Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: Hv1Pk7/Z8IafUYQ9CkIxoOuqyfG9uFSdD98KcRCCPWc=
Subject key identifier: C3:39:23:06:42:F2:49:F3:47:5C:89:F6:D2:C7:2F:BA:22:AA:5C:4C
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 01A06D26CF0C72FFF216E326B5839E65928F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 04D7
Signing time: Fri 04 Sep 2026 16:00:54 +0000
Manifest this update: Fri 04 Sep 2026 16:00:54 +0000
Manifest next update: Sat 05 Sep 2026 16:00:54 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: Xto5JT615QMXpJDDA8HdQSJ7Jhi/HKzyFDZoRiS+Wms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:cf:0c:72:ff:f2:16:e3:26:b5:83:9e:65:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Sep 4 16:00:54 2026 GMT
Not After : Sep 5 16:00:54 2026 GMT
Subject: CN=c339230642f249f3475c89f6d2c72fba22aa5c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:56:62:14:a8:94:ea:4a:b4:e1:b6:83:20:
3f:30:ee:69:a4:46:96:be:19:69:7e:7d:c7:b2:1a:
76:74:ce:74:c7:38:36:17:54:c4:2f:0f:f4:94:fe:
d4:8b:53:2f:b7:5b:a8:cd:3c:a3:d3:62:a9:63:e0:
2a:c4:6a:9f:75:ee:d2:82:cd:0a:09:cd:a6:72:28:
f0:91:5f:5f:ee:f4:ff:a9:69:02:60:97:97:92:0e:
26:88:94:d0:99:f2:91:69:c7:80:bc:1e:2e:0c:7f:
f0:02:e8:00:92:76:70:9f:33:55:59:32:da:35:d4:
39:2d:ca:d2:ac:e9:b5:b7:ec:db:48:64:a1:7c:7d:
5a:d0:16:e1:af:8a:fe:ef:86:00:ed:6c:a5:f5:71:
0f:9f:23:9f:6c:ba:83:40:5d:04:d0:70:f2:0b:fa:
d7:a6:6b:2e:4c:67:fd:10:ec:74:38:72:f7:d0:48:
1b:3d:5d:c3:a8:7f:2a:01:a4:85:35:be:dd:fb:45:
0b:ad:94:c2:dc:82:e6:88:f7:f8:ba:06:34:8d:cd:
3b:a3:1c:8c:fb:ca:9b:ec:ca:3e:71:c4:0d:3c:9f:
03:d8:05:65:3a:49:c0:a6:a0:5e:5a:0f:25:67:f7:
03:a3:b3:7f:c5:38:7e:1a:36:10:72:25:6c:6d:6d:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:23:06:42:F2:49:F3:47:5C:89:F6:D2:C7:2F:BA:22:AA:5C:4C
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:60:c4:0e:67:88:b6:b5:94:22:2d:8c:05:00:1e:66:3d:
f7:e9:d5:88:68:dc:30:fb:6b:8f:d8:ae:6a:df:a8:2b:c0:db:
8f:e9:19:ec:6f:3e:6c:93:e4:cd:e4:4e:45:d1:f2:48:62:28:
5a:be:fb:d6:3c:f8:9d:a2:dd:65:40:e5:53:e3:66:1c:ac:6f:
65:90:2a:0d:51:3c:8d:94:b7:40:e3:ce:d4:ba:13:b7:70:c2:
d1:f5:99:9a:1f:70:7a:b7:13:51:27:85:df:3d:8e:6f:95:f4:
4e:de:72:c7:b1:bf:ab:0a:32:0e:6d:3c:92:1b:cd:ef:dd:4a:
1e:aa:b7:5d:06:fa:48:ae:ae:4c:8c:ac:4a:2c:ab:c9:2e:f2:
73:b5:e9:bb:64:3b:3d:b5:b7:b1:68:0b:3a:a3:4f:f6:c2:2e:
ce:10:32:9e:3b:dd:a7:3c:de:a0:d3:99:a1:a7:59:09:13:9b:
c7:3c:fc:29:5b:65:d5:be:e1:b8:09:a0:fd:f3:ff:68:e8:6b:
65:2d:d2:36:c8:67:5d:57:ce:4e:69:65:70:9f:8c:75:f4:46:
1a:18:95:ae:ea:c3:e6:e9:87:61:09:8f:63:fe:ab:e1:9c:eb:
38:6b:29:f4:e9:eb:52:33:34:d3:08:18:a4:13:74:5f:6f:65:
29:9e:6d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtJs8Mcv/yFuMmtYOeZZKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4
MTA3ZjYwHhcNMjYwOTA0MTYwMDU0WhcNMjYwOTA1MTYwMDU0WjAzMTEwLwYDVQQD
EyhjMzM5MjMwNjQyZjI0OWYzNDc1Yzg5ZjZkMmM3MmZiYTIyYWE1YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U9WYhSolOpKtOG2gyA/MO5ppEaW
vhlpfn3Hshp2dM50xzg2F1TELw/0lP7Ui1Mvt1uozTyj02KpY+AqxGqfde7Sgs0K
Cc2mcijwkV9f7vT/qWkCYJeXkg4miJTQmfKRaceAvB4uDH/wAugAknZwnzNVWTLa
NdQ5LcrSrOm1t+zbSGShfH1a0Bbhr4r+74YA7Wyl9XEPnyOfbLqDQF0E0HDyC/rX
pmsuTGf9EOx0OHL30EgbPV3DqH8qAaSFNb7d+0ULrZTC3ILmiPf4ugY0jc07oxyM
+8qb7Mo+ccQNPJ8D2AVlOknApqBeWg8lZ/cDo7N/xTh+GjYQciVsbW1P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM5IwZC8knzR1yJ9tLHL7oiqlxMMB8GA1UdIwQY
MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt
MjZjNjdjZDAxMjhjLzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj
LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYchgxA5n
iLa1lCItjAUAHmY99+nViGjcMPtrj9iuat+oK8Dbj+kZ7G8+bJPkzeRORdHySGIo
Wr771jz4naLdZUDlU+NmHKxvZZAqDVE8jZS3QOPO1LoTt3DC0fWZmh9wercTUSeF
3z2Ob5X0Tt5yx7G/qwoyDm08khvN791KHqq3XQb6SK6uTIysSiyryS7yc7Xpu2Q7
PbW3sWgLOqNP9sIuzhAynjvdpzzeoNOZoadZCRObxzz8KVtl1b7huAmg/fP/aOhr
ZS3SNshnXVfOTmllcJ+MdfRGGhiVrurD5umHYQmPY/6r4ZzrOGsp9OnrUjM00wgY
pBN0X29lKZ5tww==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:44:36 2026 by rpki-client