Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: 3B9dK8qGz835NRte7NfGcpBkx0qD5ULR7WIIqvddvwY=
Subject key identifier: FC:CD:68:63:AF:E6:A9:8E:00:3C:5A:8A:F1:A4:52:7F:ED:8E:C4:49
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 01A08C7A8916B45A9EC7282216A76391F225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:35 +0000
Manifest this update: Thu 10 Sep 2026 18:00:35 +0000
Manifest next update: Fri 11 Sep 2026 18:00:35 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: vNyNWZz9emkLVNTgh0pmX6Yneq2ovXku+weFVXx7PhM=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:89:16:b4:5a:9e:c7:28:22:16:a7:63:91:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Sep 10 18:00:35 2026 GMT
Not After : Sep 11 18:00:35 2026 GMT
Subject: CN=fccd6863afe6a98e003c5a8af1a4527fed8ec449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:d9:16:e6:de:58:b5:58:f5:e2:5f:c4:eb:
f3:86:0b:a1:c0:f3:e9:2d:76:b7:69:ff:c6:81:1f:
23:ee:f8:2c:6d:0e:25:18:1d:94:ec:ae:74:34:6d:
f8:21:a2:6c:a5:47:c3:c6:64:53:a3:ec:d5:a8:f5:
8c:b4:20:0e:11:fc:42:42:6e:c4:b2:52:1f:19:e9:
da:ef:a6:b3:df:b3:83:a6:69:68:ee:71:ff:18:6c:
10:f7:d1:92:08:2c:de:64:fb:4b:a5:c6:90:41:c0:
f3:4e:1a:6b:68:5a:39:69:0f:ad:f7:ed:86:c3:ed:
df:ac:56:d5:a9:1c:97:45:88:a6:cd:ff:d5:23:c2:
02:26:1c:7d:e7:20:67:b4:2c:1b:ee:b4:2c:5b:16:
21:3a:34:8e:71:60:be:93:ee:28:f4:4e:c2:58:a8:
42:f2:68:2c:4e:99:e1:64:da:64:e0:dd:f3:b1:6c:
94:a5:bb:ae:4e:91:c7:90:00:12:ab:63:eb:73:22:
01:d0:be:d6:50:5c:0d:6c:d8:b3:83:1e:41:48:e8:
f1:5a:5f:13:43:ee:96:00:3d:36:5e:9d:3a:97:d2:
c5:7e:22:11:b2:45:6a:45:39:1d:c2:9c:f7:b8:ca:
60:ac:32:41:d0:11:18:23:e6:73:7e:aa:4a:1c:1f:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:68:63:AF:E6:A9:8E:00:3C:5A:8A:F1:A4:52:7F:ED:8E:C4:49
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:8d:7f:22:4e:c9:2e:2a:8b:b5:97:24:0b:fe:24:4a:06:
fd:9b:06:a7:f7:b9:11:b7:d8:17:07:f3:5a:47:be:1e:f1:00:
7d:b3:9f:58:67:99:2f:b3:85:fc:c1:15:45:24:ad:eb:12:60:
8d:bc:68:c7:11:79:71:4f:a8:56:65:5f:94:d1:b2:ef:98:f0:
69:9e:20:33:47:ac:e0:11:62:22:e2:e5:69:76:13:e4:34:94:
a0:48:f7:0f:8f:fc:4e:11:6f:11:d6:a5:73:ec:31:04:a9:c1:
15:fa:a4:fc:b4:0f:e3:c7:6d:9e:4c:d2:3d:53:82:71:07:73:
68:ee:e4:80:a3:ca:10:1f:4f:84:49:b5:50:92:f3:86:f2:21:
aa:c6:01:a9:e2:a0:cc:63:ed:12:d2:f4:1a:16:22:4d:d9:cb:
a5:f7:81:f7:93:46:89:c2:3d:7a:bd:09:d7:24:95:41:54:dd:
24:a1:03:78:a7:cb:ad:77:94:06:cb:53:1d:22:b9:4d:d2:58:
b5:ce:d2:f0:5d:3d:00:d3:71:bf:e5:7b:d8:2b:01:e2:7c:13:
5e:d7:67:cf:6b:7d:36:8c:9c:20:6b:c1:ad:5d:8e:b1:47:b7:
d4:d2:c5:da:11:e3:f1:f8:01:3b:62:0c:fd:31:98:6c:e3:04:
9a:47:f7:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMeokWtFqexygiFqdjkfIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmUxMmY0NmI1ZTZiOTYwYzVjZTgxMzFiMWQzZTUzMmYw
NWE4YWQwHhcNMjYwOTEwMTgwMDM1WhcNMjYwOTExMTgwMDM1WjAzMTEwLwYDVQQD
EyhmY2NkNjg2M2FmZTZhOThlMDAzYzVhOGFmMWE0NTI3ZmVkOGVjNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIbZFubeWLVY9eJfxOvzhguhwPPp
LXa3af/GgR8j7vgsbQ4lGB2U7K50NG34IaJspUfDxmRTo+zVqPWMtCAOEfxCQm7E
slIfGena76az37ODpmlo7nH/GGwQ99GSCCzeZPtLpcaQQcDzThpraFo5aQ+t9+2G
w+3frFbVqRyXRYimzf/VI8ICJhx95yBntCwb7rQsWxYhOjSOcWC+k+4o9E7CWKhC
8mgsTpnhZNpk4N3zsWyUpbuuTpHHkAASq2PrcyIB0L7WUFwNbNizgx5BSOjxWl8T
Q+6WAD02Xp06l9LFfiIRskVqRTkdwpz3uMpgrDJB0BEYI+ZzfqpKHB/ckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzNaGOv5qmOADxaivGkUn/tjsRJMB8GA1UdIwQY
MBaAFC6+EvRrXmuWDFzoExsdPlMvBaitMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHI0UzlHdGVhNVlNWE9nVEd4MC1VeThGcUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvTHI0UzlHdGVhNVlNWE9nVEd4MC1VeThGcUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvTHI0UzlHdGVhNVlNWE9nVEd4MC1VeThGcUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+CNfyJO
yS4qi7WXJAv+JEoG/ZsGp/e5EbfYFwfzWke+HvEAfbOfWGeZL7OF/MEVRSSt6xJg
jbxoxxF5cU+oVmVflNGy75jwaZ4gM0es4BFiIuLlaXYT5DSUoEj3D4/8ThFvEdal
c+wxBKnBFfqk/LQP48dtnkzSPVOCcQdzaO7kgKPKEB9PhEm1UJLzhvIhqsYBqeKg
zGPtEtL0GhYiTdnLpfeB95NGicI9er0J1ySVQVTdJKEDeKfLrXeUBstTHSK5TdJY
tc7S8F09ANNxv+V72CsB4nwTXtdnz2t9NoycIGvBrV2OsUe31NLF2hHj8fgBO2IM
/TGYbOMEmkf3OA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:55 2026 by rpki-client