Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: Eb6ahQz6eO3DWXcLgzFspYW4wtjQTYhUdYPvDAPZh0k=
Subject key identifier: 9C:78:DE:EF:9E:9A:EB:7C:E7:E9:D8:61:43:EF:2B:0D:5A:EC:C6:35
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 01A0CFA4CC556DC221EFA03FA7E81F603C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 06DF
Signing time: Wed 23 Sep 2026 19:01:18 +0000
Manifest this update: Wed 23 Sep 2026 19:01:18 +0000
Manifest next update: Thu 24 Sep 2026 19:01:18 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: CZdB6KJEPPjfU+8DF5Ge3bdu2dB0/I54SSo/n+oCeLc=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:cc:55:6d:c2:21:ef:a0:3f:a7:e8:1f:60:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Sep 23 19:01:18 2026 GMT
Not After : Sep 24 19:01:18 2026 GMT
Subject: CN=9c78deef9e9aeb7ce7e9d86143ef2b0d5aecc635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:4c:45:01:aa:7c:20:5b:8e:3c:a8:e5:21:
09:ef:6b:64:f2:60:82:87:33:2e:e2:cd:0d:ba:bb:
69:c3:5c:12:ce:74:a9:46:c4:b3:3b:dc:18:84:99:
49:9a:01:09:72:ed:14:ec:51:ad:b7:7c:7e:12:b3:
99:08:0c:30:d8:e1:a2:5f:24:55:29:93:d8:61:47:
67:d7:54:6e:a0:a8:79:18:7c:4a:66:f9:63:92:fd:
93:4d:e4:72:c1:e6:bf:c0:21:df:d4:2a:0f:ab:26:
20:ee:4f:68:5e:60:90:e0:02:f3:60:f5:00:ff:73:
27:15:60:67:b2:79:86:5b:12:ed:b0:8b:8c:73:11:
bc:e6:16:f1:cb:6d:f7:95:cf:20:7b:a3:6b:7a:fe:
81:d3:e2:41:38:6c:f6:60:d1:6e:8e:5e:28:ad:1c:
df:61:08:a3:0b:bb:17:c5:2c:10:e6:02:5e:cb:0f:
76:9f:d3:22:d3:56:ff:e8:05:7d:35:1d:63:0b:cf:
00:ba:15:0f:b4:98:e9:20:c2:43:36:7a:47:6c:de:
d1:11:29:3f:f0:84:9b:b6:6d:1c:6b:5e:74:25:1a:
c9:40:ec:7d:5c:cd:ac:a1:1a:bb:5a:c6:73:ff:8a:
82:90:20:4b:b8:6f:50:7f:4d:1e:4e:51:6f:b4:96:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:DE:EF:9E:9A:EB:7C:E7:E9:D8:61:43:EF:2B:0D:5A:EC:C6:35
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:40:e0:fd:02:7f:72:be:4e:b7:08:2d:4a:0e:bb:a6:31:
09:5e:2e:e0:27:7e:f0:23:59:7f:85:07:19:bf:d5:d7:0d:03:
3b:51:38:10:1a:27:72:dc:97:60:94:30:55:2e:d0:5a:c6:62:
33:ad:2a:f4:c8:4c:83:48:d3:e6:00:74:99:97:ae:91:a6:55:
d2:78:51:70:09:4b:ea:78:0f:1c:f6:e8:e0:ff:49:9a:69:30:
7f:9d:a3:de:2c:c8:42:53:48:98:d3:c7:a1:10:60:68:11:35:
29:74:62:1c:1e:0c:3f:79:61:5f:b3:7b:bd:a6:80:95:3d:f6:
73:6a:28:33:51:90:8e:09:36:72:ae:c9:e1:8b:2f:96:33:72:
6a:fc:96:55:e2:8c:fb:83:d4:6d:ee:e7:e2:60:07:5d:61:e1:
da:41:6f:4f:96:ec:67:ab:9e:88:ea:bb:93:b7:b7:65:53:75:
76:d7:2f:11:c7:1e:af:40:b7:f6:22:26:42:8e:32:d0:1e:fb:
40:22:80:0f:24:cf:b3:9c:53:5b:c8:5b:29:f2:79:06:c7:77:
8e:8f:9d:c1:e5:92:d1:68:d0:0f:8b:e5:ed:83:60:71:af:1d:
25:eb:0b:26:27:97:cf:87:11:e7:2a:ec:4f:bb:4e:54:93:a8:
fe:9f:17:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpMxVbcIh76A/p+gfYDwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwOTIzMTkwMTE4WhcNMjYwOTI0MTkwMTE4WjAzMTEwLwYDVQQD
Eyg5Yzc4ZGVlZjllOWFlYjdjZTdlOWQ4NjE0M2VmMmIwZDVhZWNjNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDNMRQGqfCBbjjyo5SEJ72tk8mCC
hzMu4s0Nurtpw1wSznSpRsSzO9wYhJlJmgEJcu0U7FGtt3x+ErOZCAww2OGiXyRV
KZPYYUdn11RuoKh5GHxKZvljkv2TTeRywea/wCHf1CoPqyYg7k9oXmCQ4ALzYPUA
/3MnFWBnsnmGWxLtsIuMcxG85hbxy233lc8ge6Nrev6B0+JBOGz2YNFujl4orRzf
YQijC7sXxSwQ5gJeyw92n9Mi01b/6AV9NR1jC88AuhUPtJjpIMJDNnpHbN7RESk/
8ISbtm0ca150JRrJQOx9XM2soRq7WsZz/4qCkCBLuG9Qf00eTlFvtJZcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx43u+emut85+nYYUPvKw1a7MY1MB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh9A4P0C
f3K+TrcILUoOu6YxCV4u4Cd+8CNZf4UHGb/V1w0DO1E4EBonctyXYJQwVS7QWsZi
M60q9MhMg0jT5gB0mZeukaZV0nhRcAlL6ngPHPbo4P9Jmmkwf52j3izIQlNImNPH
oRBgaBE1KXRiHB4MP3lhX7N7vaaAlT32c2ooM1GQjgk2cq7J4YsvljNyavyWVeKM
+4PUbe7n4mAHXWHh2kFvT5bsZ6ueiOq7k7e3ZVN1dtcvEccer0C39iImQo4y0B77
QCKADyTPs5xTW8hbKfJ5Bsd3jo+dweWS0WjQD4vl7YNgca8dJesLJieXz4cR5yrs
T7tOVJOo/p8XKQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:15 2026 by rpki-client