Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: dTNHTTqX4m8+R1LLAv/lyDjm0uEbMGUliHfz10m6wqI=
Subject key identifier: 32:89:24:05:36:D6:C2:71:CF:20:68:28:4F:D7:48:28:DA:98:E6:7B
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019FAAF590E327FA309A4E7D6863A385D808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 056E
Signing time: Tue 28 Jul 2026 23:00:47 +0000
Manifest this update: Tue 28 Jul 2026 23:00:47 +0000
Manifest next update: Wed 29 Jul 2026 23:00:47 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: UFzbN0SdJkmJ/gc87mUPfzdypsSflU09F9dnKE24B+c=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:90:e3:27:fa:30:9a:4e:7d:68:63:a3:85:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jul 28 23:00:47 2026 GMT
Not After : Jul 29 23:00:47 2026 GMT
Subject: CN=3289240536d6c271cf2068284fd74828da98e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:b0:ac:ff:5a:8c:63:ba:df:05:e1:eb:c6:
cd:c9:93:fb:7a:f9:eb:9c:03:78:c1:01:a1:87:11:
0a:e6:de:ca:69:5f:92:51:12:39:3b:23:ac:a1:93:
5e:7b:a6:50:fc:49:fd:ed:fa:d3:a2:39:2e:00:19:
e1:44:48:6d:0d:9c:24:00:00:47:f4:12:18:61:85:
03:1a:1a:1c:cf:bb:37:b0:4f:01:85:8d:35:59:9f:
c7:d7:d1:67:08:bb:a0:df:50:d0:4c:ea:d2:5d:7e:
72:ad:1b:a7:78:fd:3e:47:19:02:97:f4:d7:be:c7:
5c:f7:b2:13:72:8b:49:0d:57:4d:45:a3:7b:33:a6:
1d:35:e4:a6:5b:ee:5a:0c:58:00:35:1e:e6:64:03:
39:4b:ed:6b:fc:2b:6c:d2:81:7b:f5:49:67:47:4a:
e2:92:2a:91:1d:88:a4:e7:43:ee:f0:ba:ac:5d:ce:
b9:1b:92:bd:01:d7:ca:e0:31:55:72:da:f7:1d:94:
69:a7:a3:34:65:15:71:eb:aa:40:d3:20:2b:6a:af:
07:ca:23:99:60:d1:92:85:a3:65:f6:78:48:0a:1e:
4b:cf:d6:38:eb:17:fb:c8:ab:cf:a4:58:14:a7:bb:
0a:f5:3e:57:1c:58:64:1d:51:d9:da:ad:6f:f6:36:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:24:05:36:D6:C2:71:CF:20:68:28:4F:D7:48:28:DA:98:E6:7B
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:45:5c:43:da:1e:17:1b:86:a6:fb:3a:81:79:02:c3:10:
92:a0:aa:fc:14:72:71:e6:e2:05:ce:6a:04:25:7f:42:ee:63:
bd:0d:74:e5:2a:3d:5b:81:1a:ce:d7:57:41:2d:49:fc:6f:8d:
49:b5:ba:38:e0:1f:54:20:5c:35:61:56:5b:70:d7:93:0d:93:
d0:99:e8:99:18:e7:db:33:65:48:d7:f9:e3:22:34:a3:25:00:
a8:25:3c:ee:5c:2f:a1:8f:7b:0e:55:6d:e8:87:5b:4b:8f:81:
a0:a2:9b:13:6d:3e:c0:93:b6:57:dd:b5:58:21:8a:c2:80:ef:
6d:8c:52:0a:64:9d:35:65:d7:8b:c2:85:ad:e1:02:6c:61:d6:
ea:7f:3f:26:e4:2e:eb:2f:1c:d2:56:9d:91:b2:55:a7:38:07:
67:fc:02:66:b5:85:5a:73:70:b0:42:b1:9e:90:6b:6a:4b:af:
d2:3a:ec:dc:c4:d6:56:4f:8e:9a:a9:56:56:53:b4:f6:5e:2f:
a1:12:0c:33:0b:64:d6:f5:4b:1e:bc:9b:fb:80:24:55:7a:ac:
6e:e1:06:1d:0b:11:5a:d7:12:6f:51:5a:24:2e:41:ff:1e:9e:
1c:40:35:5c:46:31:88:50:16:b6:ad:ab:27:f8:73:2d:83:c0:
d0:3f:c7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9ZDjJ/owmk59aGOjhdgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwNzI4MjMwMDQ3WhcNMjYwNzI5MjMwMDQ3WjAzMTEwLwYDVQQD
EygzMjg5MjQwNTM2ZDZjMjcxY2YyMDY4Mjg0ZmQ3NDgyOGRhOThlNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7uwrP9ajGO63wXh68bNyZP7evnr
nAN4wQGhhxEK5t7KaV+SURI5OyOsoZNee6ZQ/En97frTojkuABnhREhtDZwkAABH
9BIYYYUDGhocz7s3sE8BhY01WZ/H19FnCLug31DQTOrSXX5yrRuneP0+RxkCl/TX
vsdc97ITcotJDVdNRaN7M6YdNeSmW+5aDFgANR7mZAM5S+1r/Cts0oF79UlnR0ri
kiqRHYik50Pu8LqsXc65G5K9AdfK4DFVctr3HZRpp6M0ZRVx66pA0yAraq8HyiOZ
YNGShaNl9nhICh5Lz9Y46xf7yKvPpFgUp7sK9T5XHFhkHVHZ2q1v9jYSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKJJAU21sJxzyBoKE/XSCjamOZ7MB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxtFXEPa
Hhcbhqb7OoF5AsMQkqCq/BRycebiBc5qBCV/Qu5jvQ105So9W4EaztdXQS1J/G+N
SbW6OOAfVCBcNWFWW3DXkw2T0JnomRjn2zNlSNf54yI0oyUAqCU87lwvoY97DlVt
6IdbS4+BoKKbE20+wJO2V921WCGKwoDvbYxSCmSdNWXXi8KFreECbGHW6n8/JuQu
6y8c0ladkbJVpzgHZ/wCZrWFWnNwsEKxnpBrakuv0jrs3MTWVk+OmqlWVlO09l4v
oRIMMwtk1vVLHryb+4AkVXqsbuEGHQsRWtcSb1FaJC5B/x6eHEA1XEYxiFAWtq2r
J/hzLYPA0D/HKg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:48 2026 by rpki-client