Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: E5XbbMfRv94BYZnWOlqXHp8agToTEQjlgXhlMLNdHLs=
Subject key identifier: 6F:67:AD:43:36:D2:66:9A:91:C9:4F:F9:C4:53:42:7D:08:6E:70:30
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 01A0C1B174E072AECAB2EF4D7B36EA0F793B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 0256
Signing time: Mon 21 Sep 2026 02:00:27 +0000
Manifest this update: Mon 21 Sep 2026 02:00:27 +0000
Manifest next update: Tue 22 Sep 2026 02:00:27 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: xTn0Xw5pE3h8Nbg/HYE5HySdOPgiUjYT7+CNAXsfdpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:74:e0:72:ae:ca:b2:ef:4d:7b:36:ea:0f:79:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Sep 21 02:00:27 2026 GMT
Not After : Sep 22 02:00:27 2026 GMT
Subject: CN=6f67ad4336d2669a91c94ff9c453427d086e7030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:28:5e:71:1f:da:fa:24:96:3a:df:9f:73:
23:41:b6:d6:5d:65:1b:d8:89:85:92:a3:71:f4:b6:
d5:b0:db:0e:f7:c8:71:4e:77:47:cf:39:ac:9e:c6:
b9:81:9b:ce:75:d6:80:3c:bb:2e:b8:e7:86:06:50:
c3:b2:79:86:2a:29:81:3b:51:a4:19:78:0b:7f:fa:
08:b5:8c:e9:93:91:8d:9e:34:35:65:af:32:7d:69:
1a:ef:db:68:96:70:27:0a:87:7f:21:c6:ec:73:b5:
0e:14:ee:bf:2b:ed:76:4f:8f:c3:21:98:44:75:33:
a6:aa:be:06:eb:c5:a6:9e:d3:8d:e6:05:a2:71:4a:
2c:29:5e:bf:40:a2:c1:4b:f4:89:b6:43:dc:0e:a7:
45:d3:61:3d:6f:52:c6:58:0b:44:11:e3:22:1c:67:
59:0b:5e:a7:fd:86:8f:8e:0c:7d:7d:87:4f:83:3e:
f4:d7:53:a4:a5:b3:b2:8c:0b:2a:4f:10:25:5e:24:
61:1f:1b:1f:41:5d:d4:bd:cb:90:b8:ca:49:0d:51:
30:4a:24:d6:ca:f4:0c:0f:ac:08:7a:8f:5d:5c:b2:
8e:88:2a:72:1c:82:45:19:bc:35:4a:dd:0b:ea:27:
46:85:22:16:27:1f:b8:30:3b:77:4a:5e:33:88:70:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:AD:43:36:D2:66:9A:91:C9:4F:F9:C4:53:42:7D:08:6E:70:30
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0b:1c:d9:88:4a:24:ea:c4:8d:fe:33:38:2e:94:ce:45:f6:
53:a1:f8:44:28:f3:c1:93:9f:f6:92:1d:05:a2:d9:bd:89:41:
6a:c5:82:76:28:87:e6:c2:bd:61:38:9b:83:e4:a7:20:77:4b:
5e:77:9b:5b:c2:e2:21:e9:3e:f9:14:73:4f:72:ac:1e:f9:85:
62:26:cf:12:f4:a2:12:f9:a4:c6:0b:b8:9e:a4:b5:1a:bc:1d:
fe:22:84:28:e3:51:ce:a4:df:42:c7:b3:46:26:f3:db:11:4e:
16:d9:be:22:22:38:16:7a:38:67:62:fb:3f:d9:2d:b3:58:50:
89:69:ac:50:48:46:fb:af:7d:5e:b0:2f:79:73:9f:ae:0f:b9:
42:09:8e:a8:c9:16:2f:fd:03:1a:ac:85:03:5b:2f:d7:9b:90:
b4:94:7b:9a:b3:e8:2d:52:53:66:f7:f5:6a:e2:ae:f7:29:cb:
a3:5e:85:45:c3:67:3d:c6:8c:c3:56:b5:eb:4f:55:0a:42:83:
75:95:57:a7:a2:20:7f:aa:36:f1:e0:9e:f5:08:f1:19:6b:0d:
69:aa:76:ab:1d:4d:10:cd:a0:77:b7:70:90:de:89:d1:e6:27:
df:33:74:f3:ed:63:c9:e6:5e:03:ce:9b:7a:64:57:f8:0e:b0:
e7:57:08:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsXTgcq7Ksu9NezbqD3k7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzBjMjczYWY5ZWI1NTY2NDMwODhlNDNiZWYzYTZhMTgx
Yzg3YzIwHhcNMjYwOTIxMDIwMDI3WhcNMjYwOTIyMDIwMDI3WjAzMTEwLwYDVQQD
Eyg2ZjY3YWQ0MzM2ZDI2NjlhOTFjOTRmZjljNDUzNDI3ZDA4NmU3MDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQoXnEf2vokljrfn3MjQbbWXWUb
2ImFkqNx9LbVsNsO98hxTndHzzmsnsa5gZvOddaAPLsuuOeGBlDDsnmGKimBO1Gk
GXgLf/oItYzpk5GNnjQ1Za8yfWka79tolnAnCod/Icbsc7UOFO6/K+12T4/DIZhE
dTOmqr4G68WmntON5gWicUosKV6/QKLBS/SJtkPcDqdF02E9b1LGWAtEEeMiHGdZ
C16n/YaPjgx9fYdPgz7011OkpbOyjAsqTxAlXiRhHxsfQV3UvcuQuMpJDVEwSiTW
yvQMD6wIeo9dXLKOiCpyHIJFGbw1St0L6idGhSIWJx+4MDt3Sl4ziHCjpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9nrUM20maakclP+cRTQn0IbnAwMB8GA1UdIwQY
MBaAFJcwwnOvnrVWZDCI5DvvOmoYHIfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAt
ZjJkNDBhZGUzYjliLzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZjZkYjQtZDJlZi00NGE0LWJhYTAtZjJkNDBhZGUzYjli
LzEvbHpEQ2M2LWV0VlprTUlqa08tODZhaGdjaDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQsc2YhK
JOrEjf4zOC6UzkX2U6H4RCjzwZOf9pIdBaLZvYlBasWCdiiH5sK9YTibg+SnIHdL
XnebW8LiIek++RRzT3KsHvmFYibPEvSiEvmkxgu4nqS1Grwd/iKEKONRzqTfQsez
Ribz2xFOFtm+IiI4Fno4Z2L7P9kts1hQiWmsUEhG+699XrAveXOfrg+5QgmOqMkW
L/0DGqyFA1sv15uQtJR7mrPoLVJTZvf1auKu9ynLo16FRcNnPcaMw1a1609VCkKD
dZVXp6Igf6o28eCe9QjxGWsNaap2qx1NEM2gd7dwkN6J0eYn3zN08+1jyeZeA86b
emRX+A6w51cIbA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:40:32 2026 by rpki-client