
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: F5yXcu5P0msS1Qz4zJW0mudth3xQVwQBGdH1QfuyOp8=
Subject key identifier: EA:38:A7:36:17:D0:D4:B9:A1:38:B5:19:F5:2C:D1:A5:A8:42:9E:85
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01A12D32CD483AA8CA5BEF375B931C9563D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1AB2
Signing time: Sun 11 Oct 2026 23:01:06 +0000
Manifest this update: Sun 11 Oct 2026 23:01:06 +0000
Manifest next update: Mon 12 Oct 2026 23:01:06 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: K+4LLCmNGq34AsynsD9WbbhqntB0JufpAyJduwZwX1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:cd:48:3a:a8:ca:5b:ef:37:5b:93:1c:95:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Oct 11 23:01:06 2026 GMT
Not After : Oct 12 23:01:06 2026 GMT
Subject: CN=ea38a73617d0d4b9a138b519f52cd1a5a8429e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:17:0b:c7:45:8d:e8:62:39:a9:cd:04:b0:
d8:6e:6a:6d:48:fa:e7:67:61:10:02:74:8d:e7:8a:
d4:e3:2b:a4:f9:b0:bb:ea:be:b2:bf:c9:cf:59:aa:
6c:d2:36:0d:53:bd:7b:48:2a:a1:71:cf:93:66:ba:
14:0c:35:b0:f7:19:9c:5e:5a:38:f0:2b:ac:8f:5e:
a4:9e:8e:51:80:b7:44:f8:e2:f5:96:78:d2:f9:b0:
5e:28:48:02:21:61:b4:c4:8a:07:f3:bc:c1:a6:af:
c5:7d:ca:47:a1:51:86:ef:88:f1:c8:dd:0b:2f:94:
63:83:eb:76:a3:bb:99:07:12:4d:f9:cc:aa:13:a0:
c5:04:02:f6:fa:04:b1:7b:02:5f:f6:e4:be:8e:f7:
a0:98:90:3e:37:30:b4:59:fb:43:75:8a:e0:9f:81:
ce:da:c0:a5:3b:96:d7:a9:87:28:d8:12:b2:02:79:
ef:4c:70:e0:20:45:1e:91:16:70:f3:83:fc:dd:bf:
c6:71:42:60:bf:77:69:33:9e:98:32:de:46:f8:b3:
51:ad:56:cb:a0:82:5c:7f:23:e7:b8:af:aa:eb:6b:
7a:d3:44:24:82:b4:50:c7:f0:79:2c:72:b8:45:25:
13:2e:4e:28:60:25:af:b9:4a:56:6c:27:77:ee:0c:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:A7:36:17:D0:D4:B9:A1:38:B5:19:F5:2C:D1:A5:A8:42:9E:85
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5d:48:6a:c1:b8:44:fd:1f:dc:56:94:0b:e7:f3:51:54:e2:
e1:42:07:a9:9d:b8:ac:34:f3:5a:b6:90:7f:4e:fe:fc:a9:9f:
af:53:d1:2a:f9:31:05:91:9e:14:fb:b2:32:17:c6:3c:57:4c:
db:b1:13:ac:72:1e:4b:c7:7c:24:48:d1:4e:8e:47:f9:7c:de:
2b:4c:f7:c6:77:a3:1e:d0:42:8f:7c:44:2c:45:86:d1:08:80:
e3:cf:d3:8a:26:18:0b:8d:01:92:0d:f9:58:bc:00:cb:e9:83:
24:d6:f2:c3:d8:c1:3d:66:ed:10:49:83:af:ef:ec:fa:af:28:
c8:b9:5e:31:34:0e:c6:a8:e0:86:d8:b1:ba:65:e4:76:5e:6b:
43:0c:84:bb:b5:be:be:cc:36:3e:2c:20:10:9e:ba:69:0c:4f:
f6:8f:03:4a:48:5e:20:d0:e1:00:68:e2:91:69:49:b2:bb:24:
e5:61:79:9b:96:06:6d:d4:6e:2e:b8:a1:25:22:58:3a:c3:87:
3a:21:08:44:e3:5f:cb:98:dd:a8:89:74:74:a5:0f:9e:32:59:
22:e8:f3:57:bd:8b:05:79:85:3c:21:b7:6d:aa:62:85:e2:3b:
ca:df:f5:53:8d:71:da:03:95:31:d5:bb:e6:63:96:a9:72:f3:
aa:5b:f9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtMs1IOqjKW+83W5MclWPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjYxMDExMjMwMTA2WhcNMjYxMDEyMjMwMTA2WjAzMTEwLwYDVQQD
EyhlYTM4YTczNjE3ZDBkNGI5YTEzOGI1MTlmNTJjZDFhNWE4NDI5ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYIXC8dFjehiOanNBLDYbmptSPrn
Z2EQAnSN54rU4yuk+bC76r6yv8nPWaps0jYNU717SCqhcc+TZroUDDWw9xmcXlo4
8Cusj16kno5RgLdE+OL1lnjS+bBeKEgCIWG0xIoH87zBpq/FfcpHoVGG74jxyN0L
L5Rjg+t2o7uZBxJN+cyqE6DFBAL2+gSxewJf9uS+jvegmJA+NzC0WftDdYrgn4HO
2sClO5bXqYco2BKyAnnvTHDgIEUekRZw84P83b/GcUJgv3dpM56YMt5G+LNRrVbL
oIJcfyPnuK+q62t600QkgrRQx/B5LHK4RSUTLk4oYCWvuUpWbCd37gyOjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo4pzYX0NS5oTi1GfUs0aWoQp6FMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF1IasG4
RP0f3FaUC+fzUVTi4UIHqZ24rDTzWraQf07+/Kmfr1PRKvkxBZGeFPuyMhfGPFdM
27ETrHIeS8d8JEjRTo5H+XzeK0z3xnejHtBCj3xELEWG0QiA48/TiiYYC40Bkg35
WLwAy+mDJNbyw9jBPWbtEEmDr+/s+q8oyLleMTQOxqjghtixumXkdl5rQwyEu7W+
vsw2PiwgEJ66aQxP9o8DSkheINDhAGjikWlJsrsk5WF5m5YGbdRuLrihJSJYOsOH
OiEIRONfy5jdqIl0dKUPnjJZIujzV72LBXmFPCG3bapiheI7yt/1U41x2gOVMdW7
5mOWqXLzqlv5nQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 08:36:51 2026 by rpki-client