Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: FcRvbENuRSX+MxWNlsDnXAQwdDsMJNIHDG2Z1hGlwZE=
Subject key identifier: CA:98:6F:1C:29:6F:C6:0E:E3:82:4A:45:10:B5:DB:11:14:14:08:3B
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019F90FF3F9995C0A3E553BC39AD1ECC85BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 063A
Signing time: Thu 23 Jul 2026 22:01:14 +0000
Manifest this update: Thu 23 Jul 2026 22:01:14 +0000
Manifest next update: Fri 24 Jul 2026 22:01:14 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: R7A+Nz4kdQmQH0HyEPPmXvnvv42fWyfeAcxYZbOQXWM=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:3f:99:95:c0:a3:e5:53:bc:39:ad:1e:cc:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jul 23 22:01:14 2026 GMT
Not After : Jul 24 22:01:14 2026 GMT
Subject: CN=ca986f1c296fc60ee3824a4510b5db111414083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ee:a7:66:2c:cc:4d:2e:4b:49:79:09:d2:13:
1c:86:9b:8c:9d:c1:be:d9:25:26:ba:d9:94:91:e8:
da:67:1c:05:03:c1:56:40:06:20:c5:c1:39:21:11:
1f:84:16:91:62:3d:07:c2:91:ce:28:bd:e1:31:2f:
11:6f:3e:b8:a4:f2:bc:54:97:8f:d0:1d:5e:cb:2d:
f7:d2:65:dc:f4:6c:18:c7:08:f7:21:26:a9:a2:ac:
b2:d3:f9:2e:e0:61:62:ea:af:3a:a2:3c:fc:b1:8f:
10:6a:b3:2b:34:88:25:6d:99:48:9f:6d:d6:a1:b9:
af:e7:d3:f2:1c:51:de:d4:cc:8b:1e:bf:07:b1:f6:
5e:7f:e4:dd:a3:c2:49:08:1e:d9:ca:90:30:fa:12:
64:fe:c0:70:95:7a:76:f1:ba:c9:59:1f:d7:7f:67:
a6:86:17:2d:39:b6:67:c7:09:f7:20:ab:88:29:90:
02:8d:e6:98:58:6b:de:30:11:5d:0a:c4:53:6f:0d:
6e:5b:32:b4:3d:14:38:88:a1:41:40:92:ff:cf:6f:
55:96:16:02:26:da:e8:f8:d2:79:b5:f4:bd:82:b0:
cc:ca:c4:b7:e0:32:72:d9:f5:ea:fb:e0:e2:c9:5c:
34:d0:02:5d:f1:bc:2c:25:92:49:62:3f:45:62:17:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:6F:1C:29:6F:C6:0E:E3:82:4A:45:10:B5:DB:11:14:14:08:3B
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:df:fd:1c:a4:32:0a:aa:a1:e4:f0:03:57:e7:8d:f4:5e:65:
f8:de:62:80:a8:77:c5:a0:eb:72:4c:00:7a:ec:8b:be:ce:62:
2d:1d:87:96:e6:23:a4:c2:50:04:6d:29:bc:aa:41:9c:ed:d4:
59:2f:05:28:68:ac:a2:f0:d5:ca:e0:8d:a7:0f:0d:e5:9a:b2:
de:15:2b:a4:0b:98:0a:86:de:a1:9e:51:92:05:ea:f1:e2:30:
1c:94:3d:24:c0:11:cd:87:94:56:c2:4b:08:85:a2:37:0e:c5:
f7:fc:65:60:f6:be:33:fc:b7:dd:53:4b:cb:18:b9:b7:85:eb:
53:e2:3a:97:80:7e:fa:22:75:b3:07:31:ea:20:08:4c:f9:9c:
ad:4a:a2:f2:48:ee:ea:46:8d:4e:f4:d3:39:a2:fd:57:ef:0a:
55:30:f3:31:dd:74:24:32:07:c3:6f:e2:92:63:8e:43:d1:6d:
fb:df:6d:91:e2:27:6f:ec:86:c5:f7:4a:f9:75:26:a7:6b:29:
30:b1:19:6e:ab:83:13:ad:de:fe:c8:78:1f:46:59:a9:b1:2b:
89:2f:2d:68:94:4e:e8:ec:c4:da:ea:03:03:ee:f7:dc:77:80:
fe:d5:6b:d3:15:f5:df:1b:a0:61:37:46:43:47:94:a4:4b:cd:
83:cb:2e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/z+ZlcCj5VO8Oa0ezIW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwNzIzMjIwMTE0WhcNMjYwNzI0MjIwMTE0WjAzMTEwLwYDVQQD
EyhjYTk4NmYxYzI5NmZjNjBlZTM4MjRhNDUxMGI1ZGIxMTE0MTQwODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+6nZizMTS5LSXkJ0hMchpuMncG+
2SUmutmUkejaZxwFA8FWQAYgxcE5IREfhBaRYj0HwpHOKL3hMS8Rbz64pPK8VJeP
0B1eyy330mXc9GwYxwj3ISapoqyy0/ku4GFi6q86ojz8sY8QarMrNIglbZlIn23W
obmv59PyHFHe1MyLHr8HsfZef+Tdo8JJCB7ZypAw+hJk/sBwlXp28brJWR/Xf2em
hhctObZnxwn3IKuIKZACjeaYWGveMBFdCsRTbw1uWzK0PRQ4iKFBQJL/z29VlhYC
Jtro+NJ5tfS9grDMysS34DJy2fXq++DiyVw00AJd8bwsJZJJYj9FYhe8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqYbxwpb8YO44JKRRC12xEUFAg7MB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht/9HKQy
Cqqh5PADV+eN9F5l+N5igKh3xaDrckwAeuyLvs5iLR2HluYjpMJQBG0pvKpBnO3U
WS8FKGisovDVyuCNpw8N5Zqy3hUrpAuYCobeoZ5RkgXq8eIwHJQ9JMARzYeUVsJL
CIWiNw7F9/xlYPa+M/y33VNLyxi5t4XrU+I6l4B++iJ1swcx6iAITPmcrUqi8kju
6kaNTvTTOaL9V+8KVTDzMd10JDIHw2/ikmOOQ9Ft+99tkeInb+yGxfdK+XUmp2sp
MLEZbquDE63e/sh4H0ZZqbEriS8taJRO6OzE2uoDA+733HeA/tVr0xX13xugYTdG
Q0eUpEvNg8suxg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:50 2026 by rpki-client