Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: 8eX1l6d9SgDOZdQpl7HlBf+lTyJA/iHA+WsvFUGGRZw=
Subject key identifier: AE:74:0D:3C:2B:28:E4:AB:B1:72:49:3D:90:CC:81:66:91:3D:49:97
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019FA82BB50D74CB6706CC8A977F44D6F1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 0646
Signing time: Tue 28 Jul 2026 10:01:04 +0000
Manifest this update: Tue 28 Jul 2026 10:01:04 +0000
Manifest next update: Wed 29 Jul 2026 10:01:04 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: 9Vbc8kZAC3mCrhkVIX3qTT22A6hkB/zqWmZmkq229zo=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b5:0d:74:cb:67:06:cc:8a:97:7f:44:d6:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jul 28 10:01:04 2026 GMT
Not After : Jul 29 10:01:04 2026 GMT
Subject: CN=ae740d3c2b28e4abb172493d90cc8166913d4997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:a7:24:62:a5:ab:02:63:38:64:ef:a1:ae:
59:fd:ee:2f:36:5f:69:b3:eb:31:12:b9:1a:1d:41:
ba:7d:73:8b:45:ee:62:dd:85:5d:37:e5:1b:71:ab:
8a:df:e3:b5:dc:50:e7:a4:ba:62:f6:af:26:75:2a:
9a:ce:92:db:c4:8d:28:15:29:52:33:27:17:f4:85:
93:40:7d:e3:e3:56:a7:34:c6:e1:c8:51:48:a6:9e:
36:f1:a9:5c:99:cc:d2:da:d4:e9:6a:b4:da:9b:a4:
8e:c9:38:63:a2:36:20:0f:8b:7d:8b:f8:f5:cd:ce:
33:82:83:52:aa:39:92:c9:52:7a:72:22:b8:29:ae:
16:38:67:60:5c:4e:53:dc:78:c9:19:08:8d:14:25:
d0:9b:e6:b8:ab:91:95:fd:34:98:65:2a:5e:c1:fd:
9b:ee:bf:cc:1b:2a:e3:72:7f:b7:76:67:d0:54:2f:
84:a4:c7:d5:67:01:45:d7:a0:a7:18:7f:c1:e1:de:
d8:8a:94:7e:f7:44:20:02:f4:aa:01:bd:89:71:21:
da:f6:f3:d3:e8:90:de:28:f5:1a:49:f5:33:62:09:
b9:5d:4e:75:c8:97:c7:ce:99:85:5e:d6:eb:11:32:
b5:22:3b:e9:6f:d3:60:3a:3a:0f:ab:34:4d:c6:71:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:0D:3C:2B:28:E4:AB:B1:72:49:3D:90:CC:81:66:91:3D:49:97
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:37:50:05:39:6e:47:56:73:9c:4b:19:1a:3d:19:fa:b7:
d8:62:0b:d5:41:26:35:ca:72:75:81:8c:d3:82:3b:59:d1:9a:
55:08:5b:59:06:a0:65:cb:cc:3f:52:a0:74:75:9b:f6:e2:86:
8a:78:0b:e3:4d:03:02:dc:ec:f4:ff:14:35:a1:0f:c7:7e:dd:
85:fc:13:a9:c1:d3:b8:c5:db:ff:1a:82:2f:e5:94:51:c0:3d:
d8:27:38:d7:d1:1a:d9:14:a6:da:c3:c8:59:24:38:3a:51:dd:
c4:53:b8:ee:26:f0:09:b7:88:7b:95:17:c9:c3:d1:de:ec:8f:
e0:8c:6b:29:85:5b:33:b1:f7:8e:c4:46:0a:13:ae:43:9b:95:
d0:a8:e3:24:30:a5:29:a2:bf:98:6c:81:fa:d8:ff:f0:43:ac:
9e:a3:52:3e:28:3d:53:22:4d:01:1f:43:86:1e:b8:e4:65:ec:
9b:9e:72:f2:00:19:ca:00:0e:9a:a9:d1:88:d3:fd:c4:77:fc:
3e:ee:68:ff:6a:5c:ab:9e:c9:6a:70:7e:1c:dd:15:fc:b2:2a:
bd:18:df:10:e8:2a:c7:e5:79:b8:e0:b3:b1:d0:9d:56:f3:a8:
d7:f5:60:aa:c8:30:e3:4d:cf:ba:a8:7c:f9:6d:51:b7:47:0d:
b1:7f:93:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK7UNdMtnBsyKl39E1vHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwNzI4MTAwMTA0WhcNMjYwNzI5MTAwMTA0WjAzMTEwLwYDVQQD
EyhhZTc0MGQzYzJiMjhlNGFiYjE3MjQ5M2Q5MGNjODE2NjkxM2Q0OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUinJGKlqwJjOGTvoa5Z/e4vNl9p
s+sxErkaHUG6fXOLRe5i3YVdN+UbcauK3+O13FDnpLpi9q8mdSqazpLbxI0oFSlS
MycX9IWTQH3j41anNMbhyFFIpp428alcmczS2tTparTam6SOyThjojYgD4t9i/j1
zc4zgoNSqjmSyVJ6ciK4Ka4WOGdgXE5T3HjJGQiNFCXQm+a4q5GV/TSYZSpewf2b
7r/MGyrjcn+3dmfQVC+EpMfVZwFF16CnGH/B4d7YipR+90QgAvSqAb2JcSHa9vPT
6JDeKPUaSfUzYgm5XU51yJfHzpmFXtbrETK1Ijvpb9NgOjoPqzRNxnF9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK50DTwrKOSrsXJJPZDMgWaRPUmXMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHo3UAU5
bkdWc5xLGRo9Gfq32GIL1UEmNcpydYGM04I7WdGaVQhbWQagZcvMP1KgdHWb9uKG
ingL400DAtzs9P8UNaEPx37dhfwTqcHTuMXb/xqCL+WUUcA92Cc419Ea2RSm2sPI
WSQ4OlHdxFO47ibwCbeIe5UXycPR3uyP4IxrKYVbM7H3jsRGChOuQ5uV0KjjJDCl
KaK/mGyB+tj/8EOsnqNSPig9UyJNAR9Dhh645GXsm55y8gAZygAOmqnRiNP9xHf8
Pu5o/2pcq57JanB+HN0V/LIqvRjfEOgqx+V5uOCzsdCdVvOo1/Vgqsgw403Puqh8
+W1Rt0cNsX+TCA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:53 2026 by rpki-client