Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: khonksxMSItrxnV9ASiwjQ93UVk/gHTitaS9rdM16jU=
Subject key identifier: B5:4E:08:8B:FA:CF:84:C5:2E:F9:70:88:B8:0F:20:7B:4B:B8:49:5C
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 01A0C5FC01753888DC5FCF34B1E8A4DA1930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 0451
Signing time: Mon 21 Sep 2026 22:00:21 +0000
Manifest this update: Mon 21 Sep 2026 22:00:21 +0000
Manifest next update: Tue 22 Sep 2026 22:00:21 +0000
Files and hashes: 1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: qyeKN29bbABvgt/E5kb2atFhvyQguxuOl2wGIb6KmMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:01:75:38:88:dc:5f:cf:34:b1:e8:a4:da:19:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Sep 21 22:00:21 2026 GMT
Not After : Sep 22 22:00:21 2026 GMT
Subject: CN=b54e088bfacf84c52ef97088b80f207b4bb8495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:19:d7:7e:a8:b3:2c:90:12:2a:b2:50:6b:
89:89:2e:bb:05:99:b8:c6:90:6b:4c:29:d3:d0:8b:
62:1f:51:f6:5c:4a:27:b3:b6:c9:3c:22:ec:06:15:
f1:50:a8:e9:32:1d:bb:d2:0e:65:9d:cd:e6:71:85:
85:6e:1a:22:ca:20:2c:f9:29:42:ed:61:98:c3:fd:
15:de:47:d2:b0:73:ac:bc:9f:2f:bb:22:b6:6c:db:
1b:a8:eb:77:09:7a:a5:5d:1e:31:eb:e5:d6:6b:fb:
f0:d4:58:3b:67:4c:f4:ae:1d:e2:d6:28:c7:ae:ed:
91:c1:96:df:b9:e5:a8:1b:cc:2b:2a:17:f6:18:07:
81:fe:1b:cb:05:6a:e0:49:a0:4f:07:11:f9:a0:ec:
fd:1a:18:99:fb:aa:2a:50:ea:b3:0f:1f:23:ff:cf:
e6:04:cb:42:5d:fe:b5:54:c7:1c:5a:6d:ad:3e:81:
1b:79:8e:f6:74:18:60:2d:87:45:26:d4:fc:bf:12:
3a:ec:ec:7e:b2:bb:77:c6:20:9f:07:15:dc:a0:5c:
74:b4:b8:f0:49:ff:c5:b8:9d:fc:4e:c2:e5:d8:56:
26:e5:97:73:0b:a4:13:61:2f:69:f3:37:52:aa:99:
60:ad:d9:e0:c6:2c:9b:6f:28:4b:22:d8:73:75:df:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:08:8B:FA:CF:84:C5:2E:F9:70:88:B8:0F:20:7B:4B:B8:49:5C
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:2e:ec:61:b2:35:26:9d:25:40:2f:57:9d:7b:33:cb:69:
fd:69:db:dc:66:2b:63:60:d2:f5:61:ba:23:4d:62:25:a6:eb:
e9:09:14:e1:93:da:10:2b:63:b2:57:ec:2d:c0:f1:21:32:ef:
df:63:cc:dd:40:38:71:4a:3e:93:f6:d4:3d:f8:e1:e2:7f:c2:
06:77:a7:72:c9:43:02:a9:dc:58:81:33:b7:45:4e:c0:50:9f:
c2:be:d4:28:c5:67:dc:cd:69:8e:ac:98:96:ca:62:13:d3:51:
3b:52:d8:0f:c4:68:a9:14:f2:3e:f6:a2:12:26:cf:0d:87:9b:
5a:2e:13:dd:65:2b:39:05:78:5e:41:28:c9:c5:c4:d9:93:60:
36:2b:ac:4f:a4:8b:43:30:5f:f1:e7:22:a9:66:32:85:0e:c3:
ef:86:73:5c:66:95:df:15:8e:4d:03:6e:f2:95:f3:27:dc:3a:
ec:00:3d:7d:32:31:af:98:74:1c:b9:ea:c1:0a:19:6c:a4:0c:
15:d8:63:88:9a:02:9a:f6:82:c1:04:8a:0b:dd:02:ba:ec:b8:
c0:81:8c:f2:7a:fa:d6:e2:48:0f:32:3c:e4:3b:3b:90:82:c0:
12:53:a7:47:b9:04:40:6d:62:a0:1c:f5:c0:6e:23:21:0d:a4:
5f:5e:49:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/AF1OIjcX880seik2hkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz
ODYzNGYwHhcNMjYwOTIxMjIwMDIxWhcNMjYwOTIyMjIwMDIxWjAzMTEwLwYDVQQD
EyhiNTRlMDg4YmZhY2Y4NGM1MmVmOTcwODhiODBmMjA3YjRiYjg0OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRAZ136osyyQEiqyUGuJiS67BZm4
xpBrTCnT0ItiH1H2XEons7bJPCLsBhXxUKjpMh270g5lnc3mcYWFbhoiyiAs+SlC
7WGYw/0V3kfSsHOsvJ8vuyK2bNsbqOt3CXqlXR4x6+XWa/vw1Fg7Z0z0rh3i1ijH
ru2RwZbfueWoG8wrKhf2GAeB/hvLBWrgSaBPBxH5oOz9GhiZ+6oqUOqzDx8j/8/m
BMtCXf61VMccWm2tPoEbeY72dBhgLYdFJtT8vxI67Ox+srt3xiCfBxXcoFx0tLjw
Sf/FuJ38TsLl2FYm5ZdzC6QTYS9p8zdSqplgrdngxiybbyhLIthzdd/JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVOCIv6z4TFLvlwiLgPIHtLuElcMB8GA1UdIwQY
MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt
OWNlZjkxN2I4ZTM3LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3
LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe8u7GGy
NSadJUAvV517M8tp/Wnb3GYrY2DS9WG6I01iJabr6QkU4ZPaECtjslfsLcDxITLv
32PM3UA4cUo+k/bUPfjh4n/CBnencslDAqncWIEzt0VOwFCfwr7UKMVn3M1pjqyY
lspiE9NRO1LYD8RoqRTyPvaiEibPDYebWi4T3WUrOQV4XkEoycXE2ZNgNiusT6SL
QzBf8eciqWYyhQ7D74ZzXGaV3xWOTQNu8pXzJ9w67AA9fTIxr5h0HLnqwQoZbKQM
FdhjiJoCmvaCwQSKC90Cuuy4wIGM8nr61uJIDzI85Ds7kILAElOnR7kEQG1ioBz1
wG4jIQ2kX15JXQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:51:56 2026 by rpki-client