Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: hG91mDgHtGh2tRg167aReRounfDjqOHVuhsHV+YU8/o=
Subject key identifier: 33:A6:12:88:B0:CE:BA:E5:B0:1C:93:8B:0A:5B:9E:F1:A5:E6:44:5C
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A0C1B1886992E3CEBACE50CA76101BEE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 02:00:32 +0000
Manifest this update: Mon 21 Sep 2026 02:00:32 +0000
Manifest next update: Tue 22 Sep 2026 02:00:32 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: Wr9qxBuRabgsqT2JCAkz+bFLbF1rpPeqM1916SMVekw=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:88:69:92:e3:ce:ba:ce:50:ca:76:10:1b:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Sep 21 02:00:32 2026 GMT
Not After : Sep 22 02:00:32 2026 GMT
Subject: CN=33a61288b0cebae5b01c938b0a5b9ef1a5e6445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:a4:57:6f:ce:3d:dd:4a:d5:ee:74:9c:e6:
40:6a:60:b7:25:4e:ff:1f:de:3b:da:5f:e2:14:c6:
08:5d:86:bd:ad:0f:a1:ae:60:5d:f0:15:86:6e:36:
a0:a7:ee:8a:e4:4d:f6:e3:eb:c3:9e:b8:4c:96:4e:
55:b7:6a:89:60:44:31:27:43:5f:ab:07:72:be:0e:
61:bd:2c:56:5d:b7:e9:47:b3:49:ed:9a:e1:71:ac:
c8:94:43:1f:1b:6d:31:5a:e9:84:8d:69:c4:d2:ba:
c9:ee:4f:4b:6c:81:98:90:21:fa:fc:a5:83:0e:50:
7b:63:b6:ce:84:4b:fd:65:57:ca:a8:09:3a:52:49:
2a:ea:3a:5e:e6:e1:ab:b2:ed:04:3a:f9:54:b5:1c:
82:87:c1:67:c6:79:e7:26:76:b7:20:37:5c:a2:e4:
30:e0:2c:6c:b1:c0:e5:38:71:3c:7e:63:aa:10:94:
2f:11:e9:c5:95:db:32:08:c8:74:6c:d7:36:ca:95:
14:ef:df:61:65:41:4b:cd:4c:3b:9a:a9:55:6d:55:
35:e0:06:c8:d2:65:67:2d:df:e1:89:87:36:fa:5e:
4e:51:cf:2f:c9:6d:49:5b:fb:4d:d6:47:0d:d1:82:
df:0e:9f:1d:47:05:f4:bb:d1:63:d1:4e:0f:96:08:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:12:88:B0:CE:BA:E5:B0:1C:93:8B:0A:5B:9E:F1:A5:E6:44:5C
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:17:9d:d4:6d:d3:be:8f:bf:02:f9:92:61:54:18:4d:4e:4e:
83:64:8e:b8:a4:83:49:f9:9e:05:75:c5:e7:12:d5:02:22:d2:
e3:ee:89:af:9c:7a:cd:8e:fe:ac:06:a3:9e:3c:96:87:85:a7:
be:68:39:49:0d:1a:88:7f:91:62:ad:35:be:97:9c:d7:de:29:
92:53:7a:82:d3:21:f0:fc:fb:9f:6f:54:0b:8b:25:fa:51:b8:
70:3d:4e:ea:21:00:c4:52:ed:61:d1:cf:52:86:ad:a1:11:ea:
d9:c8:9b:33:18:3e:60:a0:4c:aa:02:d6:9b:a6:51:52:b5:7b:
de:99:08:81:93:0e:7f:5a:57:45:9e:41:a7:cf:f3:02:b2:94:
52:6d:a8:2e:e8:b4:9e:bf:0c:db:79:03:6b:a5:0b:69:68:57:
6f:5a:e2:11:df:a5:69:f2:94:c0:57:c8:38:e5:9c:0e:84:75:
c4:8e:73:be:61:80:81:36:84:18:8a:17:26:77:b1:74:7f:37:
24:5e:40:b8:21:91:08:21:c1:85:2d:ea:52:a0:08:b0:ea:84:
1f:25:d2:48:14:ce:a6:f8:d9:23:73:1e:d1:8e:3d:b5:15:f0:
e6:05:43:7d:3c:7b:ff:82:54:94:f0:d7:b9:10:7c:4a:ba:97:
89:5e:f1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsYhpkuPOus5QynYQG+4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3
NzViODgwHhcNMjYwOTIxMDIwMDMyWhcNMjYwOTIyMDIwMDMyWjAzMTEwLwYDVQQD
EygzM2E2MTI4OGIwY2ViYWU1YjAxYzkzOGIwYTViOWVmMWE1ZTY0NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy52kV2/OPd1K1e50nOZAamC3JU7/
H9472l/iFMYIXYa9rQ+hrmBd8BWGbjagp+6K5E324+vDnrhMlk5Vt2qJYEQxJ0Nf
qwdyvg5hvSxWXbfpR7NJ7ZrhcazIlEMfG20xWumEjWnE0rrJ7k9LbIGYkCH6/KWD
DlB7Y7bOhEv9ZVfKqAk6Ukkq6jpe5uGrsu0EOvlUtRyCh8FnxnnnJna3IDdcouQw
4CxsscDlOHE8fmOqEJQvEenFldsyCMh0bNc2ypUU799hZUFLzUw7mqlVbVU14AbI
0mVnLd/hiYc2+l5OUc8vyW1JW/tN1kcN0YLfDp8dRwX0u9Fj0U4PlggBDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOmEoiwzrrlsByTiwpbnvGl5kRcMB8GA1UdIwQY
MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt
YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx
LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxed1G3T
vo+/AvmSYVQYTU5Og2SOuKSDSfmeBXXF5xLVAiLS4+6Jr5x6zY7+rAajnjyWh4Wn
vmg5SQ0aiH+RYq01vpec194pklN6gtMh8Pz7n29UC4sl+lG4cD1O6iEAxFLtYdHP
UoatoRHq2cibMxg+YKBMqgLWm6ZRUrV73pkIgZMOf1pXRZ5Bp8/zArKUUm2oLui0
nr8M23kDa6ULaWhXb1riEd+lafKUwFfIOOWcDoR1xI5zvmGAgTaEGIoXJnexdH83
JF5AuCGRCCHBhS3qUqAIsOqEHyXSSBTOpvjZI3Me0Y49tRXw5gVDfTx7/4JUlPDX
uRB8SrqXiV7xkw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:02 2026 by rpki-client