Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: +FbOp03ncrJd8X4xnNspwubBC9+xqQo3iRwjW/Dt84k=
Subject key identifier: 9F:8F:A6:8D:E0:EA:50:6A:05:F0:7E:C6:92:FD:6C:A4:4C:C5:82:7C
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 01A0DF8680744081852C27642D5AF7456F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 088F
Signing time: Sat 26 Sep 2026 21:02:08 +0000
Manifest this update: Sat 26 Sep 2026 21:02:08 +0000
Manifest next update: Sun 27 Sep 2026 21:02:08 +0000
Files and hashes: 1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: ez/QN2uU10KZtgCEkEnS1JJfTbWEtrHS/covsBU6KXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:80:74:40:81:85:2c:27:64:2d:5a:f7:45:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Sep 26 21:02:08 2026 GMT
Not After : Sep 27 21:02:08 2026 GMT
Subject: CN=9f8fa68de0ea506a05f07ec692fd6ca44cc5827c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:5e:2b:9e:e3:bd:a8:38:f8:96:40:09:ca:
0b:20:b5:a5:db:58:47:c9:fa:3d:ac:c3:af:33:06:
ec:1e:03:c7:36:5f:c0:ad:78:72:ef:92:2a:5d:47:
40:f5:82:32:69:47:83:3d:1f:1e:1a:bf:e8:b3:72:
01:c7:96:97:32:f7:fb:0c:cb:28:9a:2c:7f:dd:5d:
fa:61:a8:23:38:08:74:55:8b:29:f5:05:9e:98:62:
45:77:ac:b6:9b:2d:15:3c:05:f3:5d:56:da:53:03:
14:75:57:86:be:fc:5e:95:0c:38:a0:3c:a3:77:2e:
32:4d:ac:3e:d2:91:b5:69:f7:90:8b:3e:56:89:08:
17:3b:13:cd:51:e3:e3:e1:97:b4:c6:79:52:d4:b4:
27:92:c6:52:9b:26:48:f4:e2:54:d5:b7:96:c7:6d:
bd:85:e0:f5:13:3a:6a:99:e3:0f:8a:d5:8b:91:22:
b7:d8:1c:a9:6e:0b:35:46:99:e4:6a:d5:e2:7b:e6:
9a:00:32:fc:a0:93:44:4e:55:1b:ae:bf:97:c9:e2:
64:37:73:0c:93:85:fd:18:10:99:fd:a9:79:83:9e:
68:1c:b0:72:70:81:24:42:94:50:7a:e2:ad:08:de:
a6:b7:32:ec:17:51:dc:06:9a:ad:fc:02:06:63:2a:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:A6:8D:E0:EA:50:6A:05:F0:7E:C6:92:FD:6C:A4:4C:C5:82:7C
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:31:41:12:9d:ac:f3:3e:5f:38:1b:55:21:dc:85:11:38:
1f:be:e2:a9:c8:a5:93:4b:f3:4a:a7:b3:57:fc:fa:22:f7:4a:
d8:d0:28:ad:71:a4:4e:a1:d4:30:c5:a4:b7:3a:f8:05:6e:ce:
5c:23:d9:50:08:89:3e:df:97:56:73:24:e8:6c:b8:7e:33:43:
0a:a3:7e:4d:44:f0:1a:7b:8b:12:de:8f:5c:d0:2f:1f:c2:f5:
32:e4:06:05:10:92:a2:44:a3:be:42:a1:13:cf:ee:e7:33:a3:
d2:f2:2c:02:8e:26:37:70:ea:6e:b9:81:dc:e7:9a:de:b4:73:
50:3d:c4:bf:82:50:19:75:b8:23:e6:eb:6a:8a:dd:92:27:44:
34:75:c8:c7:7c:17:73:ba:75:a0:e1:97:58:99:90:06:bd:07:
38:4f:ef:9c:22:db:9b:99:56:ad:a6:86:1f:ec:f7:3e:ed:56:
d6:bf:f2:4d:c1:05:b8:87:b8:1a:e6:f6:a4:d4:99:23:63:40:
f0:21:d2:bd:b3:83:d5:38:cf:1b:5e:61:b5:c1:cf:23:60:bf:
ad:12:9e:a4:e1:c8:75:8d:73:80:0c:3f:7e:20:a4:2e:e2:04:
80:3f:30:76:54:de:24:bd:a7:89:2f:8d:5c:e7:6b:f1:de:48:
93:a9:d7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhoB0QIGFLCdkLVr3RW8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj
NGUxY2EwHhcNMjYwOTI2MjEwMjA4WhcNMjYwOTI3MjEwMjA4WjAzMTEwLwYDVQQD
Eyg5ZjhmYTY4ZGUwZWE1MDZhMDVmMDdlYzY5MmZkNmNhNDRjYzU4MjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtideK57jvag4+JZACcoLILWl21hH
yfo9rMOvMwbsHgPHNl/ArXhy75IqXUdA9YIyaUeDPR8eGr/os3IBx5aXMvf7DMso
mix/3V36YagjOAh0VYsp9QWemGJFd6y2my0VPAXzXVbaUwMUdVeGvvxelQw4oDyj
dy4yTaw+0pG1afeQiz5WiQgXOxPNUePj4Ze0xnlS1LQnksZSmyZI9OJU1beWx229
heD1EzpqmeMPitWLkSK32Bypbgs1RpnkatXie+aaADL8oJNETlUbrr+XyeJkN3MM
k4X9GBCZ/al5g55oHLBycIEkQpRQeuKtCN6mtzLsF1HcBpqt/AIGYyqGdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+Ppo3g6lBqBfB+xpL9bKRMxYJ8MB8GA1UdIwQY
MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt
NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz
LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhAxQRKd
rPM+XzgbVSHchRE4H77iqcilk0vzSqezV/z6IvdK2NAorXGkTqHUMMWktzr4BW7O
XCPZUAiJPt+XVnMk6Gy4fjNDCqN+TUTwGnuLEt6PXNAvH8L1MuQGBRCSokSjvkKh
E8/u5zOj0vIsAo4mN3DqbrmB3Oea3rRzUD3Ev4JQGXW4I+braordkidENHXIx3wX
c7p1oOGXWJmQBr0HOE/vnCLbm5lWraaGH+z3Pu1W1r/yTcEFuIe4Gub2pNSZI2NA
8CHSvbOD1TjPG15htcHPI2C/rRKepOHIdY1zgAw/fiCkLuIEgD8wdlTeJL2niS+N
XOdr8d5Ik6nX3w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:25 2026 by rpki-client