Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: FDUuWDXHmTGbuVtrEbsYilFx6lkJarcDg57OfMMeeOM=
Subject key identifier: A1:4D:A7:96:67:00:E2:F7:01:5C:10:F2:E7:B3:80:08:68:EF:A0:40
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 01A1DCB90984DA8B478081D9944A4839EE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 01:01:16 +0000
Manifest this update: Sun 15 Nov 2026 01:01:16 +0000
Manifest next update: Mon 16 Nov 2026 01:01:16 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: 2ZYmXFjqgGS/7LAH4DtIA5j52X47DK/3+HXRyyqPROI=)
2: OsbNeDemf33I6qy3k7S6aVsfSb4.roa (hash: buqoADQn3zwLUm6WlH1oPTj1EbKPGWnckzo2lLMt3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:09:84:da:8b:47:80:81:d9:94:4a:48:39:ee:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Nov 15 01:01:16 2026 GMT
Not After : Nov 16 01:01:16 2026 GMT
Subject: CN=a14da7966700e2f7015c10f2e7b3800868efa040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:72:b4:bc:59:6f:ba:3e:0a:5e:d3:b3:cd:
e2:ed:09:9c:e6:7a:2e:bd:24:40:fd:8b:fa:96:fa:
4b:9f:79:5f:fd:2c:21:3e:40:30:77:45:ed:34:83:
da:b6:e7:2c:34:21:ce:f2:20:90:4d:cc:b9:92:96:
27:e7:f0:d2:e5:f6:35:82:1f:a6:82:14:20:4b:50:
39:07:e1:62:bc:f0:a9:5b:5c:30:84:12:13:62:d4:
ae:f4:40:60:1b:16:4c:84:d5:d8:f2:95:43:cb:82:
51:92:f9:1f:36:fe:8f:38:54:66:d8:56:6e:9b:12:
eb:f7:9e:4a:b4:60:63:51:70:f4:66:57:c3:d4:09:
ef:11:a8:e3:87:29:a2:c3:6e:3d:96:bd:55:eb:d7:
f9:68:4f:62:ab:04:e6:11:a4:1a:4f:37:8c:c6:72:
41:90:bc:c2:6e:0b:6e:73:5f:81:c3:bd:27:47:06:
84:5d:82:69:4f:0a:a4:2f:61:9f:68:a3:53:e7:40:
5d:7f:05:d9:7a:07:71:0c:e8:00:68:fc:68:ac:9f:
87:7c:80:dc:51:f5:22:ea:4e:c3:84:f3:f3:c1:6a:
50:70:73:33:05:48:01:57:9b:54:53:d2:81:41:2c:
2f:07:84:a8:18:ce:a6:d8:1b:59:e1:95:b8:83:02:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:A7:96:67:00:E2:F7:01:5C:10:F2:E7:B3:80:08:68:EF:A0:40
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dc:c8:3b:91:47:dd:48:04:9a:07:e9:ac:57:5e:28:1d:eb:
3b:49:8d:bd:24:33:63:b4:08:a4:09:3d:30:81:0a:74:20:8c:
70:4a:ae:cb:11:ac:bd:b9:48:d5:2e:d8:f2:46:2c:a2:0e:b9:
96:e7:e2:5f:36:44:3e:21:b3:45:81:97:4b:53:39:3f:08:6b:
08:f7:6c:ea:cd:d8:0c:d5:b8:3d:ab:80:99:1f:41:51:49:f2:
e5:58:21:5a:dc:8a:7f:d1:45:75:d7:ad:5c:c1:fa:61:f5:16:
2d:dd:90:eb:68:70:a8:21:f8:75:1e:1f:1b:2f:cf:d3:9f:2a:
c4:1c:65:88:e5:3e:f7:a8:cf:a3:36:d2:9c:53:8e:6b:41:0e:
70:cc:57:8e:3b:27:34:c9:31:79:c2:73:c6:a0:ba:60:1e:97:
a9:5c:03:55:6d:d8:4a:27:0e:83:e4:40:bc:ea:e0:c4:36:97:
4d:0f:65:b2:61:25:78:ea:fb:38:f2:bc:8b:96:6c:a6:66:eb:
48:67:f1:be:97:ca:9c:29:e7:a4:37:6f:68:2b:15:27:1f:85:
35:8e:d0:6c:46:4c:c0:18:ec:10:e1:8f:94:91:6b:e0:6c:1a:
fb:b5:e2:ac:33:23:d9:a1:cc:0b:86:02:20:ff:db:28:cc:e4:
da:3f:e1:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuQmE2otHgIHZlEpIOe5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk
ODIwNGUwHhcNMjYxMTE1MDEwMTE2WhcNMjYxMTE2MDEwMTE2WjAzMTEwLwYDVQQD
EyhhMTRkYTc5NjY3MDBlMmY3MDE1YzEwZjJlN2IzODAwODY4ZWZhMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0pytLxZb7o+Cl7Ts83i7Qmc5nou
vSRA/Yv6lvpLn3lf/SwhPkAwd0XtNIPatucsNCHO8iCQTcy5kpYn5/DS5fY1gh+m
ghQgS1A5B+FivPCpW1wwhBITYtSu9EBgGxZMhNXY8pVDy4JRkvkfNv6POFRm2FZu
mxLr955KtGBjUXD0ZlfD1AnvEajjhymiw249lr1V69f5aE9iqwTmEaQaTzeMxnJB
kLzCbgtuc1+Bw70nRwaEXYJpTwqkL2GfaKNT50BdfwXZegdxDOgAaPxorJ+HfIDc
UfUi6k7DhPPzwWpQcHMzBUgBV5tUU9KBQSwvB4SoGM6m2BtZ4ZW4gwLoYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFNp5ZnAOL3AVwQ8uezgAho76BAMB8GA1UdIwQY
MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct
ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx
LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNzIO5FH
3UgEmgfprFdeKB3rO0mNvSQzY7QIpAk9MIEKdCCMcEquyxGsvblI1S7Y8kYsog65
lufiXzZEPiGzRYGXS1M5PwhrCPds6s3YDNW4PauAmR9BUUny5VghWtyKf9FFddet
XMH6YfUWLd2Q62hwqCH4dR4fGy/P058qxBxliOU+96jPozbSnFOOa0EOcMxXjjsn
NMkxecJzxqC6YB6XqVwDVW3YSicOg+RAvOrgxDaXTQ9lsmEleOr7OPK8i5Zspmbr
SGfxvpfKnCnnpDdvaCsVJx+FNY7QbEZMwBjsEOGPlJFr4Gwa+7XirDMj2aHMC4YC
IP/bKMzk2j/hLQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:14 2026 by rpki-client