Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 4xOZUrIeQBxf6dbm7cyW8c+TOWgKjLUjVWUrJzwxGFk=
Subject key identifier: FF:DE:D9:09:28:AD:37:EC:29:A2:72:D0:8C:9D:6F:B5:7B:44:71:79
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01A08C43CBFA1501FFEC11E319A007CE69C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1928
Signing time: Thu 10 Sep 2026 17:00:48 +0000
Manifest this update: Thu 10 Sep 2026 17:00:48 +0000
Manifest next update: Fri 11 Sep 2026 17:00:48 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: GHZIpPFrYUsLI2cv7PcvFlVEvhVLd1N16gKZ8b9ZHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:cb:fa:15:01:ff:ec:11:e3:19:a0:07:ce:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Sep 10 17:00:48 2026 GMT
Not After : Sep 11 17:00:48 2026 GMT
Subject: CN=ffded90928ad37ec29a272d08c9d6fb57b447179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:55:7f:cd:e8:ae:48:f0:c5:69:a9:f1:fc:
b2:1a:59:07:5f:e4:d3:de:28:3c:35:39:3d:32:ed:
28:32:25:f6:d8:35:70:20:46:c9:1c:75:bc:15:57:
d4:db:11:66:38:99:35:33:3c:98:98:f9:bc:26:b5:
3c:a8:2f:21:08:35:2e:68:26:ec:27:66:27:e8:73:
31:51:c0:2e:03:b0:48:59:aa:1c:f4:61:f0:14:87:
94:c7:59:20:e6:8c:23:f3:99:ad:62:c5:34:2a:0f:
fa:37:f3:1d:43:23:9b:6e:98:be:67:4b:b8:c9:fe:
98:19:9d:e0:bd:11:34:d6:c3:fa:ed:b6:64:61:f0:
a1:38:03:ad:17:19:cf:97:31:8e:df:19:46:96:9b:
40:0f:71:3d:2c:4d:2f:eb:ed:78:e0:52:83:22:a7:
1b:f3:75:be:a0:69:51:5e:f5:23:60:ca:a9:87:7b:
05:1d:5d:a3:c7:6c:88:a7:6b:2c:be:2a:07:d2:6c:
01:70:c6:4f:99:08:dd:7c:f0:68:01:ec:1d:a3:c0:
3d:c8:54:f8:f3:b2:98:98:78:bc:87:78:99:dc:65:
87:87:96:ad:bf:7a:ad:ad:66:a6:8e:a4:b6:f4:45:
17:5b:75:b3:22:18:15:34:1c:66:72:81:1c:8a:57:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:D9:09:28:AD:37:EC:29:A2:72:D0:8C:9D:6F:B5:7B:44:71:79
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:b1:e1:90:95:b9:d7:20:24:9b:d3:fd:81:d2:cd:b2:83:
f0:19:6a:7d:8e:bc:fb:ed:17:de:e5:a3:27:a8:23:42:67:9a:
17:41:07:04:86:3f:fd:6b:db:65:d2:9e:13:e0:e6:30:59:db:
bf:3d:b0:c9:3d:79:9b:5a:a1:0e:9e:1c:b0:81:0f:7f:e8:7b:
44:ca:a9:21:be:b1:b8:76:70:bc:b0:3e:f7:ff:39:1c:6c:c3:
ad:ca:3c:14:47:67:b2:36:2a:e3:76:9d:30:b0:ce:c7:5f:22:
03:8d:49:06:44:71:60:65:94:83:e9:22:9a:a4:ed:e2:d8:9e:
0d:b5:f3:00:9e:94:4a:a0:4c:10:69:8a:71:05:90:96:2c:2b:
b0:b2:65:81:24:8d:6b:2e:9d:d6:7e:77:91:a8:2a:2f:1d:94:
5c:b6:e2:55:de:2f:13:00:5e:ff:9d:76:ff:6e:72:7a:5c:5a:
ce:98:aa:c6:7a:e8:ab:be:20:83:34:b0:52:8c:a9:4a:00:c9:
8c:d4:8f:4b:81:af:b4:96:c8:26:d2:c8:da:70:fd:d1:1d:01:
c9:45:d6:1d:66:8c:bd:ad:48:86:77:ea:1b:f0:05:13:ee:d5:
5b:b1:d0:5d:c0:fc:a8:b6:44:1f:c5:27:e6:90:a2:02:2f:01:
1e:14:5d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ8v6FQH/7BHjGaAHzmnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjYwOTEwMTcwMDQ4WhcNMjYwOTExMTcwMDQ4WjAzMTEwLwYDVQQD
EyhmZmRlZDkwOTI4YWQzN2VjMjlhMjcyZDA4YzlkNmZiNTdiNDQ3MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6JVf83orkjwxWmp8fyyGlkHX+TT
3ig8NTk9Mu0oMiX22DVwIEbJHHW8FVfU2xFmOJk1MzyYmPm8JrU8qC8hCDUuaCbs
J2Yn6HMxUcAuA7BIWaoc9GHwFIeUx1kg5owj85mtYsU0Kg/6N/MdQyObbpi+Z0u4
yf6YGZ3gvRE01sP67bZkYfChOAOtFxnPlzGO3xlGlptAD3E9LE0v6+144FKDIqcb
83W+oGlRXvUjYMqph3sFHV2jx2yIp2ssvioH0mwBcMZPmQjdfPBoAewdo8A9yFT4
87KYmHi8h3iZ3GWHh5atv3qtrWamjqS29EUXW3WzIhgVNBxmcoEcilefbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/e2QkorTfsKaJy0Iydb7V7RHF5MB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs+x4ZCV
udcgJJvT/YHSzbKD8BlqfY68++0X3uWjJ6gjQmeaF0EHBIY//WvbZdKeE+DmMFnb
vz2wyT15m1qhDp4csIEPf+h7RMqpIb6xuHZwvLA+9/85HGzDrco8FEdnsjYq43ad
MLDOx18iA41JBkRxYGWUg+kimqTt4tieDbXzAJ6USqBMEGmKcQWQliwrsLJlgSSN
ay6d1n53kagqLx2UXLbiVd4vEwBe/512/25yelxazpiqxnroq74ggzSwUoypSgDJ
jNSPS4GvtJbIJtLI2nD90R0ByUXWHWaMva1IhnfqG/AFE+7VW7HQXcD8qLZEH8Un
5pCiAi8BHhRdbg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:38 2026 by rpki-client