Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: BghahRGzM9UL+VBqTczMEvxlb6imnVqzYBDCIlD6XqQ=
Subject key identifier: E3:A9:21:E0:B9:B9:9A:3B:09:16:76:0E:CB:66:27:F8:09:FE:72:F4
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 01A00281FADEF600BF7804BF5153A292690D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 23:01:07 +0000
Manifest this update: Fri 14 Aug 2026 23:01:07 +0000
Manifest next update: Sat 15 Aug 2026 23:01:07 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: ps6id8BajrMh6zEfWVoObMLM8eB3krjJf6u7XhtwyPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:fa:de:f6:00:bf:78:04:bf:51:53:a2:92:69:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Aug 14 23:01:07 2026 GMT
Not After : Aug 15 23:01:07 2026 GMT
Subject: CN=e3a921e0b9b99a3b0916760ecb6627f809fe72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:11:96:1e:ac:ca:e0:1f:6c:0d:7b:4c:47:
41:fe:4d:62:6a:fe:4a:d6:ed:04:df:d1:53:1f:4f:
2d:98:3f:79:f6:94:e9:68:94:d6:af:6f:ad:4f:ee:
62:5c:94:50:0d:e2:e5:2c:2f:4e:7b:b6:29:1d:47:
1e:e0:c6:58:9e:5d:ad:06:b5:9a:fd:60:bb:fb:0a:
b1:1f:60:ca:b5:96:ba:df:3d:38:f1:91:53:26:19:
9e:bd:4f:88:16:6f:01:a9:7f:97:f3:16:2b:f1:0a:
9b:16:ef:9c:57:ad:3b:53:f2:c5:e1:52:04:59:71:
9d:f0:27:8f:af:1f:20:71:fd:2e:e2:cf:9d:8f:01:
c5:51:4f:63:8d:bf:b5:8a:72:48:b2:bb:0f:15:6e:
0c:6e:a5:3e:04:0d:e9:c9:e4:0e:bd:95:40:00:44:
dc:1e:22:89:fc:5c:01:fa:25:90:e0:ab:4b:a3:d6:
df:4d:12:87:ef:a9:58:22:6d:40:72:60:46:82:01:
af:0d:3a:ad:71:ca:bf:2b:c2:ea:01:fc:0f:ea:03:
f3:b4:46:4d:0b:df:fe:bc:28:c6:cc:76:41:0b:1d:
50:a1:33:7a:09:95:8e:a4:d0:1f:96:8a:e6:ef:43:
2a:53:dd:e7:ce:14:2e:bc:4f:79:2f:74:7f:b0:e3:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:21:E0:B9:B9:9A:3B:09:16:76:0E:CB:66:27:F8:09:FE:72:F4
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fb:3b:29:37:e7:e2:9b:57:83:9b:da:d6:b0:f5:93:83:18:
56:5a:fe:f1:30:19:2a:c5:50:b3:47:67:f3:18:04:df:4a:a0:
85:24:76:a9:d4:b5:7b:c0:c3:10:c5:56:ee:70:73:6e:82:36:
f5:2d:dc:78:9f:b8:9a:47:b3:86:bb:a2:46:d1:5f:16:d3:f6:
2b:d8:0b:87:08:1c:d1:41:e6:93:5e:80:58:ac:50:fb:b5:07:
26:48:9c:89:2a:28:86:2b:81:67:58:0b:12:6a:1d:31:cd:41:
87:9e:db:eb:1e:f9:b1:88:9a:ec:52:1b:6e:ba:8c:32:b0:9f:
2b:90:9d:cc:49:f3:ed:7f:d4:2b:4f:06:a7:ad:b8:2c:f4:4c:
a2:6a:dc:2b:63:05:9d:fa:29:db:4e:2b:8e:79:62:ae:cc:2a:
82:5c:8f:3a:28:d2:39:81:b2:08:69:f8:c7:54:c7:a3:63:77:
ed:de:e9:09:ee:ad:fa:b4:9e:b4:3b:30:61:77:1a:42:bf:ff:
74:cb:78:ca:21:b7:3d:2f:ff:6e:8b:af:e5:53:62:27:eb:b0:
3b:37:8d:1a:85:8a:ed:15:9e:d8:67:d0:81:ba:5a:4f:a3:5d:
74:ee:94:5c:c9:3f:30:27:65:96:7a:51:d0:e6:71:cf:bc:9b:
7d:62:af:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgfre9gC/eAS/UVOikmkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm
Mjk2NDgwHhcNMjYwODE0MjMwMTA3WhcNMjYwODE1MjMwMTA3WjAzMTEwLwYDVQQD
EyhlM2E5MjFlMGI5Yjk5YTNiMDkxNjc2MGVjYjY2MjdmODA5ZmU3MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq8Rlh6syuAfbA17TEdB/k1iav5K
1u0E39FTH08tmD959pTpaJTWr2+tT+5iXJRQDeLlLC9Oe7YpHUce4MZYnl2tBrWa
/WC7+wqxH2DKtZa63z048ZFTJhmevU+IFm8BqX+X8xYr8QqbFu+cV607U/LF4VIE
WXGd8CePrx8gcf0u4s+djwHFUU9jjb+1inJIsrsPFW4MbqU+BA3pyeQOvZVAAETc
HiKJ/FwB+iWQ4KtLo9bfTRKH76lYIm1AcmBGggGvDTqtccq/K8LqAfwP6gPztEZN
C9/+vCjGzHZBCx1QoTN6CZWOpNAflorm70MqU93nzhQuvE95L3R/sOOeewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOpIeC5uZo7CRZ2DstmJ/gJ/nL0MB8GA1UdIwQY
MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt
ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx
LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfs7KTfn
4ptXg5va1rD1k4MYVlr+8TAZKsVQs0dn8xgE30qghSR2qdS1e8DDEMVW7nBzboI2
9S3ceJ+4mkezhruiRtFfFtP2K9gLhwgc0UHmk16AWKxQ+7UHJkiciSoohiuBZ1gL
EmodMc1Bh57b6x75sYia7FIbbrqMMrCfK5CdzEnz7X/UK08Gp624LPRMomrcK2MF
nfop204rjnlirswqglyPOijSOYGyCGn4x1THo2N37d7pCe6t+rSetDswYXcaQr//
dMt4yiG3PS//bouv5VNiJ+uwOzeNGoWK7RWe2GfQgbpaT6NddO6UXMk/MCdllnpR
0OZxz7ybfWKv8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:29 2026 by rpki-client