Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: p9QjoQ5r0UKcYypgPYDdmgUpcE8oSbB8HvKTSRp9Hrw=
Subject key identifier: 93:3E:9C:C3:9E:E5:FE:1F:0D:D5:F6:AE:97:7B:E9:8E:82:47:EC:47
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 01A0E73F7CB48E9EC0997D35A5F5BA7FD35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0EE4
Signing time: Mon 28 Sep 2026 09:01:32 +0000
Manifest this update: Mon 28 Sep 2026 09:01:32 +0000
Manifest next update: Tue 29 Sep 2026 09:01:32 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: 2hU3llhW1P09J3PYhAzKIL7lnIqW8sd2X/fFxu0Wkfg=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:7c:b4:8e:9e:c0:99:7d:35:a5:f5:ba:7f:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Sep 28 09:01:32 2026 GMT
Not After : Sep 29 09:01:32 2026 GMT
Subject: CN=933e9cc39ee5fe1f0dd5f6ae977be98e8247ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:94:71:73:5c:e0:e1:3f:6e:3e:62:ea:4a:
61:cc:40:b4:54:2d:e6:54:7d:fb:b4:8d:fc:86:24:
97:5e:23:bb:ab:b1:5a:9c:06:b3:62:d6:44:fb:94:
cc:93:6a:4a:54:34:15:b2:ae:03:c9:ec:34:e0:04:
3b:bb:d5:47:cc:60:36:55:9e:c3:4b:62:be:74:7e:
af:c2:f1:69:f6:95:2c:b6:db:89:39:d3:b2:e3:ce:
47:a6:e4:87:80:eb:c6:86:78:31:1b:0a:80:ba:5c:
58:79:1d:64:56:c6:3e:e4:b5:f3:b0:15:33:e7:e1:
1f:8c:e7:5f:6f:b8:b2:03:76:73:41:5a:76:40:7a:
8b:c8:67:4a:d5:d5:9b:89:87:3d:b0:46:d9:25:ca:
18:26:6b:8e:a8:4d:f8:1b:92:07:43:17:44:65:cf:
04:06:d9:65:22:3c:58:15:27:05:5a:68:f0:c1:2d:
fc:e3:79:06:f9:0c:c6:2b:2a:da:a0:a8:58:a1:ae:
27:48:da:24:c1:53:ce:25:25:80:fe:e8:35:37:4c:
29:89:52:17:7e:7b:b2:69:e7:55:61:8b:b8:e4:a0:
a7:63:00:3a:35:2a:9f:9d:b5:ed:6c:ac:ed:cb:a1:
e6:c9:83:5c:88:f9:05:d7:32:01:23:bf:68:f4:16:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:9C:C3:9E:E5:FE:1F:0D:D5:F6:AE:97:7B:E9:8E:82:47:EC:47
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:b7:12:e6:29:38:0f:12:cb:27:68:34:b0:9f:1a:f9:bd:
a7:e9:b8:b9:ee:e3:2e:39:45:0c:fc:9f:b2:ef:d9:51:d8:c8:
24:bb:09:01:c8:d2:34:c9:7d:83:3c:43:0b:7c:49:4d:01:2d:
f1:a4:40:8a:a2:8a:3e:b4:ab:fa:02:d9:b3:36:9e:35:23:6d:
16:e5:b6:cc:df:05:7f:a3:e3:d7:54:2e:89:9b:61:24:8f:b4:
7a:83:17:be:75:3a:ad:77:d5:dd:f5:a6:d7:0d:2f:ad:9b:c6:
72:e7:62:8b:73:a0:73:79:e9:1e:2b:61:db:69:cb:b8:e0:e0:
fb:8a:97:af:33:72:e5:b7:17:ce:e3:60:73:50:10:37:59:4a:
72:39:a9:24:87:0a:2b:8c:53:4d:2e:29:8c:f5:33:74:d0:fd:
da:8a:3b:a8:e8:c1:9c:37:27:cf:37:e9:37:57:71:ff:6e:f7:
ee:e8:aa:dc:64:2a:c0:41:80:53:fd:76:f0:ee:52:cd:91:7e:
d5:23:7d:51:74:40:48:b7:6e:a1:bd:74:0b:ef:df:83:3c:3f:
0b:a7:81:71:e1:04:a0:80:fd:2c:65:ca:2e:0c:ed:92:b4:53:
f6:63:a9:be:df:bc:25:16:92:57:4c:23:47:d8:60:23:10:72:
27:b3:f6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP3y0jp7AmX01pfW6f9NcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx
YTg3NWMwHhcNMjYwOTI4MDkwMTMyWhcNMjYwOTI5MDkwMTMyWjAzMTEwLwYDVQQD
Eyg5MzNlOWNjMzllZTVmZTFmMGRkNWY2YWU5NzdiZTk4ZTgyNDdlYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n+UcXNc4OE/bj5i6kphzEC0VC3m
VH37tI38hiSXXiO7q7FanAazYtZE+5TMk2pKVDQVsq4Dyew04AQ7u9VHzGA2VZ7D
S2K+dH6vwvFp9pUsttuJOdOy485HpuSHgOvGhngxGwqAulxYeR1kVsY+5LXzsBUz
5+EfjOdfb7iyA3ZzQVp2QHqLyGdK1dWbiYc9sEbZJcoYJmuOqE34G5IHQxdEZc8E
BtllIjxYFScFWmjwwS3843kG+QzGKyraoKhYoa4nSNokwVPOJSWA/ug1N0wpiVIX
fnuyaedVYYu45KCnYwA6NSqfnbXtbKzty6HmyYNciPkF1zIBI79o9Bak/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM+nMOe5f4fDdX2rpd76Y6CR+xHMB8GA1UdIwQY
MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt
OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx
LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwi3EuYp
OA8SyydoNLCfGvm9p+m4ue7jLjlFDPyfsu/ZUdjIJLsJAcjSNMl9gzxDC3xJTQEt
8aRAiqKKPrSr+gLZszaeNSNtFuW2zN8Ff6Pj11QuiZthJI+0eoMXvnU6rXfV3fWm
1w0vrZvGcudii3Ogc3npHith22nLuODg+4qXrzNy5bcXzuNgc1AQN1lKcjmpJIcK
K4xTTS4pjPUzdND92oo7qOjBnDcnzzfpN1dx/2737uiq3GQqwEGAU/128O5SzZF+
1SN9UXRASLduob10C+/fgzw/C6eBceEEoID9LGXKLgztkrRT9mOpvt+8JRaSV0wj
R9hgIxByJ7P2Ig==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:25:31 2026 by rpki-client