Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: 1gdgLCexIzA7mSW591+YgWtOexdWZ5XSS5Ayux3UV2s=
Subject key identifier: A9:B3:64:BF:65:DE:30:31:A8:67:DA:34:73:10:86:FC:3A:EF:06:07
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019CAA8F82DB7A77E77BA3CB6548DF213E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0FFE
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: drsnkuosbg6qvFQb_xFsNGudfnU.roa (hash: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: mH16o88kTFpRt6WdmKCDe9V6FnjCU/C66fpLKWYSL+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:82:db:7a:77:e7:7b:a3:cb:65:48:df:21:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=a9b364bf65de3031a867da34731086fc3aef0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:45:e0:24:7d:50:7a:13:e8:38:f3:73:ff:
48:05:96:3c:1e:49:ea:86:3a:6c:5d:b2:b6:bb:06:
54:05:9c:7b:c4:ec:5f:1b:be:63:4f:d5:a9:0d:b3:
dc:38:39:87:ed:5f:1e:11:ff:8c:ee:f8:ff:34:92:
75:68:b5:4f:df:e4:28:f9:1c:75:ee:fa:43:6e:e4:
0f:3f:c9:f0:09:e3:89:50:a8:3e:a4:f9:21:98:6c:
b3:f4:e7:10:df:47:55:55:25:14:df:d0:0f:38:04:
95:1f:08:2f:6b:25:76:6e:f5:70:84:be:75:37:5f:
fd:34:ba:4e:e8:68:4f:42:52:8c:dd:76:52:d3:6b:
fc:8e:7b:c9:fc:c5:4c:2e:2e:56:1e:d0:9d:94:ef:
58:49:f5:90:c4:9c:72:ac:1b:51:ab:ca:e2:24:64:
2b:60:b5:d0:90:33:e3:4e:5a:28:7c:e4:ee:80:7c:
49:95:54:dc:de:e0:e1:f7:99:80:3d:71:20:4d:fd:
de:9d:82:c5:46:1c:10:8c:73:36:71:3e:5e:2b:df:
79:8f:f2:d1:d1:29:ac:14:23:38:69:62:7a:b2:5d:
b7:37:03:c7:64:3e:98:90:dd:6c:09:6f:72:a3:4d:
86:f4:aa:00:45:60:70:73:90:9a:db:87:04:70:66:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:64:BF:65:DE:30:31:A8:67:DA:34:73:10:86:FC:3A:EF:06:07
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:24:d0:c6:a9:d1:c2:e6:32:0b:43:e2:da:5b:ea:cc:1b:
37:8f:70:48:32:09:2e:66:44:a2:fb:2b:ed:51:fe:01:ef:37:
9d:83:7f:5d:cf:5e:9e:42:49:d9:e3:00:15:d0:91:68:a9:e3:
dd:00:b5:d2:8b:32:7f:9f:c0:99:ae:da:e5:7c:ad:5e:5f:9e:
c1:cd:12:a3:3f:bc:76:d4:b4:ad:f6:d6:a8:e7:ec:a2:56:48:
26:7b:a2:dc:14:3a:85:2f:5d:94:d3:45:33:24:42:1e:7e:93:
1d:e6:d6:c5:f8:a4:a7:fa:d7:c1:ca:bc:c6:75:f9:7b:72:25:
63:38:93:45:8f:4a:1a:5c:ca:63:5b:15:c3:c8:2f:a2:cf:85:
34:07:01:55:10:f5:02:31:0b:59:5f:54:0f:49:66:80:02:c0:
b5:83:ab:9b:5d:44:80:f9:c8:f5:8d:b4:08:4e:68:ff:99:04:
e5:41:82:2f:63:1f:4a:e3:f6:16:9c:ed:3c:35:51:27:6d:68:
1f:53:a0:6f:a4:0c:1d:6a:97:7e:96:5d:df:bc:d9:1d:a3:82:
8e:45:04:1f:92:50:f5:fc:b7:9c:72:d3:1e:2e:32:e8:3d:ee:
aa:c2:92:0e:53:d4:cc:ca:ba:61:3d:97:ca:9c:c0:d3:20:6c:
ea:15:00:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4Lbenfne6PLZUjfIT5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzBjZTlmODdkOWQyNzVmNmNhZTRkYzljZGZiNWQ0NDM3
ZDhjZWIwHhcNMjYwMzAxMTgwMDU3WhcNMjYwMzAyMTgwMDU3WjAzMTEwLwYDVQQD
EyhhOWIzNjRiZjY1ZGUzMDMxYTg2N2RhMzQ3MzEwODZmYzNhZWYwNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01JF4CR9UHoT6Djzc/9IBZY8Hknq
hjpsXbK2uwZUBZx7xOxfG75jT9WpDbPcODmH7V8eEf+M7vj/NJJ1aLVP3+Qo+Rx1
7vpDbuQPP8nwCeOJUKg+pPkhmGyz9OcQ30dVVSUU39APOASVHwgvayV2bvVwhL51
N1/9NLpO6GhPQlKM3XZS02v8jnvJ/MVMLi5WHtCdlO9YSfWQxJxyrBtRq8riJGQr
YLXQkDPjTloofOTugHxJlVTc3uDh95mAPXEgTf3enYLFRhwQjHM2cT5eK995j/LR
0SmsFCM4aWJ6sl23NwPHZD6YkN1sCW9yo02G9KoARWBwc5Ca24cEcGafrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmzZL9l3jAxqGfaNHMQhvw67wYHMB8GA1UdIwQY
MBaAFJbAzp+H2dJ19srk3JzftdRDfYzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjkt
NWU3N2ZhMDMzM2EzLzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjktNWU3N2ZhMDMzM2Ez
LzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbm8k0Map
0cLmMgtD4tpb6swbN49wSDIJLmZEovsr7VH+Ae83nYN/Xc9enkJJ2eMAFdCRaKnj
3QC10osyf5/Ama7a5XytXl+ewc0Soz+8dtS0rfbWqOfsolZIJnui3BQ6hS9dlNNF
MyRCHn6THebWxfikp/rXwcq8xnX5e3IlYziTRY9KGlzKY1sVw8gvos+FNAcBVRD1
AjELWV9UD0lmgALAtYOrm11EgPnI9Y20CE5o/5kE5UGCL2MfSuP2FpztPDVRJ21o
H1Ogb6QMHWqXfpZd37zZHaOCjkUEH5JQ9fy3nHLTHi4y6D3uqsKSDlPUzMq6YT2X
ypzA0yBs6hUApA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:06 2026 by rpki-client