Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: Q/rugRPS94Hk0aQOThBZNMHVehMCtITGhd02oSLYdIg=
Subject key identifier: 23:6F:A0:EE:B5:93:8A:BD:13:6C:26:81:A7:E4:B9:2E:A9:7A:9B:B5
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01A1C5C3DB70B5279A4A7793AB9C0CB92AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 199A
Signing time: Tue 10 Nov 2026 14:01:49 +0000
Manifest this update: Tue 10 Nov 2026 14:01:49 +0000
Manifest next update: Wed 11 Nov 2026 14:01:49 +0000
Files and hashes: 1: hgn08PimsrWhvpoX16kXfvpSb7U.roa (hash: z6P+N5BBtGAav4rQufZ9KNXAIEzzPEx65KbiTa8r9mk=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: uM7QwCpFY3XaZ3hAuRdAoUs7UoIlPOm3cQTRwGLH28I=)
3: xaaUcdShLftvURcWzuknVIrUAWE.asa (hash: yA9XLFOfnkqbEW4VyXQOYp042d83TYSUlS9do68R1XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:c3:db:70:b5:27:9a:4a:77:93:ab:9c:0c:b9:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Nov 10 14:01:49 2026 GMT
Not After : Nov 11 14:01:49 2026 GMT
Subject: CN=236fa0eeb5938abd136c2681a7e4b92ea97a9bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:07:f4:3e:fe:a1:41:d7:1a:7c:04:63:c8:
2a:b8:c5:34:01:56:30:2a:be:59:98:cd:ba:c1:8f:
86:cf:e6:c8:bb:fe:e5:a2:0d:63:89:15:73:1e:71:
26:b2:37:78:98:8a:cd:dd:4f:1e:b4:66:e6:49:26:
50:c5:06:12:f6:ee:6d:1d:9f:dc:59:c7:b0:cf:4f:
46:42:99:ad:2c:92:be:2d:99:26:7c:02:5d:07:96:
2a:f0:8a:d3:7a:cd:51:0f:63:ec:5e:8c:ef:fe:3f:
da:ac:97:d7:6e:b8:d4:f9:bd:a1:e0:67:5f:fa:8a:
0d:24:ad:c0:b7:8b:cf:f4:f1:0e:69:a2:67:a5:ee:
e8:49:dd:3a:af:d2:36:ad:7e:d1:54:1c:b1:5f:61:
bf:34:fe:38:dc:20:90:de:28:5d:f3:89:ca:31:52:
a9:e3:b2:2d:4d:8e:a8:ca:e9:09:d4:33:9f:46:74:
e7:40:47:ce:1c:3e:12:a0:4d:0d:68:a4:62:c3:c5:
d1:4e:20:b7:79:a4:dd:95:d3:cd:d0:71:26:b6:fb:
c3:ee:70:7f:c3:49:16:27:02:94:a9:23:6e:9d:e6:
30:91:da:7b:59:18:23:e9:e9:af:2c:fd:9f:41:5d:
a6:d0:6d:2f:54:ba:fa:6e:37:da:18:b5:83:de:4a:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:A0:EE:B5:93:8A:BD:13:6C:26:81:A7:E4:B9:2E:A9:7A:9B:B5
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:e8:91:0e:eb:be:06:8c:82:06:06:75:3d:61:2c:ce:30:
b0:3f:45:1a:4c:bb:41:73:fb:24:5f:64:70:ca:5b:de:97:c6:
3b:f2:3c:82:3c:d7:89:3e:18:c7:ab:8d:6b:5d:79:3c:90:0f:
84:5c:62:ee:8d:f0:d8:69:bd:fe:fc:7b:98:a1:c8:7b:90:d7:
af:94:e1:e1:89:3d:cd:ab:9d:e9:03:92:e7:9f:67:f5:c5:10:
78:5f:5d:95:4b:9e:d4:37:2f:f2:48:e5:3a:c8:9e:1f:a0:ee:
46:f6:98:cd:61:59:de:76:bf:71:0d:58:2e:4d:64:ce:49:b0:
2e:a0:9c:cb:a4:6c:d7:48:5c:07:6d:e1:4e:d6:f8:aa:e3:c4:
dc:71:65:a9:95:07:c8:85:93:2f:18:c2:cc:22:98:6e:42:2a:
53:59:d5:4f:ed:95:56:38:89:c5:0b:9e:2f:d2:b5:69:9e:f9:
f4:3f:82:2e:70:1d:61:a5:39:6e:9b:99:00:eb:5b:38:97:88:
94:3c:f1:34:6d:1e:25:b6:fa:37:34:17:33:a3:1e:47:ed:2a:
7f:05:94:9f:7d:fd:f0:40:01:6b:54:bc:a7:c4:c1:e3:ff:25:
13:61:1d:18:96:2f:30:23:c4:1c:69:83:08:57:99:16:47:41:
48:a5:f6:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHFw9twtSeaSneTq5wMuSqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjYxMTEwMTQwMTQ5WhcNMjYxMTExMTQwMTQ5WjAzMTEwLwYDVQQD
EygyMzZmYTBlZWI1OTM4YWJkMTM2YzI2ODFhN2U0YjkyZWE5N2E5YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQIH9D7+oUHXGnwEY8gquMU0AVYw
Kr5ZmM26wY+Gz+bIu/7log1jiRVzHnEmsjd4mIrN3U8etGbmSSZQxQYS9u5tHZ/c
Wcewz09GQpmtLJK+LZkmfAJdB5Yq8IrTes1RD2PsXozv/j/arJfXbrjU+b2h4Gdf
+ooNJK3At4vP9PEOaaJnpe7oSd06r9I2rX7RVByxX2G/NP443CCQ3ihd84nKMVKp
47ItTY6oyukJ1DOfRnTnQEfOHD4SoE0NaKRiw8XRTiC3eaTdldPN0HEmtvvD7nB/
w0kWJwKUqSNuneYwkdp7WRgj6emvLP2fQV2m0G0vVLr6bjfaGLWD3kprQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNvoO61k4q9E2wmgafkuS6pepu1MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1zokQ7r
vgaMggYGdT1hLM4wsD9FGky7QXP7JF9kcMpb3pfGO/I8gjzXiT4Yx6uNa115PJAP
hFxi7o3w2Gm9/vx7mKHIe5DXr5Th4Yk9zaud6QOS559n9cUQeF9dlUue1Dcv8kjl
OsieH6DuRvaYzWFZ3na/cQ1YLk1kzkmwLqCcy6Rs10hcB23hTtb4quPE3HFlqZUH
yIWTLxjCzCKYbkIqU1nVT+2VVjiJxQueL9K1aZ759D+CLnAdYaU5bpuZAOtbOJeI
lDzxNG0eJbb6NzQXM6MeR+0qfwWUn3398EABa1S8p8TB4/8lE2EdGJYvMCPEHGmD
CFeZFkdBSKX2YA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:40:00 2026 by rpki-client