Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: gx90xfbVxFfCc1trDZuCs6+8eWIQqBwVR53lsHjvxFM=
Subject key identifier: 2A:1E:93:BF:A9:AD:B1:37:7C:CA:1B:BA:37:D2:EF:DE:DD:8C:EA:F9
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 01A0D1933EF1F2D2D762DF59F6B8945DE28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 050B
Signing time: Thu 24 Sep 2026 04:01:22 +0000
Manifest this update: Thu 24 Sep 2026 04:01:22 +0000
Manifest next update: Fri 25 Sep 2026 04:01:22 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: 3TblST6S6jM/xMi/7AYq1Gy6Shxc0hHN3ZKxAB/dWdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:3e:f1:f2:d2:d7:62:df:59:f6:b8:94:5d:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Sep 24 04:01:22 2026 GMT
Not After : Sep 25 04:01:22 2026 GMT
Subject: CN=2a1e93bfa9adb1377cca1bba37d2efdedd8ceaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:0b:3f:5f:2c:04:3b:4c:67:ad:fe:27:b8:
bd:05:af:01:ce:d0:a5:a6:b1:21:0c:5b:bf:cb:c2:
e8:6b:76:fc:3d:e0:62:60:30:d3:44:80:e9:c3:12:
a6:92:36:c5:d2:e2:aa:c7:64:b7:91:71:c5:cd:9d:
c1:ab:46:3c:2d:e4:b6:89:87:bd:54:80:e3:c5:81:
e6:6b:90:8e:ec:57:db:12:f2:17:9d:38:c3:ab:3e:
f7:2c:bd:ce:e3:a8:16:2c:1e:48:0f:fb:5e:3d:28:
31:5c:22:24:24:76:63:15:e4:e0:fb:94:e5:fb:e0:
15:2f:0e:f5:7c:ca:e2:bf:25:7c:6c:a1:c8:4c:47:
2e:b8:35:7e:29:f9:4d:e6:40:a4:80:98:ea:30:40:
0e:e1:66:a1:3a:2f:3c:35:9a:0a:da:61:68:1a:ca:
a7:c6:97:83:40:66:23:ef:9b:0c:26:2b:4b:2a:68:
aa:1a:7a:79:3b:30:4b:30:bf:4a:10:af:33:01:16:
3b:dd:5d:37:f6:5c:e4:cc:05:28:03:e8:ea:a0:03:
7b:fb:c3:0f:8f:13:02:4d:d8:7e:25:4c:7e:f5:7c:
82:c8:17:a7:0f:0b:b2:94:5a:89:c6:04:75:57:80:
35:1f:97:e8:4b:b1:57:cf:4b:a1:cb:3a:34:9a:ca:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:93:BF:A9:AD:B1:37:7C:CA:1B:BA:37:D2:EF:DE:DD:8C:EA:F9
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d5:c4:36:9a:59:22:0f:46:be:e1:c2:01:ff:ca:fd:42:08:
6d:2e:14:3d:26:9e:41:6c:a8:3a:15:3f:48:24:21:45:c5:50:
a6:29:09:a8:aa:71:e7:88:2a:fc:78:8c:80:2f:fd:5d:ab:12:
62:42:14:37:75:90:59:91:7c:2d:1b:04:1e:a2:59:25:30:9e:
36:8b:a0:5e:6a:4c:65:72:00:84:4f:68:66:a1:bf:40:8c:2a:
25:11:61:79:32:2b:f1:ea:1d:e8:62:2a:52:df:90:58:41:c6:
ec:6c:00:98:c1:42:13:f3:3e:b8:58:bf:e5:ff:35:6a:49:78:
dc:e9:92:88:ac:62:4b:07:8e:7f:f3:3b:b2:6f:78:76:65:ec:
69:35:36:50:30:27:40:68:b8:e9:d0:42:1e:90:46:d6:a5:0d:
01:8f:f7:5e:22:bd:10:aa:d0:f1:51:31:86:55:19:ea:89:13:
ea:1a:aa:6f:fb:76:d7:68:bc:96:d7:3f:ee:ba:79:69:e1:fb:
4a:ec:d5:3c:55:e6:5d:43:2a:44:44:bf:6c:9a:6d:7c:c4:db:
99:71:31:c6:13:03:d4:e2:be:8c:b1:61:9d:d0:8f:d0:c3:f8:
66:1c:ed:44:94:4d:7a:c4:34:e9:f8:34:75:7e:fb:ae:e1:25:
98:ff:d9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkz7x8tLXYt9Z9riUXeKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4
MTA3ZjYwHhcNMjYwOTI0MDQwMTIyWhcNMjYwOTI1MDQwMTIyWjAzMTEwLwYDVQQD
EygyYTFlOTNiZmE5YWRiMTM3N2NjYTFiYmEzN2QyZWZkZWRkOGNlYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwscLP18sBDtMZ63+J7i9Ba8BztCl
prEhDFu/y8Loa3b8PeBiYDDTRIDpwxKmkjbF0uKqx2S3kXHFzZ3Bq0Y8LeS2iYe9
VIDjxYHma5CO7FfbEvIXnTjDqz73LL3O46gWLB5ID/tePSgxXCIkJHZjFeTg+5Tl
++AVLw71fMrivyV8bKHITEcuuDV+KflN5kCkgJjqMEAO4WahOi88NZoK2mFoGsqn
xpeDQGYj75sMJitLKmiqGnp5OzBLML9KEK8zARY73V039lzkzAUoA+jqoAN7+8MP
jxMCTdh+JUx+9XyCyBenDwuylFqJxgR1V4A1H5foS7FXz0uhyzo0msrbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoek7+prbE3fMobujfS797djOr5MB8GA1UdIwQY
MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt
MjZjNjdjZDAxMjhjLzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj
LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActXENppZ
Ig9GvuHCAf/K/UIIbS4UPSaeQWyoOhU/SCQhRcVQpikJqKpx54gq/HiMgC/9XasS
YkIUN3WQWZF8LRsEHqJZJTCeNougXmpMZXIAhE9oZqG/QIwqJRFheTIr8eod6GIq
Ut+QWEHG7GwAmMFCE/M+uFi/5f81akl43OmSiKxiSweOf/M7sm94dmXsaTU2UDAn
QGi46dBCHpBG1qUNAY/3XiK9EKrQ8VExhlUZ6okT6hqqb/t212i8ltc/7rp5aeH7
SuzVPFXmXUMqRES/bJptfMTbmXExxhMD1OK+jLFhndCP0MP4ZhztRJRNesQ06fg0
dX77ruElmP/ZUg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:52:49 2026 by rpki-client