Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: t2o1Gpq9PZ+sxpsCi87FdvpV56xy93haT+oz0Dca2Gg=
Subject key identifier: B4:F3:31:C7:40:D3:20:67:9D:CE:CE:A8:39:C5:4C:DE:68:88:BC:5F
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 01A0E24FA4C0D4B13C9E80EE8076F9D5585E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 047E
Signing time: Sun 27 Sep 2026 10:01:05 +0000
Manifest this update: Sun 27 Sep 2026 10:01:05 +0000
Manifest next update: Mon 28 Sep 2026 10:01:05 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: qnwHMB6hOtetBiEX+9fzZupjyCosElJBU3Hacz7IXIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:a4:c0:d4:b1:3c:9e:80:ee:80:76:f9:d5:58:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Sep 27 10:01:05 2026 GMT
Not After : Sep 28 10:01:05 2026 GMT
Subject: CN=b4f331c740d320679dcecea839c54cde6888bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:6a:79:3d:9c:ba:70:5d:9e:7a:56:f3:89:
6f:e3:55:19:a9:7a:0d:30:30:f7:d8:f1:24:b7:89:
6a:15:f0:52:57:63:7b:14:7a:0e:ad:37:f5:d2:71:
94:35:4a:de:a8:b7:87:78:e9:de:67:4c:fa:31:c8:
5f:58:77:e3:93:aa:ab:e1:a7:fe:c6:bc:52:a5:1f:
2d:cd:ad:85:b2:4a:ad:f2:e2:de:10:72:ca:82:dd:
c7:fa:99:55:fd:46:92:48:5d:b0:42:3a:b5:7e:2c:
ff:b7:5d:33:be:c7:6d:9a:15:55:b5:5d:9a:a1:aa:
84:4d:61:b1:a1:af:96:37:49:62:a3:c6:36:66:31:
b3:8f:a2:09:24:17:f6:57:d6:2c:35:f8:52:c8:86:
db:3c:d4:74:17:68:9f:27:38:05:33:be:03:5d:99:
41:6a:85:1c:a2:e1:e8:a7:2f:ef:b2:33:18:ac:d2:
e9:7f:4f:4b:ad:2a:98:9c:f5:2c:44:00:cc:27:6d:
39:71:be:53:1f:ed:ab:aa:f4:b0:80:e7:e8:d1:80:
69:bf:23:6f:02:f6:a8:da:e1:a9:56:fb:65:cf:aa:
85:19:1b:3d:9f:32:50:a4:63:d0:1f:e0:38:64:bc:
c9:fa:79:79:be:8c:61:47:0f:da:43:01:79:5c:52:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:31:C7:40:D3:20:67:9D:CE:CE:A8:39:C5:4C:DE:68:88:BC:5F
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e6:15:c2:77:1a:a1:3d:f3:e4:6a:27:c5:de:80:34:f6:95:
f3:90:dc:4e:20:6a:97:7a:bd:ae:1d:6d:b9:92:91:2c:05:eb:
7a:ed:97:48:21:d1:4d:06:e1:c8:4a:1b:cc:29:a1:b6:ea:c6:
42:4a:02:c7:37:11:dc:37:cc:31:c2:2d:6e:b0:c3:ca:35:26:
bc:3b:2b:3a:dc:b5:a5:0d:e8:ef:d6:80:fa:33:e5:32:69:75:
09:b5:ae:65:cb:8c:ac:a4:f8:aa:09:e3:b1:d4:56:aa:ba:53:
91:7b:f4:e5:b1:8d:a7:98:a0:e5:cf:5a:41:5f:89:53:e6:62:
8d:02:2f:b5:cf:13:49:35:dc:96:50:40:39:e2:93:0e:30:a7:
2f:17:52:1e:22:96:6a:ab:eb:9e:40:4c:7a:f1:d7:a2:f0:ec:
64:95:c0:bb:16:0a:e2:b9:bd:a2:7d:6d:88:a6:23:58:b0:8c:
d6:e7:db:7c:7b:bf:29:f8:64:52:7d:f7:bf:70:ea:62:be:42:
8f:8c:ef:06:9c:b3:41:59:7e:0e:d2:54:64:51:2a:d4:90:44:
c2:d8:d7:dc:08:d7:30:ef:54:68:c3:c4:d6:63:93:56:4f:f8:
f2:0d:53:cb:be:9c:43:85:54:b1:91:cf:37:cd:63:fc:41:14:
2d:ff:0a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiT6TA1LE8noDugHb51VheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjYwOTI3MTAwMTA1WhcNMjYwOTI4MTAwMTA1WjAzMTEwLwYDVQQD
EyhiNGYzMzFjNzQwZDMyMDY3OWRjZWNlYTgzOWM1NGNkZTY4ODhiYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4otqeT2cunBdnnpW84lv41UZqXoN
MDD32PEkt4lqFfBSV2N7FHoOrTf10nGUNUreqLeHeOneZ0z6MchfWHfjk6qr4af+
xrxSpR8tza2Fskqt8uLeEHLKgt3H+plV/UaSSF2wQjq1fiz/t10zvsdtmhVVtV2a
oaqETWGxoa+WN0lio8Y2ZjGzj6IJJBf2V9YsNfhSyIbbPNR0F2ifJzgFM74DXZlB
aoUcouHopy/vsjMYrNLpf09LrSqYnPUsRADMJ205cb5TH+2rqvSwgOfo0YBpvyNv
Avao2uGpVvtlz6qFGRs9nzJQpGPQH+A4ZLzJ+nl5voxhRw/aQwF5XFKavwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTzMcdA0yBnnc7OqDnFTN5oiLxfMB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeYVwnca
oT3z5Gonxd6ANPaV85DcTiBql3q9rh1tuZKRLAXreu2XSCHRTQbhyEobzCmhturG
QkoCxzcR3DfMMcItbrDDyjUmvDsrOty1pQ3o79aA+jPlMml1CbWuZcuMrKT4qgnj
sdRWqrpTkXv05bGNp5ig5c9aQV+JU+ZijQIvtc8TSTXcllBAOeKTDjCnLxdSHiKW
aqvrnkBMevHXovDsZJXAuxYK4rm9on1tiKYjWLCM1ufbfHu/KfhkUn33v3DqYr5C
j4zvBpyzQVl+DtJUZFEq1JBEwtjX3AjXMO9UaMPE1mOTVk/48g1Ty76cQ4VUsZHP
N81j/EEULf8Ksw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:33:22 2026 by rpki-client