
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: J4qzy+05RpsWl6lOXsWB5k9U/fYz3VfbviQ2dAWCLHg=
Subject key identifier: 0A:E8:0A:27:F1:03:AB:B0:8F:63:26:F9:80:09:47:9E:A5:8F:DF:FE
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01A0C10CAB84EBE45E3CC1349E124ACB3CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1A7A
Signing time: Sun 20 Sep 2026 23:00:28 +0000
Manifest this update: Sun 20 Sep 2026 23:00:28 +0000
Manifest next update: Mon 21 Sep 2026 23:00:28 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: v/KsHJsZ6/FaUvBBtmukIXHDnhwYr/Z8jBFoJnTIYkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:ab:84:eb:e4:5e:3c:c1:34:9e:12:4a:cb:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Sep 20 23:00:28 2026 GMT
Not After : Sep 21 23:00:28 2026 GMT
Subject: CN=0ae80a27f103abb08f6326f98009479ea58fdffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:aa:73:25:5f:e5:2f:43:52:1e:88:14:63:
5b:2e:ba:c4:5b:f4:fd:c0:85:14:f8:e1:e2:26:d6:
bb:7f:57:90:db:f8:68:1a:4c:47:72:db:c8:2f:ef:
04:3e:66:44:81:e9:e3:6a:04:4b:00:fd:11:d6:a3:
b9:97:a5:a8:32:3a:4b:51:59:c0:f1:83:9c:fd:06:
25:54:ea:7e:8a:ab:9b:02:54:36:55:94:56:51:f5:
51:79:75:47:b9:d1:2d:f3:e7:46:7e:25:ca:9c:61:
57:f1:fc:7d:4d:ee:d4:32:b0:c3:08:91:22:91:ff:
6b:ad:4d:a9:ef:4c:44:3a:83:f2:c8:95:68:61:59:
53:09:5c:04:dd:25:b7:69:49:73:e5:87:e3:a8:7b:
3c:44:c4:51:06:41:6e:0d:f1:58:55:b3:75:31:a8:
2d:56:f4:33:6c:a9:a0:f3:95:c5:d5:2a:91:ad:03:
7e:20:10:65:12:81:a7:b2:f9:aa:c6:e1:31:22:0e:
70:93:cb:5e:58:4a:17:cb:db:25:a4:06:81:50:71:
af:98:70:8d:0a:44:7d:5a:0e:75:cf:82:1a:4e:86:
48:53:67:ed:ea:6f:98:ca:a4:80:f5:3b:ae:41:91:
49:c4:63:03:14:8d:8a:8c:f1:8d:ef:6d:6e:87:6d:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:0A:27:F1:03:AB:B0:8F:63:26:F9:80:09:47:9E:A5:8F:DF:FE
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:dc:c7:b0:e3:6e:12:f9:0d:6b:c9:7e:66:b6:6c:b6:c8:
68:eb:ce:a0:b6:cf:dc:d4:7c:f0:02:83:c9:19:8e:a4:79:1a:
93:18:6a:3e:8c:32:31:fa:4b:21:f2:c4:ae:8c:a4:d2:8a:5e:
ab:89:4e:24:96:af:00:ae:8e:6f:df:98:73:df:37:29:2b:2f:
2c:41:f0:1e:64:bb:23:31:21:c0:1b:f2:23:86:36:a2:60:4e:
3b:eb:97:ad:28:71:6d:5f:6d:bb:b3:9a:4c:6c:c5:4c:b1:0b:
6d:16:36:bd:8b:96:1d:3d:fa:49:f9:c0:47:b8:1d:43:2f:6b:
f4:00:a5:5e:6a:59:7a:f3:44:3a:b1:a6:e7:38:d9:c7:27:62:
64:95:5e:49:03:f6:55:d9:20:1d:d3:02:de:37:95:bb:dc:67:
50:3e:a1:b2:20:c9:78:35:d7:ac:cd:0d:04:cd:37:82:a6:c9:
7b:2a:a4:62:b6:4a:26:48:ca:d9:c7:e4:d3:90:af:2f:b0:4e:
8b:cb:c9:ad:13:de:55:2d:7d:a4:0d:ac:00:d8:96:d5:a4:e8:
6c:87:ce:4a:f7:1b:bc:a8:cf:6c:5d:46:6d:a8:8e:bf:7c:ba:
5a:b7:c2:7a:8c:b7:fb:c3:84:10:d5:80:46:4f:aa:2b:10:11:
8b:15:2b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDKuE6+RePME0nhJKyzziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjYwOTIwMjMwMDI4WhcNMjYwOTIxMjMwMDI4WjAzMTEwLwYDVQQD
EygwYWU4MGEyN2YxMDNhYmIwOGY2MzI2Zjk4MDA5NDc5ZWE1OGZkZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoESqcyVf5S9DUh6IFGNbLrrEW/T9
wIUU+OHiJta7f1eQ2/hoGkxHctvIL+8EPmZEgenjagRLAP0R1qO5l6WoMjpLUVnA
8YOc/QYlVOp+iqubAlQ2VZRWUfVReXVHudEt8+dGfiXKnGFX8fx9Te7UMrDDCJEi
kf9rrU2p70xEOoPyyJVoYVlTCVwE3SW3aUlz5YfjqHs8RMRRBkFuDfFYVbN1Magt
VvQzbKmg85XF1SqRrQN+IBBlEoGnsvmqxuExIg5wk8teWEoXy9slpAaBUHGvmHCN
CkR9Wg51z4IaToZIU2ft6m+YyqSA9TuuQZFJxGMDFI2KjPGN721uh21cXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAroCifxA6uwj2Mm+YAJR56lj9/+MB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZbcx7Dj
bhL5DWvJfma2bLbIaOvOoLbP3NR88AKDyRmOpHkakxhqPowyMfpLIfLEroyk0ope
q4lOJJavAK6Ob9+Yc983KSsvLEHwHmS7IzEhwBvyI4Y2omBOO+uXrShxbV9tu7Oa
TGzFTLELbRY2vYuWHT36SfnAR7gdQy9r9AClXmpZevNEOrGm5zjZxydiZJVeSQP2
VdkgHdMC3jeVu9xnUD6hsiDJeDXXrM0NBM03gqbJeyqkYrZKJkjK2cfk05CvL7BO
i8vJrRPeVS19pA2sANiW1aTobIfOSvcbvKjPbF1GbaiOv3y6WrfCeoy3+8OEENWA
Rk+qKxARixUrDQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:02:15 2026 by rpki-client