Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json)
Hash identifier: qbG3AkccoX1xjOuifjFvhGM3J1oSZPPEh8UHUoMdtSk=
Subject key identifier: DD:C1:A9:22:8A:28:40:89:B6:BF:90:5E:AD:99:7D:81:EE:40:4E:47
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 019DA309E53C11DC52F97391E29C7E58C78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 00:00:27 +0000
Manifest this update: Sun 19 Apr 2026 00:00:27 +0000
Manifest next update: Mon 20 Apr 2026 00:00:27 +0000
Files and hashes: 1: T3Gte_sAcOYHDUpylqXZ9Stq9po.roa (hash: Z/AdHSzAsTqsVCU0cNeiAf6MSfmrxAUqR0oWpvYC1ec=)
2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: 0WbwonMyMmF0YjQ+Xdpak66q6mtfW79nuwQQKgpEMc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:e5:3c:11:dc:52:f9:73:91:e2:9c:7e:58:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Apr 19 00:00:27 2026 GMT
Not After : Apr 20 00:00:27 2026 GMT
Subject: CN=ddc1a9228a284089b6bf905ead997d81ee404e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:75:36:48:42:e4:e9:7a:13:cc:ec:e3:b5:
a5:1d:15:d4:d0:00:88:44:9d:ec:57:62:08:e4:aa:
f7:ba:41:55:27:58:5c:99:14:60:86:60:7a:e3:54:
20:1f:bc:f3:e5:18:3b:cc:52:6f:5b:9b:db:7a:e3:
14:42:7e:b0:89:2a:80:23:06:e2:98:41:bb:23:6d:
9d:f8:14:7c:72:01:42:c1:75:52:7e:92:b4:34:9b:
1b:47:b7:54:50:f6:21:8c:8b:01:31:1d:8c:28:7e:
64:29:40:27:f4:9f:ca:d5:44:16:f2:fa:2a:90:ef:
76:61:2f:4c:52:f8:a0:84:9c:d7:0f:79:86:4e:78:
cb:51:e9:f8:06:95:7d:20:52:3c:c7:f4:06:23:6e:
1c:ce:48:bc:ea:79:d5:19:c5:04:da:8c:5b:25:2f:
69:dd:ad:97:b0:35:e2:a0:16:0d:63:7e:c1:06:fd:
9d:c1:4b:05:f0:b6:6e:da:c8:0f:f4:50:aa:79:0c:
ce:ce:d3:21:76:ae:8e:f2:a2:bc:9b:e2:b0:4d:ab:
bd:9a:ec:12:f7:20:99:b8:f6:66:de:e5:6e:6a:34:
af:46:dc:59:41:4d:11:a8:e3:20:cf:47:36:71:95:
4c:f4:e0:69:88:35:6a:b7:2b:44:23:2f:b3:c2:e3:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:A9:22:8A:28:40:89:B6:BF:90:5E:AD:99:7D:81:EE:40:4E:47
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:56:57:2f:00:58:49:d1:4a:2d:4e:0c:dc:43:fd:e5:1b:
3a:cd:a7:6e:ca:9f:06:02:cd:0c:77:74:81:17:d7:0a:87:25:
94:2a:88:fa:14:d5:63:2b:c0:cf:5e:3f:94:85:e8:86:62:e5:
67:0c:3c:b3:34:47:19:b3:ef:ff:31:8d:12:c8:a0:5a:af:99:
22:e3:4c:ae:82:94:69:a1:71:86:68:b0:b0:1e:f3:ef:87:a1:
be:a8:a7:ef:4a:c6:9f:a1:83:db:f3:1b:c1:fd:56:78:ac:4c:
5f:70:3b:5b:62:01:36:2b:7c:47:7c:5c:4c:60:5b:85:78:a3:
f5:bc:ed:82:e3:72:a3:f5:12:fc:29:fe:11:04:32:49:1a:6b:
1c:73:60:d0:fb:4a:ed:96:4b:01:79:07:5c:34:71:f6:85:6a:
7a:c3:8f:84:d4:07:b1:0f:b0:f4:7e:66:53:8f:87:d0:70:0f:
32:26:99:ef:eb:f4:3d:c7:ea:b1:25:e3:6b:7d:7c:43:dc:fb:
6d:3b:3c:94:31:24:65:90:74:ea:42:1a:0a:ef:ec:3d:0f:7f:
5a:27:cd:33:2d:f4:1b:7d:fb:65:26:58:60:35:0f:1c:33:52:
4a:30:24:f6:d4:74:a9:71:c6:80:1b:a2:f2:5e:3f:16:ee:e7:
55:84:73:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCeU8EdxS+XOR4px+WMeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Zjc2MDVlODUwYzlkYmYxN2RhZjBiYTM4ZTM2ZmNjNjNj
MmNiZmEwHhcNMjYwNDE5MDAwMDI3WhcNMjYwNDIwMDAwMDI3WjAzMTEwLwYDVQQD
EyhkZGMxYTkyMjhhMjg0MDg5YjZiZjkwNWVhZDk5N2Q4MWVlNDA0ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm51NkhC5Ol6E8zs47WlHRXU0ACI
RJ3sV2II5Kr3ukFVJ1hcmRRghmB641QgH7zz5Rg7zFJvW5vbeuMUQn6wiSqAIwbi
mEG7I22d+BR8cgFCwXVSfpK0NJsbR7dUUPYhjIsBMR2MKH5kKUAn9J/K1UQW8voq
kO92YS9MUvighJzXD3mGTnjLUen4BpV9IFI8x/QGI24czki86nnVGcUE2oxbJS9p
3a2XsDXioBYNY37BBv2dwUsF8LZu2sgP9FCqeQzOztMhdq6O8qK8m+KwTau9muwS
9yCZuPZm3uVuajSvRtxZQU0RqOMgz0c2cZVM9OBpiDVqtytEIy+zwuPPdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3BqSKKKECJtr+QXq2ZfYHuQE5HMB8GA1UdIwQY
MBaAFJX3YF6FDJ2/F9rwujjjb8xjwsv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEt
NjcwNWRjMmUzYWFhLzEvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEtNjcwNWRjMmUzYWFh
LzEvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYZWVy8A
WEnRSi1ODNxD/eUbOs2nbsqfBgLNDHd0gRfXCocllCqI+hTVYyvAz14/lIXohmLl
Zww8szRHGbPv/zGNEsigWq+ZIuNMroKUaaFxhmiwsB7z74ehvqin70rGn6GD2/Mb
wf1WeKxMX3A7W2IBNit8R3xcTGBbhXij9bztguNyo/US/Cn+EQQySRprHHNg0PtK
7ZZLAXkHXDRx9oVqesOPhNQHsQ+w9H5mU4+H0HAPMiaZ7+v0PcfqsSXja318Q9z7
bTs8lDEkZZB06kIaCu/sPQ9/WifNMy30G337ZSZYYDUPHDNSSjAk9tR0qXHGgBui
8l4/Fu7nVYRzOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:19 2026 by rpki-client