Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: EJCRsunaiLd0cIKaoMh2pSEKyIDtmCzCg09anMoXVUM=
Subject key identifier: BB:BC:6C:76:89:09:43:92:5C:BF:69:8B:7C:58:B1:D9:1C:7D:06:D8
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019D2816C1E6462BAF56722C792A8811C8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0F33
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: 4wk9G6gIn4aYwuhM1IHla1F3g_o.roa (hash: zRDXNJfCkrvxLeiW37gj5jm7Vy6uGsNGYEbIgmJIKNY=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: I6TowQ5iev5HeNzQ8AMIlWq8qPC1olp4KbHISQkUwqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c1:e6:46:2b:af:56:72:2c:79:2a:88:11:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=bbbc6c76890943925cbf698b7c58b1d91c7d06d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:6b:05:cd:52:1a:3a:42:06:99:d5:c9:7a:
1a:00:b3:56:b5:41:c0:25:f5:73:86:a9:bc:e2:b3:
cb:fc:5b:59:fb:ee:60:ed:4f:65:b5:80:a2:9c:93:
dd:22:5f:b2:d0:96:59:d1:2c:87:f5:e4:09:21:c5:
44:fb:01:94:ac:19:44:22:24:c7:cc:01:d5:5c:df:
2e:d3:88:2c:06:21:5f:c8:af:6c:d5:fb:90:0a:49:
4f:8f:c5:25:d3:65:13:66:cb:f3:37:c7:72:e0:d8:
8e:54:02:e0:16:ee:94:2c:ed:77:3b:a1:3c:73:75:
1c:19:75:9d:37:45:01:f1:94:b3:49:6c:30:2c:8c:
01:d3:2f:3c:96:de:04:36:ea:27:a5:94:ad:8d:0c:
66:ac:df:2e:eb:b0:df:d1:40:85:8d:46:e0:10:62:
54:f4:bb:fe:b7:6f:55:85:30:9a:c1:ce:67:5e:b1:
9d:a6:11:8a:c2:dc:60:3a:2d:05:13:a4:ff:ab:ca:
4d:42:9f:12:ec:18:21:9d:27:a0:02:c5:c7:cf:89:
54:94:41:60:fb:f1:cc:43:00:c3:2b:fa:eb:af:75:
1f:1a:6d:63:76:19:48:cb:59:2a:dd:38:32:08:28:
fc:97:68:8e:db:3a:2b:33:6c:31:00:46:1f:22:3c:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:6C:76:89:09:43:92:5C:BF:69:8B:7C:58:B1:D9:1C:7D:06:D8
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:b0:3e:93:20:fc:7e:79:d2:b2:3d:79:90:c3:9c:86:38:
63:86:03:28:40:cb:96:f7:06:1e:0c:29:28:fa:85:d1:de:f3:
5c:a2:8c:58:d5:c6:5e:1e:9e:38:27:22:63:d3:eb:a5:ad:ba:
ce:34:e4:a6:62:40:95:37:b1:93:74:49:06:08:8b:e1:43:fc:
9b:4c:50:7a:09:93:d6:cb:88:24:c2:b3:b0:ff:36:83:47:1b:
0d:93:c3:f4:d4:ac:df:09:b4:46:ee:d5:a8:a7:26:1c:2e:36:
76:10:96:8b:89:95:81:a0:81:77:1d:cf:3e:4c:54:94:04:8a:
98:6e:d5:29:e4:11:d7:0e:18:c7:b1:45:5e:e5:87:63:18:a7:
00:e1:3a:6d:88:2c:f5:85:d3:e3:1f:b2:8a:3d:ea:fb:27:de:
bd:c2:6b:11:a4:5c:ce:d0:3d:64:be:eb:db:14:a8:53:7d:1d:
bc:51:74:ac:2e:3a:42:8c:52:67:20:01:26:22:13:91:33:6b:
2a:56:00:07:84:ea:87:41:3f:2f:30:c6:fc:80:64:de:d8:99:
9c:80:ab:26:f4:bf:8d:d0:1d:8f:37:c2:f0:eb:2b:19:10:7f:
b4:b2:03:19:18:fc:0b:d9:84:ae:4c:2d:c4:90:a7:cb:4a:09:
5c:dc:a8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsHmRiuvVnIseSqIEcjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0
Y2UxNDcwHhcNMjYwMzI2MDMwMTEzWhcNMjYwMzI3MDMwMTEzWjAzMTEwLwYDVQQD
EyhiYmJjNmM3Njg5MDk0MzkyNWNiZjY5OGI3YzU4YjFkOTFjN2QwNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf9rBc1SGjpCBpnVyXoaALNWtUHA
JfVzhqm84rPL/FtZ++5g7U9ltYCinJPdIl+y0JZZ0SyH9eQJIcVE+wGUrBlEIiTH
zAHVXN8u04gsBiFfyK9s1fuQCklPj8Ul02UTZsvzN8dy4NiOVALgFu6ULO13O6E8
c3UcGXWdN0UB8ZSzSWwwLIwB0y88lt4ENuonpZStjQxmrN8u67Df0UCFjUbgEGJU
9Lv+t29VhTCawc5nXrGdphGKwtxgOi0FE6T/q8pNQp8S7BghnSegAsXHz4lUlEFg
+/HMQwDDK/rrr3UfGm1jdhlIy1kq3TgyCCj8l2iO2zorM2wxAEYfIjwDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu8bHaJCUOSXL9pi3xYsdkcfQbYMB8GA1UdIwQY
MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt
NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz
LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPywPpMg
/H550rI9eZDDnIY4Y4YDKEDLlvcGHgwpKPqF0d7zXKKMWNXGXh6eOCciY9Prpa26
zjTkpmJAlTexk3RJBgiL4UP8m0xQegmT1suIJMKzsP82g0cbDZPD9NSs3wm0Ru7V
qKcmHC42dhCWi4mVgaCBdx3PPkxUlASKmG7VKeQR1w4Yx7FFXuWHYxinAOE6bYgs
9YXT4x+yij3q+yfevcJrEaRcztA9ZL7r2xSoU30dvFF0rC46QoxSZyABJiITkTNr
KlYAB4Tqh0E/LzDG/IBk3tiZnICrJvS/jdAdjzfC8OsrGRB/tLIDGRj8C9mErkwt
xJCny0oJXNyoHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:06 2026 by rpki-client