Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: 6MAbGOe7eUHpnrGRhxj5wsNseSdJKLfqYgCvRfbMohw=
Subject key identifier: 9B:25:4E:8A:47:84:15:A9:ED:BF:77:A3:B9:7B:AB:95:FC:8D:59:2D
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01A0D011C117DC1DD3385165041148CAF6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 18B4
Signing time: Wed 23 Sep 2026 21:00:19 +0000
Manifest this update: Wed 23 Sep 2026 21:00:19 +0000
Manifest next update: Thu 24 Sep 2026 21:00:19 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: gVYHq2esDcdPAldMtwxr60dbMhA4Hx1GWjqvm8MH/ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c1:17:dc:1d:d3:38:51:65:04:11:48:ca:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Sep 23 21:00:19 2026 GMT
Not After : Sep 24 21:00:19 2026 GMT
Subject: CN=9b254e8a478415a9edbf77a3b97bab95fc8d592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:07:fe:2b:89:26:cd:ae:bc:9c:bc:73:c8:
6e:70:89:05:81:3b:d0:71:ee:2a:f9:3c:27:3b:a9:
2f:da:2d:1d:8a:96:f1:c8:c3:94:82:c8:22:66:28:
5a:15:38:15:33:4c:ed:2a:b6:2e:ca:24:5e:e0:bb:
97:78:e4:05:bc:0d:0e:c3:17:51:a6:47:0b:89:42:
a4:00:90:ba:1a:14:2d:e9:57:04:5a:d3:9c:1a:3b:
71:69:94:62:e2:96:12:be:95:cd:dd:6e:68:1c:ff:
4d:29:51:27:3a:98:75:fe:b2:d4:70:41:7c:a7:6d:
83:17:68:08:df:10:b2:18:77:a9:7c:c1:25:8f:0a:
b8:16:95:1f:68:cc:c8:38:8c:f2:33:07:00:e0:d0:
12:2f:c6:f9:3b:4f:f7:e6:be:12:ee:4f:27:77:76:
2b:a2:a5:2f:9f:62:5f:63:c5:c2:48:6a:5f:7a:71:
d9:3a:97:d5:cf:9e:2f:2f:28:f3:aa:4c:16:78:e2:
67:c5:9a:f3:d4:41:c6:10:52:05:60:28:15:73:0a:
51:53:e2:ae:5a:e6:33:fa:54:03:ab:14:c0:ff:da:
9b:d2:3b:0c:83:e1:c3:d6:99:5b:2f:e7:03:da:0c:
21:60:4d:4f:00:18:ae:99:71:3a:e7:2c:84:e5:f1:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:4E:8A:47:84:15:A9:ED:BF:77:A3:B9:7B:AB:95:FC:8D:59:2D
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a5:a8:83:1d:8e:29:29:6c:3e:60:ba:1e:0d:d7:5e:68:83:
45:cc:00:2c:76:f6:5c:15:87:65:9b:75:f3:27:c0:3c:fd:c9:
6d:30:cc:91:aa:ac:63:4f:3f:a9:12:f8:2f:be:bc:37:b3:7c:
af:ef:2b:fe:bf:a2:6e:fe:c5:34:4b:c3:f4:68:13:5e:5e:50:
1a:18:ba:f6:ba:c2:67:78:84:63:54:50:b2:c2:5b:a9:6f:fc:
ec:d7:4b:f4:2a:7f:ae:ca:79:61:78:2b:77:80:9a:5f:c0:fc:
3c:54:83:81:53:71:e7:d1:48:bb:93:d0:14:f3:58:96:58:6d:
f7:cd:23:9f:fc:4c:8b:72:b7:54:2f:ba:62:4f:b1:bf:d9:b8:
39:0f:00:0d:89:30:22:0b:49:13:ad:b7:3d:e8:5f:bb:f2:41:
17:4d:c8:a4:5a:32:df:21:07:a9:1b:03:c9:31:4b:5d:e6:fb:
75:02:38:78:3f:2a:a4:30:80:54:df:a0:56:35:b7:2e:e6:2e:
62:71:f3:0f:9b:d2:76:81:50:3a:61:ff:e0:a8:5f:bc:54:76:
18:af:c9:8f:a8:91:e3:bd:cd:1b:13:f2:6f:ec:43:ca:61:9f:
8f:10:42:38:9a:8c:6b:fa:62:65:5c:4c:04:55:94:a1:c0:73:
2c:3b:5a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEcEX3B3TOFFlBBFIyvbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjYwOTIzMjEwMDE5WhcNMjYwOTI0MjEwMDE5WjAzMTEwLwYDVQQD
Eyg5YjI1NGU4YTQ3ODQxNWE5ZWRiZjc3YTNiOTdiYWI5NWZjOGQ1OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4H/iuJJs2uvJy8c8hucIkFgTvQ
ce4q+TwnO6kv2i0dipbxyMOUgsgiZihaFTgVM0ztKrYuyiRe4LuXeOQFvA0OwxdR
pkcLiUKkAJC6GhQt6VcEWtOcGjtxaZRi4pYSvpXN3W5oHP9NKVEnOph1/rLUcEF8
p22DF2gI3xCyGHepfMEljwq4FpUfaMzIOIzyMwcA4NASL8b5O0/35r4S7k8nd3Yr
oqUvn2JfY8XCSGpfenHZOpfVz54vLyjzqkwWeOJnxZrz1EHGEFIFYCgVcwpRU+Ku
WuYz+lQDqxTA/9qb0jsMg+HD1plbL+cD2gwhYE1PABiumXE65yyE5fHUAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJslTopHhBWp7b93o7l7q5X8jVktMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6Wogx2O
KSlsPmC6Hg3XXmiDRcwALHb2XBWHZZt18yfAPP3JbTDMkaqsY08/qRL4L768N7N8
r+8r/r+ibv7FNEvD9GgTXl5QGhi69rrCZ3iEY1RQssJbqW/87NdL9Cp/rsp5YXgr
d4CaX8D8PFSDgVNx59FIu5PQFPNYllht980jn/xMi3K3VC+6Yk+xv9m4OQ8ADYkw
IgtJE623Pehfu/JBF03IpFoy3yEHqRsDyTFLXeb7dQI4eD8qpDCAVN+gVjW3LuYu
YnHzD5vSdoFQOmH/4KhfvFR2GK/Jj6iR473NGxPyb+xDymGfjxBCOJqMa/piZVxM
BFWUocBzLDtasQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:50 2026 by rpki-client