Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: JB5fozd0cTX6oOg20yblEiRdmXWhsCe1eSLUiwKcXdI=
Subject key identifier: CC:5A:B2:4E:68:0C:69:11:B4:9C:84:27:9E:EA:49:7F:01:12:8D:1D
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019E1D599B7E2F3E3B77C64615648BFF97EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 18:01:11 +0000
Manifest this update: Tue 12 May 2026 18:01:11 +0000
Manifest next update: Wed 13 May 2026 18:01:11 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: blbQY5myiKsfmNOwBqI17hkiUf64vgvKM/Ybaf9f2PQ=)
2: SdYBPf9hyZeCBZ0CXzRVluMGnGU.roa (hash: hgdsfyjTVsGnv4VajpzC0ZJUGOBghoLM7l+xd5EQZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9b:7e:2f:3e:3b:77:c6:46:15:64:8b:ff:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: May 12 18:01:11 2026 GMT
Not After : May 13 18:01:11 2026 GMT
Subject: CN=cc5ab24e680c6911b49c84279eea497f01128d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:3d:31:5d:97:13:bf:63:68:f6:f0:a9:aa:
3e:87:46:be:d2:f8:af:21:29:91:9d:cf:9e:8a:c0:
7e:fb:b8:9b:d1:f3:8d:c5:ad:fb:63:c1:a0:99:21:
10:ff:ed:ac:21:f3:53:54:4a:de:94:81:eb:52:34:
9d:71:bb:22:5a:b1:c0:ea:fc:94:14:de:1b:b9:ea:
13:9d:70:c9:e1:3e:30:23:fc:23:a3:cc:c2:7a:86:
db:f4:eb:e8:19:5a:ae:5f:e2:c5:8e:08:7e:b8:6c:
35:bc:f2:a4:84:2c:1f:f0:7d:5c:ff:4a:9a:15:31:
83:bd:67:3f:8b:ef:b9:01:a9:46:08:c6:9a:f4:e1:
cd:26:77:0a:35:c4:1c:61:66:52:22:9a:e4:ea:71:
ce:16:8b:be:4d:df:14:65:0a:d0:df:e1:1d:22:c6:
12:7f:66:10:38:36:88:32:83:f8:b9:1e:27:d8:7b:
cf:fc:5c:36:6b:a3:99:a3:29:ce:31:d4:f8:e4:f8:
19:c5:c7:bd:21:b5:36:57:25:75:da:37:c1:c8:14:
fc:09:13:c0:1e:0e:c1:50:02:43:72:51:bd:70:94:
94:7e:e1:41:ab:21:f0:59:5e:91:55:5e:d6:24:1c:
8e:91:1d:aa:9d:bd:79:4f:f3:c9:24:35:42:dc:26:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:B2:4E:68:0C:69:11:B4:9C:84:27:9E:EA:49:7F:01:12:8D:1D
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:24:1b:8f:d4:7e:b3:5f:51:b8:45:d2:ae:3d:2e:7d:46:6f:
ed:5e:a5:bd:78:da:2b:ad:52:76:af:4d:4a:86:72:b2:2d:c1:
db:23:34:b6:0a:1d:de:01:29:f1:15:de:1a:b1:e7:0f:45:bc:
69:2f:fb:9d:0f:ad:19:ab:fa:4a:46:9b:72:1c:0c:4a:fe:92:
a7:99:71:10:08:90:b3:dc:3a:92:db:1e:a5:37:87:82:2a:13:
00:85:fd:9b:84:59:90:89:01:e3:4c:a4:18:ba:a4:69:24:67:
cc:5b:26:b8:c0:c0:0a:47:df:a8:3b:38:81:c7:84:86:e9:e4:
2f:ef:27:9e:fb:f9:02:31:14:5e:9d:88:cd:a0:35:fa:c1:e4:
3d:85:0e:b6:e4:63:b9:f0:cd:05:6f:c7:96:1b:68:9f:54:62:
96:b5:f0:d1:be:df:0e:95:a0:14:f1:27:d7:65:ad:40:16:d1:
8b:7e:c5:bf:cb:f2:99:ae:fe:7f:8d:0a:10:68:9e:99:73:b3:
ef:20:57:61:44:03:dc:70:29:f6:66:0f:43:a3:45:47:89:26:
49:b8:e8:d7:5a:ef:c5:8e:55:b9:0f:6d:ee:f0:39:14:19:db:
39:6e:d3:d9:27:45:86:76:9f:3f:7f:a8:3f:15:83:cc:8e:56:
57:73:8e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWZt+Lz47d8ZGFWSL/5frMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk
ODIwNGUwHhcNMjYwNTEyMTgwMTExWhcNMjYwNTEzMTgwMTExWjAzMTEwLwYDVQQD
EyhjYzVhYjI0ZTY4MGM2OTExYjQ5Yzg0Mjc5ZWVhNDk3ZjAxMTI4ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhU9MV2XE79jaPbwqao+h0a+0viv
ISmRnc+eisB++7ib0fONxa37Y8GgmSEQ/+2sIfNTVErelIHrUjSdcbsiWrHA6vyU
FN4bueoTnXDJ4T4wI/wjo8zCeobb9OvoGVquX+LFjgh+uGw1vPKkhCwf8H1c/0qa
FTGDvWc/i++5AalGCMaa9OHNJncKNcQcYWZSIprk6nHOFou+Td8UZQrQ3+EdIsYS
f2YQODaIMoP4uR4n2HvP/Fw2a6OZoynOMdT45PgZxce9IbU2VyV12jfByBT8CRPA
Hg7BUAJDclG9cJSUfuFBqyHwWV6RVV7WJByOkR2qnb15T/PJJDVC3CaSawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxask5oDGkRtJyEJ57qSX8BEo0dMB8GA1UdIwQY
MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct
ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx
LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiQbj9R+
s19RuEXSrj0ufUZv7V6lvXjaK61Sdq9NSoZysi3B2yM0tgod3gEp8RXeGrHnD0W8
aS/7nQ+tGav6SkabchwMSv6Sp5lxEAiQs9w6ktsepTeHgioTAIX9m4RZkIkB40yk
GLqkaSRnzFsmuMDACkffqDs4gceEhunkL+8nnvv5AjEUXp2IzaA1+sHkPYUOtuRj
ufDNBW/Hlhton1RilrXw0b7fDpWgFPEn12WtQBbRi37Fv8vyma7+f40KEGiemXOz
7yBXYUQD3HAp9mYPQ6NFR4kmSbjo11rvxY5VuQ9t7vA5FBnbOW7T2SdFhnafP3+o
PxWDzI5WV3OO7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:26 2026 by rpki-client