Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: DoNxk+kAEeCtziG5hL2R94FoyNx7LQel8aBewpJARzM=
Subject key identifier: FD:F1:EE:50:B6:11:9B:52:11:66:49:3C:F8:2C:88:41:CA:5D:E7:06
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01A0D64BBF02FFD8A128D357ABF9C4D960CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1A85
Signing time: Fri 25 Sep 2026 02:01:23 +0000
Manifest this update: Fri 25 Sep 2026 02:01:23 +0000
Manifest next update: Sat 26 Sep 2026 02:01:23 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: lEz44Rvr1c2mCHS6kv2OI1gDXj8Y2GqzJ3YcmYqOofU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:bf:02:ff:d8:a1:28:d3:57:ab:f9:c4:d9:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Sep 25 02:01:23 2026 GMT
Not After : Sep 26 02:01:23 2026 GMT
Subject: CN=fdf1ee50b6119b521166493cf82c8841ca5de706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:08:06:ec:2b:cb:83:5a:c7:90:5e:0d:e9:
a4:7b:9d:92:11:f3:84:e7:1f:ef:db:2b:3d:37:ad:
1d:53:0d:97:5d:e0:b6:e2:55:b1:3c:6f:25:f0:9c:
73:ad:29:d0:16:fa:fd:a2:8a:6f:cf:fd:fe:e8:bd:
b5:83:28:f3:d8:a2:bc:2f:87:11:c6:3b:e7:bf:eb:
2b:c8:84:1f:3e:1e:3b:72:e3:4f:60:25:3c:ca:27:
6c:96:42:c0:9a:0f:17:4d:56:18:d7:d5:f4:39:1b:
95:03:5e:f9:84:70:98:23:b9:34:45:57:e7:95:79:
b5:38:f5:9d:bf:29:a0:de:28:4b:07:88:c6:48:91:
a2:ec:55:74:f1:d7:89:96:6f:96:72:9a:db:6f:4d:
f8:2f:82:46:92:ac:da:61:fb:fb:fa:5a:ca:10:75:
27:99:b9:b3:d0:7e:4c:14:7d:35:71:07:d7:a5:d1:
9c:ab:12:2f:06:f6:2c:be:a5:1e:02:1e:29:b9:7b:
79:12:6b:a8:0b:9b:06:c7:ce:8b:1e:57:ec:4a:5d:
81:53:de:0c:cc:5c:29:13:3a:12:db:69:bf:0d:85:
f9:d7:75:74:11:30:23:03:36:6a:10:2a:77:c4:8c:
82:f3:a8:8d:4c:bd:1e:4e:1c:3f:e2:71:5a:76:f1:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:EE:50:B6:11:9B:52:11:66:49:3C:F8:2C:88:41:CA:5D:E7:06
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:6b:4e:43:68:5b:51:23:92:2c:99:8d:30:f0:d1:00:17:
0d:71:0b:07:39:47:05:24:d6:e0:5b:30:ce:51:c9:a6:4f:f0:
96:a7:35:2c:5a:c6:cc:0a:1f:75:a1:c5:73:a5:43:7b:45:09:
35:83:b0:5f:f3:0f:68:48:cb:95:61:c1:c2:39:e7:58:3b:99:
09:06:fe:b9:bc:bc:31:b1:36:94:28:5c:91:ad:c3:2a:03:45:
b1:0c:4e:9f:ec:94:96:9b:ad:c2:1e:d3:60:63:0e:e6:b8:0b:
44:ed:ac:cd:04:2a:cf:21:d3:fc:e7:6c:ed:3c:7c:3b:6d:26:
45:13:24:03:4b:7f:40:c8:7e:73:df:7c:75:11:88:20:ae:58:
f0:3e:0a:82:ca:66:b4:15:3e:21:a3:9f:c3:44:ee:5f:fa:e3:
45:c5:3a:2f:fe:8f:5e:8e:45:ee:68:d2:3e:4b:73:bb:76:92:
ec:23:bc:61:02:17:54:70:c9:8d:c3:05:cb:e7:fb:aa:1c:ef:
51:f0:2a:eb:d3:05:41:5e:bd:fe:bb:7b:2f:f6:75:d6:4a:21:
ba:66:3e:6e:a5:cf:51:70:77:e7:49:aa:b2:28:94:19:fa:ab:
ca:fd:e6:3c:6b:d4:f1:78:07:06:63:64:0f:38:99:0d:e2:1a:
04:e0:01:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS78C/9ihKNNXq/nE2WDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjYwOTI1MDIwMTIzWhcNMjYwOTI2MDIwMTIzWjAzMTEwLwYDVQQD
EyhmZGYxZWU1MGI2MTE5YjUyMTE2NjQ5M2NmODJjODg0MWNhNWRlNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomYIBuwry4Nax5BeDemke52SEfOE
5x/v2ys9N60dUw2XXeC24lWxPG8l8JxzrSnQFvr9oopvz/3+6L21gyjz2KK8L4cR
xjvnv+sryIQfPh47cuNPYCU8yidslkLAmg8XTVYY19X0ORuVA175hHCYI7k0RVfn
lXm1OPWdvymg3ihLB4jGSJGi7FV08deJlm+Wcprbb034L4JGkqzaYfv7+lrKEHUn
mbmz0H5MFH01cQfXpdGcqxIvBvYsvqUeAh4puXt5EmuoC5sGx86LHlfsSl2BU94M
zFwpEzoS22m/DYX513V0ETAjAzZqECp3xIyC86iNTL0eThw/4nFadvEQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3x7lC2EZtSEWZJPPgsiEHKXecGMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizhrTkNo
W1EjkiyZjTDw0QAXDXELBzlHBSTW4FswzlHJpk/wlqc1LFrGzAofdaHFc6VDe0UJ
NYOwX/MPaEjLlWHBwjnnWDuZCQb+uby8MbE2lChcka3DKgNFsQxOn+yUlputwh7T
YGMO5rgLRO2szQQqzyHT/Ods7Tx8O20mRRMkA0t/QMh+c998dRGIIK5Y8D4Kgspm
tBU+IaOfw0TuX/rjRcU6L/6PXo5F7mjSPktzu3aS7CO8YQIXVHDJjcMFy+f7qhzv
UfAq69MFQV69/rt7L/Z11kohumY+bqXPUXB350mqsiiUGfqryv3mPGvU8XgHBmNk
DziZDeIaBOABqw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:08 2026 by rpki-client