Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: fQKI4UFR881+p0xAf/HkH8hvgYALVARGjJ/hkK9Nibo=
Subject key identifier: C8:B5:E3:0E:92:B4:85:27:FC:AC:87:40:80:30:E3:F7:14:31:22:CA
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019EB8EA8D7D9E356F5B3E3223F22B33CF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1836
Signing time: Thu 11 Jun 2026 23:00:39 +0000
Manifest this update: Thu 11 Jun 2026 23:00:39 +0000
Manifest next update: Fri 12 Jun 2026 23:00:39 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: hPhoAVSSUliIEki+hZau9zEQbX10vjhXUlYxfL8UDVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:8d:7d:9e:35:6f:5b:3e:32:23:f2:2b:33:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jun 11 23:00:39 2026 GMT
Not After : Jun 12 23:00:39 2026 GMT
Subject: CN=c8b5e30e92b48527fcac87408030e3f7143122ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:63:41:df:d6:56:23:3f:45:35:9c:54:4b:
8f:8c:cc:76:a9:6b:35:e1:90:87:66:b1:1d:3b:2b:
df:50:11:ae:88:97:d8:f9:d3:99:43:5b:5c:be:71:
e2:41:23:be:cf:c6:23:5c:1f:ba:0d:8d:b2:1c:bb:
14:6d:4e:7d:77:26:ce:82:d4:ec:ae:8c:fc:f2:7f:
a2:0e:64:47:00:96:92:f6:47:b9:bc:35:68:6e:3a:
8a:de:d5:b2:df:8a:b6:cb:01:94:de:2e:f8:1a:92:
d3:72:17:78:06:26:8c:cc:22:7d:96:cb:a5:5b:ff:
93:a7:99:45:38:f2:32:16:64:5c:42:19:01:17:7b:
39:b8:a2:3e:1e:01:33:ae:f1:42:a3:ee:ad:7a:8a:
16:1b:02:5d:16:a9:5b:77:00:ba:1e:82:88:7d:93:
6b:25:0f:53:c6:a9:64:62:93:94:48:d8:b5:31:e7:
cb:8d:12:1c:c8:3c:82:e9:e9:bc:ce:49:61:42:de:
5b:6a:c0:e9:6d:b3:cd:50:f3:5f:3b:33:57:28:90:
e8:d8:da:37:3b:33:0f:f4:b8:81:ca:d2:66:e8:8c:
83:6c:0d:52:17:4f:9f:6c:cf:54:00:40:40:d2:b6:
f7:ec:15:d1:a8:92:3b:84:46:f1:75:04:cf:61:7b:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B5:E3:0E:92:B4:85:27:FC:AC:87:40:80:30:E3:F7:14:31:22:CA
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:21:75:ae:33:b1:6f:87:fe:83:3b:9e:a2:ce:bb:f2:62:
62:ba:27:23:fc:78:fc:b4:d0:28:e7:88:e6:5a:43:a4:7a:c9:
fd:44:ca:b6:11:77:02:90:45:be:66:e7:28:07:7e:61:8e:05:
83:9f:3e:71:5b:76:90:0b:9e:44:fd:26:c4:c4:cc:36:45:fc:
34:10:48:5b:16:a8:69:cf:dc:54:f5:b0:2e:78:99:dd:52:b0:
9f:0b:e4:d0:10:14:a1:13:75:6b:e1:47:93:24:76:91:18:90:
6b:0c:85:3d:f5:c6:3b:8f:10:60:9a:9b:4f:ae:10:17:e9:11:
35:6a:83:0c:62:89:a7:d2:a7:67:95:04:1d:20:3f:3a:58:bc:
00:8e:be:2e:39:d9:b1:c4:f5:a6:62:87:9a:6b:74:58:ad:7d:
da:34:61:ad:c9:b9:28:d6:a6:ba:f0:a1:bb:31:70:f3:f3:48:
e4:f4:6a:0b:bb:44:d0:79:4a:4d:fa:90:2a:e6:65:96:3d:71:
d8:f1:95:7f:98:3c:92:e7:db:72:3c:3c:24:88:bb:d7:9f:84:
a9:98:96:fc:cf:24:47:44:ff:27:02:f8:92:fa:5a:04:b7:a9:
0e:ae:af:41:11:5c:df:36:ed:10:a0:54:78:4a:81:9f:c5:fb:
8c:76:a8:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646o19njVvWz4yI/IrM8+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjYwNjExMjMwMDM5WhcNMjYwNjEyMjMwMDM5WjAzMTEwLwYDVQQD
EyhjOGI1ZTMwZTkyYjQ4NTI3ZmNhYzg3NDA4MDMwZTNmNzE0MzEyMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYNjQd/WViM/RTWcVEuPjMx2qWs1
4ZCHZrEdOyvfUBGuiJfY+dOZQ1tcvnHiQSO+z8YjXB+6DY2yHLsUbU59dybOgtTs
roz88n+iDmRHAJaS9ke5vDVobjqK3tWy34q2ywGU3i74GpLTchd4BiaMzCJ9lsul
W/+Tp5lFOPIyFmRcQhkBF3s5uKI+HgEzrvFCo+6teooWGwJdFqlbdwC6HoKIfZNr
JQ9TxqlkYpOUSNi1MefLjRIcyDyC6em8zklhQt5basDpbbPNUPNfOzNXKJDo2No3
OzMP9LiBytJm6IyDbA1SF0+fbM9UAEBA0rb37BXRqJI7hEbxdQTPYXu5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi14w6StIUn/KyHQIAw4/cUMSLKMB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgchda4z
sW+H/oM7nqLOu/JiYronI/x4/LTQKOeI5lpDpHrJ/UTKthF3ApBFvmbnKAd+YY4F
g58+cVt2kAueRP0mxMTMNkX8NBBIWxaoac/cVPWwLniZ3VKwnwvk0BAUoRN1a+FH
kyR2kRiQawyFPfXGO48QYJqbT64QF+kRNWqDDGKJp9KnZ5UEHSA/Oli8AI6+LjnZ
scT1pmKHmmt0WK192jRhrcm5KNamuvChuzFw8/NI5PRqC7tE0HlKTfqQKuZllj1x
2PGVf5g8kufbcjw8JIi715+EqZiW/M8kR0T/JwL4kvpaBLepDq6vQRFc3zbtEKBU
eEqBn8X7jHaoEA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:37:58 2026 by rpki-client