Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: VqoCR0ZN7hZ/vGA2ppvm96bnxY9GlC8IQzKlfZecbBE=
Subject key identifier: CC:81:A4:2C:50:2B:B1:3C:B5:90:CE:C3:3C:73:3E:C6:82:F6:40:6E
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019EC17F9E675029BCBCB0A56FA3E696C35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 1113
Signing time: Sat 13 Jun 2026 15:00:26 +0000
Manifest this update: Sat 13 Jun 2026 15:00:26 +0000
Manifest next update: Sun 14 Jun 2026 15:00:26 +0000
Files and hashes: 1: drsnkuosbg6qvFQb_xFsNGudfnU.roa (hash: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: iM61rcvS0NNI4Po/ELarMVoPDf1glU+ZhLdZmFivAn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:9e:67:50:29:bc:bc:b0:a5:6f:a3:e6:96:c3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Jun 13 15:00:26 2026 GMT
Not After : Jun 14 15:00:26 2026 GMT
Subject: CN=cc81a42c502bb13cb590cec33c733ec682f6406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:51:b1:40:2a:ff:78:c5:0c:7c:19:c8:22:
bc:0a:c6:33:99:73:2c:77:ea:ed:24:2c:b6:fb:1a:
2f:c3:61:ec:ce:50:23:a4:7f:6c:14:a9:d4:9c:6f:
bf:9c:2d:6a:e7:db:30:ab:74:fd:1f:58:c8:a3:47:
6e:3d:a7:0e:3e:26:b3:58:b6:d6:3f:85:f4:4f:0d:
61:b9:97:58:0f:13:83:12:d5:32:19:27:dc:49:38:
67:00:0f:84:7f:25:a3:1c:9f:a4:59:9b:91:b5:d3:
f1:c3:4e:9d:8c:ef:b6:31:77:9b:dc:79:75:ad:9c:
9c:2d:16:fb:32:23:27:93:bb:19:c4:d0:6a:c9:ed:
b9:c5:99:f2:31:b8:3f:9b:41:90:34:a7:8a:cb:a3:
13:01:1e:01:10:94:80:b1:67:af:48:5f:4d:12:a4:
62:0b:30:48:1e:d4:14:81:1f:29:0e:76:38:cf:8e:
7c:49:e3:8c:ba:1b:fe:d7:98:8a:4c:aa:58:55:7c:
62:43:39:ae:fc:7b:9f:1e:85:51:9c:ea:b3:39:84:
94:fc:f2:79:5e:e3:65:34:79:dc:75:63:8f:65:ae:
26:dc:03:ad:6f:2b:0b:62:ae:38:60:a7:bb:13:08:
78:93:82:31:53:a4:e5:cc:f5:04:cf:57:b6:89:fa:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:A4:2C:50:2B:B1:3C:B5:90:CE:C3:3C:73:3E:C6:82:F6:40:6E
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:03:84:8b:77:7c:6f:c7:68:df:9f:96:13:c0:2c:fb:57:fd:
e9:cf:1f:24:af:44:37:84:ef:6e:02:9b:ba:54:bb:e6:5e:bd:
9a:26:2a:7e:78:23:fc:61:51:e2:4e:34:62:09:87:51:fb:9c:
e1:8b:06:64:7c:6a:11:96:fd:b5:7c:35:91:2a:b8:bf:10:8e:
44:b0:aa:fa:51:53:85:7d:02:ef:8c:9d:93:86:82:c8:6b:c0:
59:66:f7:47:8a:95:dc:4e:b2:80:f0:3e:0e:15:a3:4f:37:65:
31:77:62:25:c1:2e:c0:82:a3:85:87:52:6a:16:3a:7d:c6:82:
32:bc:7c:cd:1f:3f:07:cc:a9:65:71:f1:51:be:47:6f:d4:43:
10:20:08:8e:d2:fe:be:c5:06:37:03:b6:bc:e4:f5:5d:84:ed:
ac:2a:43:ac:8a:3d:08:09:9f:5d:41:78:6d:df:7d:20:08:84:
8b:36:7f:5e:6a:0a:ab:0f:38:d2:46:76:6e:2f:ff:0b:14:f6:
d9:45:90:cf:94:21:de:4d:70:12:31:9a:b3:03:94:40:a2:9a:
f3:0b:61:f4:28:d1:d5:dc:04:05:65:3c:f6:5e:46:45:6d:9b:
91:40:fa:87:b0:de:08:1d:ca:6f:88:6e:c6:83:fa:91:9d:18:
03:a4:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:34:43 2026 by rpki-client