
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: yCGSbVkH9CK+Y7lKTCkjZobEDyDCcZiZ8Uk0UASxDkQ=
Subject key identifier: 79:84:EE:E4:85:BE:9B:E2:92:E5:5B:7C:3A:63:EC:72:3D:C7:84:A4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A08A61E8F8319DC4870B69AAADF8A447A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 1A0C
Signing time: Thu 10 Sep 2026 08:14:27 +0000
Manifest this update: Thu 10 Sep 2026 08:14:27 +0000
Manifest next update: Fri 11 Sep 2026 08:14:27 +0000
Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
4: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=)
5: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=)
6: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=)
7: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: tCYLuhBM8IlwrmAlqECZYFbH5VtLrjyrwLkpQAHuyaU=)
9: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
10: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
11: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
12: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
13: _eVFxPtKebMIokqnWwy-Wg13IlI.roa (hash: ds3XPCGNp67Ng7shhUA2Q/Zeww6kk3TR8TFzatChP+A=)
14: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=)
15: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
16: gUDh0nsb3EIOB8Ag8NJJM729czo.roa (hash: fac7OiShZvoVewieXWoUVtzNKr4oM8oUjqjAbVWB2Sg=)
17: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
18: lAUTh060UnG4SYUzw748rs6F-AU.roa (hash: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=)
19: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
20: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
21: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
22: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=)
23: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
24: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
25: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:61:e8:f8:31:9d:c4:87:0b:69:aa:ad:f8:a4:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 10 08:14:27 2026 GMT
Not After : Sep 11 08:14:27 2026 GMT
Subject: CN=7984eee485be9be292e55b7c3a63ec723dc784a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:e3:ce:26:4a:56:73:53:2d:a8:ca:0c:db:
49:e4:ee:d6:a9:45:eb:74:13:41:06:36:d1:c0:26:
0c:8d:ff:23:1e:99:4c:e6:1a:41:73:36:52:b8:0a:
61:83:67:d7:23:a5:ee:39:01:e1:eb:1b:00:7e:b1:
6a:08:04:82:c2:2e:08:f6:e2:96:f0:6d:cc:61:40:
7b:41:4b:78:d4:e3:e8:ff:ce:e9:97:6a:8a:52:99:
20:0d:3f:0c:21:16:7a:d9:39:dd:62:49:84:3b:d5:
3c:5b:af:32:03:79:bf:8a:55:27:2e:91:41:fb:81:
cb:a9:90:87:b7:41:d7:a3:a8:1e:ad:ec:de:61:7a:
ed:1b:aa:82:c9:65:27:34:c8:b9:0d:ce:28:13:f2:
8f:26:d7:5a:d5:5f:60:81:06:0e:17:1d:64:9d:40:
90:ba:39:db:64:30:01:f4:d9:06:2b:2f:41:ba:49:
85:d0:c3:43:1f:c2:e3:af:34:0f:a1:1e:42:5f:bc:
91:71:cf:c8:bc:76:97:0e:5e:69:37:f9:8e:44:45:
48:4a:4d:0f:8f:3c:2d:9d:b9:71:ae:6a:5d:b4:24:
62:d0:f2:ee:aa:d7:ec:f4:5f:05:b1:c8:cc:af:9e:
3c:57:2c:7f:33:cd:cf:ae:6d:05:72:3d:c9:d1:30:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:84:EE:E4:85:BE:9B:E2:92:E5:5B:7C:3A:63:EC:72:3D:C7:84:A4
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d6:8e:a5:d0:36:a1:6d:46:b4:09:3d:71:ba:19:55:1f:63:
f8:d7:c7:6f:92:19:08:56:17:b2:c0:14:07:e3:cd:25:41:51:
e4:3b:2a:3e:ea:04:fa:d2:79:6a:ea:56:42:2e:60:1a:e9:03:
2c:ba:91:a4:a8:46:5a:82:75:37:8a:3e:56:49:06:49:40:26:
95:2a:8f:4d:2f:9f:2f:03:56:1d:d1:f9:de:7f:0c:e7:50:f3:
f2:7d:4f:79:be:78:df:98:b4:94:20:f7:e7:14:8d:20:f6:cc:
b2:ad:d7:a7:61:21:ae:8d:fe:72:a7:9a:7d:2f:02:6d:2b:fa:
b5:c4:52:13:f3:22:50:38:ca:4d:cc:ec:23:9a:91:c0:6d:c6:
8e:8b:d8:aa:e4:bc:b7:ab:ef:d1:b7:be:67:40:b8:3c:0b:5d:
a7:75:aa:89:66:13:30:ce:84:f5:05:f2:83:83:b6:f3:c3:46:
a1:fc:3a:e9:a4:75:28:98:51:fa:ef:c1:91:d1:18:82:29:b6:
57:32:eb:88:00:7e:8d:21:9b:b1:1c:ff:46:9d:05:d9:6c:62:
62:12:75:6c:2c:b5:26:fd:e0:d2:2e:45:a0:72:22:86:1f:e1:
86:3c:50:88:13:89:42:45:f5:9d:67:d2:3b:95:e8:8f:db:05:
9b:1e:b9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKYej4MZ3Ehwtpqq34pEegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwOTEwMDgxNDI3WhcNMjYwOTExMDgxNDI3WjAzMTEwLwYDVQQD
Eyg3OTg0ZWVlNDg1YmU5YmUyOTJlNTViN2MzYTYzZWM3MjNkYzc4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbPjziZKVnNTLajKDNtJ5O7WqUXr
dBNBBjbRwCYMjf8jHplM5hpBczZSuAphg2fXI6XuOQHh6xsAfrFqCASCwi4I9uKW
8G3MYUB7QUt41OPo/87pl2qKUpkgDT8MIRZ62TndYkmEO9U8W68yA3m/ilUnLpFB
+4HLqZCHt0HXo6gerezeYXrtG6qCyWUnNMi5Dc4oE/KPJtda1V9ggQYOFx1knUCQ
ujnbZDAB9NkGKy9BukmF0MNDH8LjrzQPoR5CX7yRcc/IvHaXDl5pN/mOREVISk0P
jzwtnblxrmpdtCRi0PLuqtfs9F8FscjMr548Vyx/M83Prm0Fcj3J0TDN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmE7uSFvpvikuVbfDpj7HI9x4SkMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdaOpdA2
oW1GtAk9cboZVR9j+NfHb5IZCFYXssAUB+PNJUFR5DsqPuoE+tJ5aupWQi5gGukD
LLqRpKhGWoJ1N4o+VkkGSUAmlSqPTS+fLwNWHdH53n8M51Dz8n1Peb5435i0lCD3
5xSNIPbMsq3Xp2Ehro3+cqeafS8CbSv6tcRSE/MiUDjKTczsI5qRwG3GjovYquS8
t6vv0be+Z0C4PAtdp3WqiWYTMM6E9QXyg4O288NGofw66aR1KJhR+u/BkdEYgim2
VzLriAB+jSGbsRz/Rp0F2WxiYhJ1bCy1Jv3g0i5FoHIihh/hhjxQiBOJQkX1nWfS
O5Xoj9sFmx65Sg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:29 2026 by rpki-client