:c2:1d:3c:ad:
b9:d5:e1:c3:9e:a3:30:d5:ae:30:17:bc:75:00:7c:d7:dc:5a:
08:44:6a:4e:fa:8b:ff:64:67:17:c9:96:8b:e9:12:45:0a:b9:
84:6c:3c:33:88:81:6f:1b:02:5d:83:12:51:e8:83:3f:0e:12:
7b:54:0f:a5:ed:d3:0e:33:11:8d:dd:f1:e8:99:67:01:b8:ef:
d6:38:08:2c:c9:30:ce:2d:99:68:2c:6c:a8:40:ec:be:6f:6e:
c4:70:44:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApIf6GBCU88t3vhHa0KY9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Y2U5MzFmODUyZjQwNDZmZjhkYjQ4MmIzOTQ1MDIxOWY4
YjM4M2EwHhcNMjYwODIyMTEwMTI4WhcNMjYwODIzMTEwMTI4WjAzMTEwLwYDVQQD
Eyg2YzBhMjFmYjM5ZWM4MTQ2NDI0YzQzOTNiYzAzYWE5MDE2ZGM3OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0txIfqtH5GS6g8ouExIRgqpcdwKs
A7Oup4wPk7QV1II4o1jqpZ4bFtfXphS5LXyAmdH8WuYTMZKFpd27vzNApaeB8tdK
Yg9h9KAiqbooN/617Niw0U4Z8hJOqJJxmuG41pCi88fDKkP1JF76lXIFyB9cFt4G
MQscjQe266zTT8GD37o+Fi8etNqGaL2ujud5m0KAFP0/lhSiioBjPFTS+EWQ27gj
7zCnHfe0Rmc6nB0h5QKPxbrFb44PWEU8LHWH30xuh6dPrxQFWpIIlFn9ujc7J3t1
BkzaIzXblo6Oio+lTqQyDz5KrcpI9C8rH74319591YDJitI0TAyMFHGkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwKIfs57IFGQkxDk7wDqpAW3HlHMB8GA1UdIwQY
MBaAFJbOkx+FL0BG/420grOUUCGfizg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iYmQ4ZDYtOGY4YS00ZGNiLThjODAt
NzFmMTI1ZjVmNGM3LzEvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iYmQ4ZDYtOGY4YS00ZGNiLThjODAtNzFmMTI1ZjVmNGM3
LzEvbHM2VEg0VXZRRWJfamJTQ3M1UlFJWi1MT0RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOf2t5XJ
eYGnMIsYpvt5LsiaDPY+KD1KbrrERa12iW9ZWpDEZuRllXy7HnpJnrNudklA1YHi
PW6QlgkfxGCStjRCLwgRD00lm1C/Km3mQ+aWZS2uuf4b0v8944OnB5vEQgAFfUyx
llKF/8EMGlLg6mVP3M/KaV7LpiRapIfqju502H5Us0XErX4LwwfanZkS0W+9Ete6
XYqLamop4hHCHTytudXhw56jMNWuMBe8dQB819xaCERqTvqL/2RnF8mWi+kSRQq5
hGw8M4iBbxsCXYMSUeiDPw4Se1QPpe3TDjMRjd3x6JlnAbjv1jgILMkwzi2ZaCxs
qEDsvm9uxHBElQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:10:28 2026 by rpki-client