Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: g55URHOfDUpDM/DtkuE0koupo2YSYFaekdkhmRsr7PU=
Subject key identifier: 8F:49:84:FA:FD:0E:8C:EC:43:F7:94:2F:A4:2D:9D:1D:BB:E7:99:89
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019E5B93A422DE3E8DFBADBDF23B4214A82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1939
Signing time: Sun 24 May 2026 20:01:02 +0000
Manifest this update: Sun 24 May 2026 20:01:02 +0000
Manifest next update: Mon 25 May 2026 20:01:02 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
3: QCS4FJLmFB_TtV0HRcC2L7aCPPU.roa (hash: +ALoN9stJwp+oTowBFWka2K8GW3Wc31BnI0Y5JZvvLI=)
4: eYb-0sk3lTAnHwHmBql3xYuqBeU.roa (hash: 0O2M8qsHlKcHsnwjDobcM4cR1vGFH9BSfHcvMhBfXwk=)
5: hy9A240z5duyi34QXA7EnqVELgs.roa (hash: bLJo88/wlnXwleBLpFysTxW5nl4FQ6vmDmPOFHtPv98=)
6: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: ZUrMKFlr6FOIx9XQMdnd7h2tMcJmp4MkSubWc9bFNGA=)
7: mlzOGdXXBPGgr7rf_wH5u_-dcMM.roa (hash: MWcRpRwa6NdgqZ1pSw9Z/IN6ZnlEEQoN5i8WXOp3tXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:93:a4:22:de:3e:8d:fb:ad:bd:f2:3b:42:14:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: May 24 20:01:02 2026 GMT
Not After : May 25 20:01:02 2026 GMT
Subject: CN=8f4984fafd0e8cec43f7942fa42d9d1dbbe79989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:f6:23:aa:db:90:e6:7f:d6:e3:fa:4a:17:
90:13:86:38:1d:9c:b0:2d:02:7b:e5:48:8e:41:d5:
85:6d:79:b0:d2:58:8f:42:3b:1b:98:be:de:44:28:
dc:48:8e:d7:71:69:31:75:4c:2d:b1:d0:1d:23:ed:
2f:5e:e2:7c:0e:91:2a:a0:56:7b:f2:72:d3:67:87:
5a:9a:a2:54:2c:0d:22:8c:66:05:53:e0:21:23:a0:
aa:9e:96:fe:72:a7:23:df:41:b8:46:fb:6e:fd:ab:
bb:91:7d:8d:c9:9c:11:09:c8:1f:b5:8b:44:8d:36:
4a:0f:dc:8c:3b:5c:45:df:b7:45:71:2f:7b:c5:83:
f8:fa:9e:5b:f8:59:9e:17:76:ce:60:35:61:2e:3d:
90:93:98:0d:3b:25:a5:62:31:64:94:9f:e1:00:a7:
3f:33:e2:32:f6:89:d5:84:2b:25:2c:cd:af:56:34:
a0:bf:21:1f:5a:ea:fa:7c:e0:20:bb:3e:43:b3:50:
2e:0f:1a:06:50:ab:be:75:e0:70:94:ed:47:8f:a5:
36:23:10:3f:c6:3b:6b:67:0c:ff:99:1c:6d:f2:52:
84:6d:6d:ab:91:63:4c:48:ba:50:f0:10:50:8a:dd:
c9:22:23:73:ae:0e:71:63:22:b5:5a:4f:72:be:55:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:84:FA:FD:0E:8C:EC:43:F7:94:2F:A4:2D:9D:1D:BB:E7:99:89
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:31:66:eb:da:51:05:7f:07:43:e6:79:46:88:ee:22:68:d6:
37:60:6c:c6:bb:4c:b0:b5:1b:64:4d:01:42:e0:1b:a2:04:82:
0b:3e:36:49:86:13:aa:38:49:2a:46:b0:fc:97:9f:c9:9d:31:
0f:f6:36:b0:0f:a3:4a:65:89:b7:ad:5a:42:42:2f:2b:ac:70:
2c:89:81:71:d0:97:24:9d:1d:78:72:f3:6f:65:00:2d:06:f6:
cc:d3:98:1d:c7:79:fc:1c:4f:da:7e:af:18:1e:93:d2:18:97:
23:25:25:9c:16:02:94:18:42:67:93:42:b0:27:b6:1d:07:6c:
75:ae:c1:5f:19:b6:a6:cb:c8:67:c3:9e:7b:d4:22:01:b9:b9:
39:f5:2d:77:f1:3c:bc:5e:6f:c7:5c:dc:d0:f6:21:d9:ed:ef:
19:8c:82:96:49:15:fe:d4:75:38:f7:00:bb:4f:bd:99:92:21:
e2:c8:15:d2:d1:7d:a1:fb:e9:63:70:6a:c3:96:73:2d:83:8d:
2d:da:d3:3f:bf:3b:df:30:1c:3e:a7:64:48:b5:35:b3:6e:72:
0c:25:f3:41:eb:64:15:ab:ee:ec:16:cb:59:b2:3f:9d:18:3d:
5c:27:a1:46:73:14:18:04:3a:12:26:fe:8b:42:6f:99:7c:ec:
75:f0:9d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5bk6Qi3j6N+6298jtCFKgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjYwNTI0MjAwMTAyWhcNMjYwNTI1MjAwMTAyWjAzMTEwLwYDVQQD
Eyg4ZjQ5ODRmYWZkMGU4Y2VjNDNmNzk0MmZhNDJkOWQxZGJiZTc5OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswT2I6rbkOZ/1uP6SheQE4Y4HZyw
LQJ75UiOQdWFbXmw0liPQjsbmL7eRCjcSI7XcWkxdUwtsdAdI+0vXuJ8DpEqoFZ7
8nLTZ4damqJULA0ijGYFU+AhI6Cqnpb+cqcj30G4Rvtu/au7kX2NyZwRCcgftYtE
jTZKD9yMO1xF37dFcS97xYP4+p5b+FmeF3bOYDVhLj2Qk5gNOyWlYjFklJ/hAKc/
M+Iy9onVhCslLM2vVjSgvyEfWur6fOAguz5Ds1AuDxoGUKu+deBwlO1Hj6U2IxA/
xjtrZwz/mRxt8lKEbW2rkWNMSLpQ8BBQit3JIiNzrg5xYyK1Wk9yvlU94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9JhPr9DozsQ/eUL6QtnR2755mJMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDFm69pR
BX8HQ+Z5RojuImjWN2BsxrtMsLUbZE0BQuAbogSCCz42SYYTqjhJKkaw/JefyZ0x
D/Y2sA+jSmWJt61aQkIvK6xwLImBcdCXJJ0deHLzb2UALQb2zNOYHcd5/BxP2n6v
GB6T0hiXIyUlnBYClBhCZ5NCsCe2HQdsda7BXxm2psvIZ8Oee9QiAbm5OfUtd/E8
vF5vx1zc0PYh2e3vGYyClkkV/tR1OPcAu0+9mZIh4sgV0tF9ofvpY3Bqw5ZzLYON
LdrTP7873zAcPqdkSLU1s25yDCXzQetkFavu7BbLWbI/nRg9XCehRnMUGAQ6Eib+
i0JvmXzsdfCd6w==
-----END CERTIFICATE-----
Generated at Mon May 25 06:31:12 2026 by rpki-client