Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 2mDcRGFAszBkj/5SWaOs0sKSARL/lM4WsLYHc2h+z+k=
Subject key identifier: 24:5A:60:56:10:B0:AB:4B:7E:FA:E7:AA:2C:E9:76:51:A6:04:65:97
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01A0D796643366C7967E05E413FDB45D0AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 194F
Signing time: Fri 25 Sep 2026 08:02:32 +0000
Manifest this update: Fri 25 Sep 2026 08:02:32 +0000
Manifest next update: Sat 26 Sep 2026 08:02:32 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: E/LaXIGp5iqUDVticR7x8XMQOo8w9LLgoMEME5UnwIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:64:33:66:c7:96:7e:05:e4:13:fd:b4:5d:0a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Sep 25 08:02:32 2026 GMT
Not After : Sep 26 08:02:32 2026 GMT
Subject: CN=245a605610b0ab4b7efae7aa2ce97651a6046597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:fc:02:f6:b3:66:02:3c:09:31:bf:ab:2a:
5e:2e:14:75:54:f0:b5:3a:a0:d8:72:50:97:3f:e6:
d8:16:43:d6:c7:88:0b:a2:a6:36:8f:f0:4b:e3:28:
ca:b9:aa:63:91:04:f8:f0:c1:52:08:41:cd:41:1d:
9d:ca:d2:39:97:76:7f:22:58:f6:b9:df:e0:20:a2:
c6:5a:cb:47:7b:d4:d1:2f:58:2c:6a:36:39:92:a5:
30:e6:32:ed:5e:b1:f7:99:bc:3c:e3:47:0b:11:d3:
2a:f3:fd:62:26:5b:4b:80:cf:c7:da:02:9e:4a:72:
11:df:3a:98:2a:cb:ab:5e:e8:90:6f:13:c7:fe:ef:
1b:aa:7f:1b:89:cd:20:76:d0:e5:6b:a1:0b:48:00:
f5:dc:04:a0:6f:54:e9:4b:dc:4b:6b:e2:b3:8f:6c:
9d:fb:d7:2d:24:d2:53:a1:a0:ee:2d:cc:e3:d1:22:
b8:4e:49:b2:71:a5:78:59:1f:c7:ca:40:87:0a:80:
26:95:1a:8b:b9:b2:b4:42:6e:2d:cd:73:51:79:e5:
4b:ae:6b:29:f9:ae:6f:47:9c:78:c0:5c:28:28:8d:
5a:6a:6a:91:b3:4f:41:12:d1:6f:32:5c:b5:e2:bf:
65:2e:fc:d0:c5:65:0b:7a:23:25:24:cf:06:94:a8:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:60:56:10:B0:AB:4B:7E:FA:E7:AA:2C:E9:76:51:A6:04:65:97
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:36:cd:9e:15:ff:79:cb:4f:ef:06:4f:06:9c:78:ce:fa:
11:e4:61:88:82:8b:cb:22:b7:f1:63:4d:5b:35:fa:d5:11:ab:
cc:14:94:ea:18:49:66:8a:8d:63:17:1e:d5:28:06:41:30:b0:
63:91:52:29:5b:15:04:4b:82:ea:85:e9:c8:c5:cf:7e:a2:3c:
64:21:bf:b5:fc:6d:53:89:c6:e9:2c:5a:61:12:67:90:39:d6:
6c:31:7e:ef:5c:4e:96:ae:a9:3d:b1:ea:99:27:93:0c:55:d6:
6d:3b:07:2e:aa:9c:27:67:bc:5b:42:6d:35:45:18:83:36:ba:
23:ff:17:3a:a6:23:5f:a5:5c:40:da:61:d5:ec:f3:0f:68:21:
ff:cb:b6:15:89:03:7f:b8:cb:3b:30:cb:cd:6f:dc:c9:d1:5b:
63:6c:83:6b:3d:bd:19:f8:0d:55:4e:e5:7a:e4:4e:bc:c7:ed:
07:a2:57:1d:e2:08:2c:f4:c5:80:d9:57:52:e0:8f:16:50:06:
a6:9f:95:b0:b2:2f:02:97:b1:01:a6:c7:84:0d:9e:d6:ed:26:
7a:26:01:30:47:3a:52:e4:a7:ee:0c:e9:5e:6d:13:f5:1b:84:
23:98:eb:ac:3b:47:09:2e:2b:9b:aa:4b:88:95:ff:6a:62:4b:
8a:65:83:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlmQzZseWfgXkE/20XQqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjYwOTI1MDgwMjMyWhcNMjYwOTI2MDgwMjMyWjAzMTEwLwYDVQQD
EygyNDVhNjA1NjEwYjBhYjRiN2VmYWU3YWEyY2U5NzY1MWE2MDQ2NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o38AvazZgI8CTG/qypeLhR1VPC1
OqDYclCXP+bYFkPWx4gLoqY2j/BL4yjKuapjkQT48MFSCEHNQR2dytI5l3Z/Ilj2
ud/gIKLGWstHe9TRL1gsajY5kqUw5jLtXrH3mbw840cLEdMq8/1iJltLgM/H2gKe
SnIR3zqYKsurXuiQbxPH/u8bqn8bic0gdtDla6ELSAD13ASgb1TpS9xLa+Kzj2yd
+9ctJNJToaDuLczj0SK4TkmycaV4WR/HykCHCoAmlRqLubK0Qm4tzXNReeVLrmsp
+a5vR5x4wFwoKI1aamqRs09BEtFvMly14r9lLvzQxWULeiMlJM8GlKgY8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRaYFYQsKtLfvrnqizpdlGmBGWXMB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzY2zZ4V
/3nLT+8GTwaceM76EeRhiIKLyyK38WNNWzX61RGrzBSU6hhJZoqNYxce1SgGQTCw
Y5FSKVsVBEuC6oXpyMXPfqI8ZCG/tfxtU4nG6SxaYRJnkDnWbDF+71xOlq6pPbHq
mSeTDFXWbTsHLqqcJ2e8W0JtNUUYgza6I/8XOqYjX6VcQNph1ezzD2gh/8u2FYkD
f7jLOzDLzW/cydFbY2yDaz29GfgNVU7leuROvMftB6JXHeIILPTFgNlXUuCPFlAG
pp+VsLIvApexAabHhA2e1u0meiYBMEc6UuSn7gzpXm0T9RuEI5jrrDtHCS4rm6pL
iJX/amJLimWDPQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:27:18 2026 by rpki-client