Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: ATPk3Ne4/68b4rFSOXz6ZCDuLoAkNeZflIs1maG8c9Y=
Subject key identifier: 6B:90:36:F7:F3:00:BF:6D:9D:CC:E0:A2:B7:DE:0D:99:7E:68:82:78
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019D99D01FC8B2E0BAABD5BCCE4A2C2F6032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 045C
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 1IPrCNjzh3j1Qi/TUlGj2rdumVGSKeb8qakEZtGlf2I=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1f:c8:b2:e0:ba:ab:d5:bc:ce:4a:2c:2f:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=6b9036f7f300bf6d9dcce0a2b7de0d997e688278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:6c:0f:c2:9e:70:bf:a5:f5:15:b7:c9:f8:
ce:ed:b8:19:85:a2:47:74:e6:f5:94:ab:98:0e:51:
bc:07:14:3b:07:1b:e3:37:c2:85:34:67:e0:9a:86:
b3:81:e9:2e:a8:82:c2:91:bb:6c:fa:b3:f5:5c:aa:
86:cb:d7:a8:90:2d:6e:3e:eb:67:25:d6:8d:32:ad:
45:89:c7:52:40:ff:b0:ba:38:88:b0:2e:d3:f6:d0:
d5:e2:df:c6:e3:fc:cc:df:32:0c:17:05:cc:d1:b2:
72:e4:36:0c:d5:27:59:16:e3:6a:2d:d6:dd:ab:f4:
f1:4a:41:a2:23:ae:a7:a2:99:ca:19:c9:6a:c2:c1:
ac:53:84:e7:b0:0e:23:34:38:a6:ee:67:31:6f:87:
d3:d4:07:68:5d:0c:aa:00:e6:b3:a0:95:65:c4:1c:
2d:25:e6:c5:10:13:d2:4d:5d:e3:34:c3:6f:1c:9f:
dc:cd:56:43:46:9b:a6:b9:fc:c6:83:b5:60:23:f5:
8e:c6:58:cc:34:84:5e:ac:99:b5:5a:78:4e:75:0b:
bd:34:5f:ac:19:8d:c7:13:fe:fa:ff:fe:4a:89:c4:
52:73:f4:23:73:3a:9a:64:a8:ae:c3:e5:30:bd:a4:
b0:27:5b:9d:cf:d6:0d:0c:ee:d5:c2:26:22:c1:3d:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:36:F7:F3:00:BF:6D:9D:CC:E0:A2:B7:DE:0D:99:7E:68:82:78
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:d1:88:ad:bb:b7:e9:c8:cb:a1:0f:cc:46:06:68:15:53:
3e:cf:0a:20:7b:38:f4:12:37:f6:bb:9e:9f:dc:3c:07:4d:f6:
77:95:52:99:e5:cb:ea:5d:98:86:3c:31:c6:c7:fb:85:0a:4d:
f2:c5:c4:03:da:ab:f0:b4:1f:21:2c:2c:2b:70:5e:bd:00:ab:
4c:0f:d8:47:27:43:34:af:a8:78:71:0c:43:17:b8:bc:b8:cd:
ec:62:42:e4:33:b2:b9:37:6c:1d:cc:78:45:81:80:13:ef:91:
4d:71:03:f1:d9:f3:3a:15:b9:7d:b5:cb:a4:35:e2:de:7c:9a:
3c:f5:45:56:71:7c:b3:71:a0:9f:de:2d:08:08:3e:c6:95:93:
da:01:9b:99:69:67:80:0e:00:64:1a:fb:52:f5:3d:73:35:95:
d3:21:6f:ba:63:56:24:5f:3a:f7:1b:ae:c0:45:f3:c2:63:1b:
7d:60:d9:ae:16:08:41:2e:b4:7c:79:1e:70:19:02:91:6c:bd:
83:a0:cc:49:2b:ba:b0:5d:3e:26:e7:f0:0a:60:cb:06:f6:c2:
13:2e:73:1a:91:c8:30:1b:2f:03:19:e9:ed:b7:16:3f:14:5b:
fa:f6:f4:59:f2:fb:67:e9:38:07:50:38:11:3f:1c:a3:d0:d5:
b0:8f:63:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0B/IsuC6q9W8zkosL2AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwNDE3MDUwMDQ2WhcNMjYwNDE4MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg2YjkwMzZmN2YzMDBiZjZkOWRjY2UwYTJiN2RlMGQ5OTdlNjg4Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9sD8KecL+l9RW3yfjO7bgZhaJH
dOb1lKuYDlG8BxQ7BxvjN8KFNGfgmoazgekuqILCkbts+rP1XKqGy9eokC1uPutn
JdaNMq1FicdSQP+wujiIsC7T9tDV4t/G4/zM3zIMFwXM0bJy5DYM1SdZFuNqLdbd
q/TxSkGiI66nopnKGclqwsGsU4TnsA4jNDim7mcxb4fT1AdoXQyqAOazoJVlxBwt
JebFEBPSTV3jNMNvHJ/czVZDRpumufzGg7VgI/WOxljMNIRerJm1WnhOdQu9NF+s
GY3HE/76//5KicRSc/QjczqaZKiuw+UwvaSwJ1udz9YNDO7VwiYiwT1AewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuQNvfzAL9tnczgorfeDZl+aIJ4MB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrTRiK27
t+nIy6EPzEYGaBVTPs8KIHs49BI39ruen9w8B032d5VSmeXL6l2Yhjwxxsf7hQpN
8sXEA9qr8LQfISwsK3BevQCrTA/YRydDNK+oeHEMQxe4vLjN7GJC5DOyuTdsHcx4
RYGAE++RTXED8dnzOhW5fbXLpDXi3nyaPPVFVnF8s3Ggn94tCAg+xpWT2gGbmWln
gA4AZBr7UvU9czWV0yFvumNWJF869xuuwEXzwmMbfWDZrhYIQS60fHkecBkCkWy9
g6DMSSu6sF0+JufwCmDLBvbCEy5zGpHIMBsvAxnp7bcWPxRb+vb0WfL7Z+k4B1A4
ET8co9DVsI9jjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:51 2026 by rpki-client