Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: iU4KNZbbnY5Xu6CAD/51n+PcLQsmXBogXZ82M08rqYY=
Subject key identifier: D2:E6:D9:17:5C:8D:0D:81:85:D8:BA:6D:08:C4:92:64:81:C7:83:29
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019CAB34137ADA55C5D4513A635C35B66C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 04B5
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: 349FQFd5GuBNHJ1XSdLWCNh7MgE.roa (hash: X07/rOHAvRnDnhTDeHpviTIJqNY8MhsZ5tUjK1kXVRQ=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: Fa1j7S9l2csxuYFPTf02S6/h6c3kKTKKortaA8RcJt4=)
3: Ro9U9BJ6f0_Ri9pStBmjPzC3PAI.roa (hash: OME7cIqz4TyEQ9tHIazsSceKPyDQCFfwvggAogmMI2I=)
4: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
5: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:13:7a:da:55:c5:d4:51:3a:63:5c:35:b6:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=d2e6d9175c8d0d8185d8ba6d08c4926481c78329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:44:e5:9c:e8:2e:79:ca:a3:05:1b:9d:5a:
07:76:74:4e:d2:6d:80:b8:90:60:21:ea:f7:b0:a2:
dc:b7:20:d7:01:16:1e:57:5a:5a:70:a4:e9:96:65:
e1:b8:36:af:73:5f:32:3b:65:a0:e6:c2:99:af:2c:
e0:c0:d9:fd:7c:a4:dc:ec:31:72:53:95:ac:18:82:
38:a8:63:40:15:8c:8c:28:ac:65:8a:e2:5b:18:ee:
39:ba:b8:b2:7c:1e:d2:6e:7b:a5:4e:75:54:69:06:
36:13:4d:fd:2c:c6:af:f0:d3:0d:aa:4e:0c:62:e6:
f3:0a:04:0b:12:22:27:c3:7b:6b:e6:8b:47:e9:5c:
63:b1:68:9d:62:d0:a5:91:89:94:24:52:e6:77:a6:
63:73:f1:56:bb:a4:c1:e5:d3:95:27:26:a6:8d:65:
5e:4d:5f:44:ed:01:b4:ac:38:99:75:f4:40:d3:59:
bc:b1:bb:84:1c:f1:23:44:4e:6d:73:d7:a6:e8:4c:
c9:24:13:19:86:1b:e6:39:c3:6e:9c:7c:1d:23:dc:
08:34:19:44:5a:08:f0:f3:12:64:6b:40:8c:80:61:
94:29:19:fa:88:66:3e:86:1b:a6:0c:f9:e2:21:07:
2a:b5:5e:2a:e0:d3:a0:ee:78:7d:34:96:97:e0:f3:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:D9:17:5C:8D:0D:81:85:D8:BA:6D:08:C4:92:64:81:C7:83:29
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1d:22:29:5d:14:37:b1:cf:12:77:07:dd:51:b7:82:c6:9c:
ca:d6:36:86:c7:1b:e6:45:70:ab:5c:8d:c3:69:d7:34:81:9a:
67:68:16:b2:f8:a3:11:ef:07:d5:57:9b:2a:6a:f2:8e:58:ae:
95:52:0b:3c:67:4f:ef:b3:56:b6:cd:c7:4b:e5:1b:e8:71:a4:
fb:cd:d0:fb:3e:af:4d:f2:98:d9:75:34:82:62:02:48:77:1b:
fe:ba:3b:27:d6:d4:61:8f:e8:59:4f:7f:b5:94:13:c8:73:0d:
07:39:59:31:a5:4a:73:1f:be:95:db:56:e7:e3:13:f1:c3:6c:
62:18:dd:ad:54:01:73:cb:63:1c:3c:01:54:da:c7:43:60:0e:
af:df:1f:74:2f:36:fc:9f:21:e4:d9:a7:31:74:26:4d:36:7c:
db:bb:87:f0:9f:f6:53:ed:aa:c4:ee:26:71:4e:62:48:7c:a8:
9d:49:fd:36:49:c7:de:6c:1a:b6:85:fd:34:ab:b1:cb:ac:d1:
a7:5f:20:c5:38:58:f9:69:09:50:15:22:5f:29:38:1f:62:89:
78:20:c8:e3:98:83:3f:7d:72:40:6f:4b:a5:41:f0:62:0f:cd:
5b:82:78:b9:2f:c2:96:12:e7:15:08:a3:df:2f:61:5e:92:d3:
9c:8d:a1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBN62lXF1FE6Y1w1tmwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwMzAxMjEwMDQyWhcNMjYwMzAyMjEwMDQyWjAzMTEwLwYDVQQD
EyhkMmU2ZDkxNzVjOGQwZDgxODVkOGJhNmQwOGM0OTI2NDgxYzc4MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsRE5ZzoLnnKowUbnVoHdnRO0m2A
uJBgIer3sKLctyDXARYeV1pacKTplmXhuDavc18yO2Wg5sKZryzgwNn9fKTc7DFy
U5WsGII4qGNAFYyMKKxliuJbGO45uriyfB7SbnulTnVUaQY2E039LMav8NMNqk4M
YubzCgQLEiInw3tr5otH6VxjsWidYtClkYmUJFLmd6Zjc/FWu6TB5dOVJyamjWVe
TV9E7QG0rDiZdfRA01m8sbuEHPEjRE5tc9em6EzJJBMZhhvmOcNunHwdI9wINBlE
Wgjw8xJka0CMgGGUKRn6iGY+hhumDPniIQcqtV4q4NOg7nh9NJaX4PPrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLm2RdcjQ2Bhdi6bQjEkmSBx4MpMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwB0iKV0U
N7HPEncH3VG3gsacytY2hscb5kVwq1yNw2nXNIGaZ2gWsvijEe8H1VebKmryjliu
lVILPGdP77NWts3HS+Ub6HGk+83Q+z6vTfKY2XU0gmICSHcb/ro7J9bUYY/oWU9/
tZQTyHMNBzlZMaVKcx++ldtW5+MT8cNsYhjdrVQBc8tjHDwBVNrHQ2AOr98fdC82
/J8h5NmnMXQmTTZ827uH8J/2U+2qxO4mcU5iSHyonUn9NknH3mwatoX9NKuxy6zR
p18gxThY+WkJUBUiXyk4H2KJeCDI45iDP31yQG9LpUHwYg/NW4J4uS/ClhLnFQij
3y9hXpLTnI2hdA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:48 2026 by rpki-client