Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: pdXpPPTGagNz6p6ssQv2jVbPh/3T5yLv4MP8TKj6IMg=
Subject key identifier: 51:68:9E:CB:F9:52:70:D7:5B:68:60:23:29:A8:EC:2D:82:A1:73:8C
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019E1D2313590A9F0AC9375BBAA797B28530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 04A0
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: NEPq/T+Agi9soxN10W/7WsCAK6VnELWZKKmFLmQYcuc=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:13:59:0a:9f:0a:c9:37:5b:ba:a7:97:b2:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=51689ecbf95270d75b68602329a8ec2d82a1738c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:29:30:c5:74:c7:e4:46:e7:73:9f:e5:96:
33:65:00:1a:e5:c1:4a:25:4f:24:aa:c0:3d:ac:3e:
b5:2f:57:50:d8:c4:d4:6c:22:6d:5c:9b:3b:03:c3:
09:0a:83:5e:cb:01:fb:37:af:2e:ca:68:5b:9c:da:
bc:1d:98:5e:44:cd:38:c2:a0:84:5b:c1:3f:c2:6f:
e5:10:59:5b:c5:ea:cf:23:a3:15:3f:54:a3:27:9a:
76:35:20:5b:66:b8:d3:46:bb:9b:ef:c2:0f:83:73:
bb:a3:a1:07:bf:aa:28:4d:7c:cb:2b:a0:77:0d:04:
5b:1d:f5:23:10:45:3b:0f:be:45:5b:1d:57:e1:0b:
0f:69:15:0f:85:39:ab:5e:4e:c5:61:46:cd:46:80:
47:c0:31:41:80:a0:2d:ef:2c:a1:3b:1d:cc:08:29:
4f:06:62:a3:45:6f:bd:9f:5d:16:91:2c:41:06:1f:
b5:3b:d5:fa:b8:da:db:f9:c3:57:56:0e:5b:ca:a9:
fc:6f:5e:56:bc:50:f1:26:6e:9b:ef:07:39:20:de:
89:34:19:24:34:a7:5a:3e:36:df:0a:77:08:5d:a3:
8c:9d:53:4b:5a:ba:ba:3f:03:66:15:00:71:a7:7d:
61:10:38:2e:61:dc:0e:36:d1:f6:a9:6d:e3:12:0e:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:9E:CB:F9:52:70:D7:5B:68:60:23:29:A8:EC:2D:82:A1:73:8C
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:f8:5c:24:cf:b4:15:06:f6:1a:3e:60:ad:85:d5:fc:cb:
b2:b7:b5:ce:7b:ee:bd:1a:86:cd:e1:da:46:91:34:36:af:ac:
8a:ab:7b:2d:19:eb:cd:ad:34:58:dd:63:2b:52:26:d7:7d:69:
20:56:84:50:1d:cd:38:3a:ac:2d:2e:a0:62:dd:d9:c1:fb:ef:
43:0e:bc:69:4f:63:42:4c:a0:17:49:14:be:9e:77:a3:8f:d8:
d7:30:9f:cb:e2:b0:9d:b5:2a:ad:f9:52:20:aa:43:28:94:72:
cd:91:fb:62:c4:9e:bb:27:99:0e:46:40:6b:1b:be:5e:6a:b1:
5d:6f:00:4a:b7:41:8e:3e:f8:b8:8f:6f:8d:4e:91:71:9a:c0:
5a:7b:7f:88:96:c1:06:a8:e8:67:bb:9a:ac:39:4a:ae:dc:ab:
85:47:73:07:63:8e:6b:67:29:c8:f4:bd:6a:aa:14:c4:1d:b6:
df:b9:c4:c9:27:b8:20:8e:cc:1b:60:6f:ce:f1:6c:f2:0d:39:
81:00:03:73:2d:ad:cd:ed:2a:34:b7:97:37:1e:e5:cd:3e:3d:
22:36:b8:59:5e:b0:73:c0:7b:e9:1b:a8:fd:89:a5:a8:af:08:
06:05:a5:db:43:3f:f4:e1:64:6d:d4:d4:8a:c2:17:5a:88:6e:
67:86:21:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIxNZCp8KyTdbuqeXsoUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwNTEyMTcwMTM4WhcNMjYwNTEzMTcwMTM4WjAzMTEwLwYDVQQD
Eyg1MTY4OWVjYmY5NTI3MGQ3NWI2ODYwMjMyOWE4ZWMyZDgyYTE3MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq8pMMV0x+RG53Of5ZYzZQAa5cFK
JU8kqsA9rD61L1dQ2MTUbCJtXJs7A8MJCoNeywH7N68uymhbnNq8HZheRM04wqCE
W8E/wm/lEFlbxerPI6MVP1SjJ5p2NSBbZrjTRrub78IPg3O7o6EHv6ooTXzLK6B3
DQRbHfUjEEU7D75FWx1X4QsPaRUPhTmrXk7FYUbNRoBHwDFBgKAt7yyhOx3MCClP
BmKjRW+9n10WkSxBBh+1O9X6uNrb+cNXVg5byqn8b15WvFDxJm6b7wc5IN6JNBkk
NKdaPjbfCncIXaOMnVNLWrq6PwNmFQBxp31hEDguYdwONtH2qW3jEg49XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFonsv5UnDXW2hgIymo7C2CoXOMMB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJL4XCTP
tBUG9ho+YK2F1fzLsre1znvuvRqGzeHaRpE0Nq+siqt7LRnrza00WN1jK1Im131p
IFaEUB3NODqsLS6gYt3ZwfvvQw68aU9jQkygF0kUvp53o4/Y1zCfy+KwnbUqrflS
IKpDKJRyzZH7YsSeuyeZDkZAaxu+XmqxXW8ASrdBjj74uI9vjU6RcZrAWnt/iJbB
BqjoZ7uarDlKrtyrhUdzB2OOa2cpyPS9aqoUxB2237nEySe4II7MG2BvzvFs8g05
gQADcy2tze0qNLeXNx7lzT49Ija4WV6wc8B76Ruo/YmlqK8IBgWl20M/9OFkbdTU
isIXWohuZ4YhLg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:21:08 2026 by rpki-client