
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: 3qiXzVO8stf9f1kTOitvU2EjOos9jmzOCwL9GtT2rXw=
Subject key identifier: 93:95:99:07:80:89:89:3F:BF:14:3A:A7:0B:4B:BC:71:80:EF:DB:E1
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0C66A4420F628848D2AE57ADCB65C533A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 1A2E
Signing time: Tue 22 Sep 2026 00:00:48 +0000
Manifest this update: Tue 22 Sep 2026 00:00:48 +0000
Manifest next update: Wed 23 Sep 2026 00:00:48 +0000
Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
4: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=)
5: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=)
6: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=)
7: Bza0u1KrAMDMGupZL29e32A3MCc.roa (hash: pZiFonQx+AjzAflURZDKbh/3OCh69YGkDga9U2khExM=)
8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: AL3wrKKtLuWj5jutCfPdlzw+94xz/9cJF2HmA4jSkRc=)
10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
12: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
13: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
14: X6w9majvI_DCoEpE7YSlgjrwWBk.roa (hash: nSq/rO7rO1FgXnozv7cLPZZonavuQIUu1J8PyL3NQ+k=)
15: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=)
16: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
17: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
18: lAUTh060UnG4SYUzw748rs6F-AU.roa (hash: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=)
19: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
20: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
21: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
22: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=)
23: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
24: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
25: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:44:20:f6:28:84:8d:2a:e5:7a:dc:b6:5c:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 22 00:00:48 2026 GMT
Not After : Sep 23 00:00:48 2026 GMT
Subject: CN=939599078089893fbf143aa70b4bbc7180efdbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:95:45:02:04:96:b4:38:c9:20:a3:8e:cd:
36:92:cd:eb:6d:f8:94:77:3d:11:23:e2:ec:34:0a:
8b:28:9f:de:84:82:6c:e8:44:5e:e8:6e:5f:0e:1a:
d1:d8:7e:ba:fb:c9:2b:b6:f8:be:a6:68:ac:09:66:
1c:23:b9:ff:8d:f7:65:b8:85:2c:34:a2:35:18:74:
ad:47:52:ce:a0:10:73:cf:9b:ea:d6:45:71:59:1c:
f1:79:5c:a5:b9:3f:53:12:ef:82:a0:75:ea:a2:2a:
6a:14:2a:15:42:64:59:e5:8a:69:40:95:e5:04:6c:
c6:d7:8c:9e:35:bb:23:26:0c:45:d1:5f:e4:5b:fc:
62:de:27:13:5c:a4:31:d1:bf:a4:77:3e:11:3e:16:
a7:e3:7c:6a:71:e6:dc:75:ce:fc:59:3a:ea:4f:75:
b9:92:78:e4:a7:5e:4b:58:8c:f1:5a:ad:fb:b1:d0:
93:cc:a9:80:9b:6e:2c:db:dd:a7:8e:3d:8f:03:1c:
ff:00:87:d6:4f:f6:21:75:18:31:6b:06:88:bf:f9:
cd:d6:0a:f5:a6:42:6e:d9:88:1a:8e:65:04:6e:99:
2a:63:2d:9b:5a:06:9b:8b:1e:af:51:9c:a6:ad:bd:
7c:c1:a3:4f:07:19:57:23:fd:a2:00:1f:2a:c4:8b:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:99:07:80:89:89:3F:BF:14:3A:A7:0B:4B:BC:71:80:EF:DB:E1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2a:b5:ed:72:07:7d:94:41:62:78:dd:2e:03:07:f9:5a:3b:
cf:23:79:89:e6:2f:0e:26:47:ca:b2:76:e9:80:37:88:c3:2b:
48:44:bd:e2:d2:3a:9b:40:24:90:ba:19:7f:88:e0:55:09:84:
b4:86:40:f7:f8:55:96:db:1f:10:4a:54:4a:8b:98:73:e9:80:
3a:b8:e8:54:9e:be:83:66:b1:26:a8:bd:74:a7:f5:96:4a:dc:
c8:2e:88:80:9c:66:14:a5:f2:4f:18:a4:89:2c:59:85:71:01:
b4:64:82:a4:1b:80:3f:3d:b4:c6:a7:86:3a:77:09:3d:90:20:
d2:2f:da:72:58:09:a9:09:67:cc:fe:dc:aa:3b:f4:82:57:6b:
0a:f6:0b:9e:f0:33:11:b1:5b:10:f8:eb:ea:26:9e:13:bd:26:
67:bc:d0:c0:45:fc:6d:f3:0e:b6:af:67:67:c1:38:fa:68:00:
4d:69:1d:1a:df:13:7f:7d:98:e7:70:1a:73:31:80:86:1a:12:
dc:6e:0e:12:da:a2:ca:b0:7f:e4:29:92:93:ea:08:73:79:65:
95:ae:f3:ab:44:13:95:9b:a1:be:bb:12:15:3c:4f:b5:4e:26:
c0:48:9b:96:b6:46:7f:47:7a:53:a8:b9:fa:1e:73:7a:16:95:
e2:6b:73:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGakQg9iiEjSrlety2XFM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwOTIyMDAwMDQ4WhcNMjYwOTIzMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg5Mzk1OTkwNzgwODk4OTNmYmYxNDNhYTcwYjRiYmM3MTgwZWZkYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC+VRQIElrQ4ySCjjs02ks3rbfiU
dz0RI+LsNAqLKJ/ehIJs6ERe6G5fDhrR2H66+8krtvi+pmisCWYcI7n/jfdluIUs
NKI1GHStR1LOoBBzz5vq1kVxWRzxeVyluT9TEu+CoHXqoipqFCoVQmRZ5YppQJXl
BGzG14yeNbsjJgxF0V/kW/xi3icTXKQx0b+kdz4RPhan43xqcebcdc78WTrqT3W5
knjkp15LWIzxWq37sdCTzKmAm24s292njj2PAxz/AIfWT/YhdRgxawaIv/nN1gr1
pkJu2YgajmUEbpkqYy2bWgabix6vUZymrb18waNPBxlXI/2iAB8qxIsgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOVmQeAiYk/vxQ6pwtLvHGA79vhMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSq17XIH
fZRBYnjdLgMH+Vo7zyN5ieYvDiZHyrJ26YA3iMMrSES94tI6m0AkkLoZf4jgVQmE
tIZA9/hVltsfEEpUSouYc+mAOrjoVJ6+g2axJqi9dKf1lkrcyC6IgJxmFKXyTxik
iSxZhXEBtGSCpBuAPz20xqeGOncJPZAg0i/aclgJqQlnzP7cqjv0gldrCvYLnvAz
EbFbEPjr6iaeE70mZ7zQwEX8bfMOtq9nZ8E4+mgATWkdGt8Tf32Y53AaczGAhhoS
3G4OEtqiyrB/5CmSk+oIc3llla7zq0QTlZuhvrsSFTxPtU4mwEiblrZGf0d6U6i5
+h5zehaV4mtzGQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:07 2026 by rpki-client