Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: +VoCQOApSvhvun4kcfYPcxz1Kwkzj1MdphH1nF4De9g=
Subject key identifier: 72:C5:4A:31:71:DE:7B:63:56:95:CB:AF:E9:65:C9:59:1F:F2:10:66
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019FAB2C03F0A8B62B2614601222BFAF715B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 118C
Signing time: Wed 29 Jul 2026 00:00:16 +0000
Manifest this update: Wed 29 Jul 2026 00:00:16 +0000
Manifest next update: Thu 30 Jul 2026 00:00:16 +0000
Files and hashes: 1: drsnkuosbg6qvFQb_xFsNGudfnU.roa (hash: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: 3xQkQwJt9BhiZhh85StRoOIxFw1G66ad1HWDB0cxz7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:03:f0:a8:b6:2b:26:14:60:12:22:bf:af:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Jul 29 00:00:16 2026 GMT
Not After : Jul 30 00:00:16 2026 GMT
Subject: CN=72c54a3171de7b635695cbafe965c9591ff21066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:1c:1b:7a:67:7e:aa:bc:a8:38:a0:d0:fc:
db:25:6c:b5:e4:67:a3:a3:2a:4b:53:60:58:48:4f:
9d:5e:88:ea:9f:50:d0:cb:b7:26:1f:58:73:8a:6c:
3e:29:72:42:99:56:4b:86:dc:4e:41:8a:e1:be:3e:
96:79:00:0a:7e:77:62:f0:53:c3:e4:5c:b5:eb:e7:
d3:7e:50:74:44:59:ea:8e:f6:3d:87:f2:55:7b:4c:
72:d2:9e:43:71:f3:73:54:db:d4:3b:09:23:71:c1:
f4:9d:29:ee:91:24:5c:e8:0b:fe:78:70:fc:79:54:
0d:d3:b1:dc:de:e4:0a:7f:74:84:2a:a7:b0:08:97:
da:2a:f2:63:19:5a:ae:e6:ec:7d:b5:d8:9a:39:8d:
c2:b4:81:27:4c:db:7f:44:af:bd:68:96:7d:b0:ee:
04:db:61:2e:7a:b2:98:11:96:8b:d4:8c:61:ba:89:
6d:e6:39:b0:2f:e1:9a:ef:bc:c9:b5:49:03:87:16:
89:4f:dc:de:63:e0:cb:52:9b:da:52:cb:ae:04:79:
5f:d5:15:41:3b:cd:83:31:c5:ec:64:20:09:76:d4:
1d:58:fb:93:28:ce:3a:43:a1:fc:8f:0b:c4:e2:d8:
67:91:81:31:95:23:71:45:06:cc:68:33:8b:a6:4f:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C5:4A:31:71:DE:7B:63:56:95:CB:AF:E9:65:C9:59:1F:F2:10:66
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:85:b3:aa:76:a2:d4:55:09:3a:f0:3f:6f:5e:33:93:4e:
93:29:ad:bb:71:05:de:70:e7:53:55:a4:8d:01:56:4f:df:5c:
45:ae:29:41:c9:94:36:db:58:cd:e6:89:43:86:c4:9a:4a:1a:
fd:cb:e7:0f:43:a3:8e:b4:41:f4:19:af:df:ce:06:81:20:6a:
e7:e2:fa:5b:a2:7c:0a:a5:0d:75:3f:70:01:99:4c:5f:ec:12:
21:5e:45:66:55:36:fd:1b:fb:19:ad:cb:9f:ce:36:10:4e:b4:
7d:29:69:f8:26:c3:16:4e:b7:ad:82:e4:c6:dc:1a:02:3e:4f:
c5:3a:ac:c9:45:28:a8:74:e1:dd:4f:2a:0e:fa:85:22:4c:78:
e8:09:cd:66:b6:79:55:26:41:16:c3:45:ff:c2:3b:55:ae:25:
8f:b2:39:43:50:39:21:99:4f:cb:55:6c:24:ea:79:33:58:8d:
f8:87:da:a5:74:1c:b1:dd:92:65:e9:a7:60:ff:68:63:5e:0f:
d9:62:d8:2b:10:f8:ab:29:e7:93:ae:99:be:c5:4e:67:70:c5:
40:b1:3a:e6:da:21:f4:c5:87:5c:c0:56:1a:e7:21:bc:1f:fc:
bb:22:eb:10:3d:77:78:43:e1:31:cd:53:21:a7:37:3f:d0:22:
da:64:78:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLAPwqLYrJhRgEiK/r3FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzBjZTlmODdkOWQyNzVmNmNhZTRkYzljZGZiNWQ0NDM3
ZDhjZWIwHhcNMjYwNzI5MDAwMDE2WhcNMjYwNzMwMDAwMDE2WjAzMTEwLwYDVQQD
Eyg3MmM1NGEzMTcxZGU3YjYzNTY5NWNiYWZlOTY1Yzk1OTFmZjIxMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KwcG3pnfqq8qDig0PzbJWy15Gej
oypLU2BYSE+dXojqn1DQy7cmH1hzimw+KXJCmVZLhtxOQYrhvj6WeQAKfndi8FPD
5Fy16+fTflB0RFnqjvY9h/JVe0xy0p5DcfNzVNvUOwkjccH0nSnukSRc6Av+eHD8
eVQN07Hc3uQKf3SEKqewCJfaKvJjGVqu5ux9tdiaOY3CtIEnTNt/RK+9aJZ9sO4E
22EuerKYEZaL1Ixhuolt5jmwL+Ga77zJtUkDhxaJT9zeY+DLUpvaUsuuBHlf1RVB
O82DMcXsZCAJdtQdWPuTKM46Q6H8jwvE4thnkYExlSNxRQbMaDOLpk+uCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLFSjFx3ntjVpXLr+llyVkf8hBmMB8GA1UdIwQY
MBaAFJbAzp+H2dJ19srk3JzftdRDfYzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjkt
NWU3N2ZhMDMzM2EzLzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjktNWU3N2ZhMDMzM2Ez
LzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpaFs6p2
otRVCTrwP29eM5NOkymtu3EF3nDnU1WkjQFWT99cRa4pQcmUNttYzeaJQ4bEmkoa
/cvnD0OjjrRB9Bmv384GgSBq5+L6W6J8CqUNdT9wAZlMX+wSIV5FZlU2/Rv7Ga3L
n842EE60fSlp+CbDFk63rYLkxtwaAj5PxTqsyUUoqHTh3U8qDvqFIkx46AnNZrZ5
VSZBFsNF/8I7Va4lj7I5Q1A5IZlPy1VsJOp5M1iN+IfapXQcsd2SZemnYP9oY14P
2WLYKxD4qynnk66ZvsVOZ3DFQLE65toh9MWHXMBWGuchvB/8uyLrED13eEPhMc1T
Iac3P9Ai2mR4UQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:07 2026 by rpki-client