Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: oluPs1CFK0fqHgze0W/S+si4WqIzkexwVMWs2bUYIFY=
Subject key identifier: 65:7C:0E:DE:14:78:B1:9D:6A:42:FB:1D:CE:79:50:2B:4F:E7:D4:F7
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 01A0D049509031CC3F30468CEA5322C89C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 22:01:00 +0000
Manifest this update: Wed 23 Sep 2026 22:01:00 +0000
Manifest next update: Thu 24 Sep 2026 22:01:00 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: oCWHZxHLMXz5E2uGf01NL8rteCSC5bslbSlsMg1HsGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:50:90:31:cc:3f:30:46:8c:ea:53:22:c8:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Sep 23 22:01:00 2026 GMT
Not After : Sep 24 22:01:00 2026 GMT
Subject: CN=657c0ede1478b19d6a42fb1dce79502b4fe7d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:78:96:f6:5d:11:f7:f7:50:74:b0:ff:ed:
84:c4:9c:7c:08:99:64:cc:03:80:4c:4c:cb:f0:61:
e6:0f:48:32:a3:e1:98:92:f5:81:16:91:db:9f:49:
60:7d:32:4e:eb:97:b3:33:9b:2f:ce:7c:d2:0f:1f:
79:4b:f6:fa:ce:37:cb:57:ac:61:41:b0:d8:a8:9f:
93:22:e2:f4:90:dc:b4:81:ab:12:14:cf:e8:21:5d:
e7:90:5b:a5:09:92:7d:73:36:db:43:a2:b4:66:24:
82:3b:98:eb:4e:97:ec:34:34:97:e6:8b:91:e1:59:
f9:2e:51:9f:f8:15:40:97:dc:c5:be:93:62:70:84:
76:6c:55:27:48:af:1c:77:d8:18:62:12:bb:16:b9:
c3:af:79:17:a9:e4:43:1d:7a:f9:fe:d3:f6:b1:10:
bc:0a:e3:c8:78:5b:f3:b0:e5:47:bb:00:ed:be:b5:
50:d3:6c:ba:74:c8:87:d5:8f:24:9d:bc:ca:b5:ca:
d4:a1:0c:1f:75:79:35:a3:7c:0d:b8:00:b9:21:07:
4f:7d:c0:04:e4:09:f5:4d:45:d9:7a:bb:df:9c:75:
29:ad:2b:a1:2d:53:44:49:fe:93:28:d7:ab:56:b6:
7a:e5:30:bc:f1:71:a5:2b:4a:0a:84:2e:fe:13:53:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:0E:DE:14:78:B1:9D:6A:42:FB:1D:CE:79:50:2B:4F:E7:D4:F7
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:54:2d:00:73:ed:31:6a:75:3a:38:2e:11:b3:53:5d:22:
2a:59:4b:ed:04:6c:f6:e6:d4:1f:a6:38:0a:29:b3:4c:58:ec:
dc:5a:d3:73:00:ae:46:b1:85:71:8f:75:1c:f9:ec:20:48:ce:
03:4a:97:e3:b4:c4:1a:c1:5b:2c:65:ea:f4:9d:bf:78:53:fb:
b4:9b:cc:1e:4f:86:4f:1c:0e:46:9d:ff:2d:7c:23:fe:69:fc:
be:f2:81:a3:ca:ce:ab:c7:01:bf:d3:85:e7:9e:85:54:e3:56:
4e:eb:9e:fd:fe:e7:13:e9:1b:5e:1b:21:f9:d2:2e:0e:b4:84:
43:10:2b:9e:54:c8:c4:e6:87:98:75:16:39:1f:c9:63:f7:2c:
a4:5f:44:d2:b7:86:cc:20:cf:fd:25:41:4e:79:85:9e:7e:e0:
3e:ac:58:14:27:80:ef:95:43:a8:f7:d5:90:0f:b8:ad:26:58:
84:53:92:b2:cc:07:be:eb:2a:09:76:0c:b1:19:a2:12:42:82:
29:a7:36:b8:b1:91:f7:e2:44:c1:05:5d:43:a4:77:1e:0b:f0:
9f:d7:10:0a:9e:c2:50:e4:7e:8f:24:76:24:6a:ad:fa:2f:6c:
98:1e:07:26:ca:0b:5b:6e:f9:3b:ff:ec:de:23:4b:9f:03:f0:
ad:42:cc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSVCQMcw/MEaM6lMiyJycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh
MGUxYzMwHhcNMjYwOTIzMjIwMTAwWhcNMjYwOTI0MjIwMTAwWjAzMTEwLwYDVQQD
Eyg2NTdjMGVkZTE0NzhiMTlkNmE0MmZiMWRjZTc5NTAyYjRmZTdkNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUF4lvZdEff3UHSw/+2ExJx8CJlk
zAOATEzL8GHmD0gyo+GYkvWBFpHbn0lgfTJO65ezM5svznzSDx95S/b6zjfLV6xh
QbDYqJ+TIuL0kNy0gasSFM/oIV3nkFulCZJ9czbbQ6K0ZiSCO5jrTpfsNDSX5ouR
4Vn5LlGf+BVAl9zFvpNicIR2bFUnSK8cd9gYYhK7FrnDr3kXqeRDHXr5/tP2sRC8
CuPIeFvzsOVHuwDtvrVQ02y6dMiH1Y8knbzKtcrUoQwfdXk1o3wNuAC5IQdPfcAE
5An1TUXZervfnHUprSuhLVNESf6TKNerVrZ65TC88XGlK0oKhC7+E1PrRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGV8Dt4UeLGdakL7Hc55UCtP59T3MB8GA1UdIwQY
MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct
MzhhYmZhNGZhMzUwLzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw
LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9FULQBz
7TFqdTo4LhGzU10iKllL7QRs9ubUH6Y4CimzTFjs3FrTcwCuRrGFcY91HPnsIEjO
A0qX47TEGsFbLGXq9J2/eFP7tJvMHk+GTxwORp3/LXwj/mn8vvKBo8rOq8cBv9OF
556FVONWTuue/f7nE+kbXhsh+dIuDrSEQxArnlTIxOaHmHUWOR/JY/cspF9E0reG
zCDP/SVBTnmFnn7gPqxYFCeA75VDqPfVkA+4rSZYhFOSsswHvusqCXYMsRmiEkKC
Kac2uLGR9+JEwQVdQ6R3Hgvwn9cQCp7CUOR+jyR2JGqt+i9smB4HJsoLW275O//s
3iNLnwPwrULM5w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:25:16 2026 by rpki-client