Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: iqFmtp0S3VoBpj64zAUCpNYfQ+C0Nqd1wYLVI7WXzQU=
Subject key identifier: 02:08:7A:9C:FB:BC:3C:22:A2:7A:C2:80:9D:3C:19:2B:F2:16:28:B2
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019D27DF621F6F2DE45D3CF4A9BD74487F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0B69
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: 1EZE1VFle3pJk-oWHPrHHxhMMXA.roa (hash: zAz64MVhsrxCuG6UwDUxcbTbEY8PQpGcwky1pjaIQ3o=)
2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: FKeuj+Pnhs/BzlTQ52YNwnWReG2bnixdjJFbl+Jrqco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:62:1f:6f:2d:e4:5d:3c:f4:a9:bd:74:48:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=02087a9cfbbc3c22a27ac2809d3c192bf21628b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:18:5c:43:62:78:81:d1:ab:85:ed:fa:9e:
23:d4:43:84:10:1e:5e:ba:9e:90:6e:03:fe:35:80:
42:75:b7:43:50:f0:ab:72:71:cd:e1:7e:a3:0f:fc:
cb:4b:dd:e3:4b:b1:42:7c:b8:a3:c4:5f:eb:ad:67:
97:35:07:50:3c:a1:08:d4:4e:da:7a:b9:1b:0a:b8:
5e:f2:22:c2:1f:e4:29:89:6d:f0:72:47:5d:89:fe:
92:30:4d:21:4c:6d:cd:a1:a3:80:eb:4e:0e:ff:33:
cc:b5:ff:9b:7a:b9:7b:71:98:00:1e:73:96:d1:88:
6d:a3:b0:0e:45:a0:b1:af:b5:89:57:dd:a3:13:42:
67:ac:50:61:e4:f4:c8:64:ca:1c:ca:66:f5:88:a2:
5f:7b:a0:38:3c:9d:ff:85:ca:12:d6:36:ad:87:82:
1f:ee:92:3c:35:2d:ae:78:04:40:cf:c4:bb:a3:20:
d5:b6:1a:1e:e9:6e:87:25:6a:27:0f:e2:93:e2:05:
f3:ee:ef:54:c6:4b:88:fc:02:20:84:d7:d4:f7:cd:
0d:65:a1:19:39:11:49:38:31:9b:e7:6e:29:73:91:
a8:10:03:f1:c9:ee:68:e4:95:a7:70:41:00:f1:df:
73:26:50:ed:7f:f2:ee:28:8f:31:04:47:36:e6:d7:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:7A:9C:FB:BC:3C:22:A2:7A:C2:80:9D:3C:19:2B:F2:16:28:B2
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fb:49:8d:c0:84:e0:f0:91:d4:7c:f5:c9:d8:0a:99:ec:6c:
b7:71:d3:7e:02:20:41:5e:1b:8c:3a:b7:75:55:0e:1e:bf:76:
06:41:ff:1a:21:51:01:a0:4b:87:34:ed:19:bf:33:5e:b4:31:
c6:42:30:2a:f9:cc:c3:19:e0:b3:4e:a6:4b:c9:31:7e:40:31:
af:87:1e:81:5c:fe:72:eb:4c:51:52:03:6c:1e:95:2f:33:b3:
15:e0:92:d3:99:fb:66:d5:55:6e:12:be:38:90:9d:e2:7f:1a:
8c:10:b8:c2:c7:6a:73:a6:0f:57:c3:28:18:70:ec:60:de:af:
62:d9:98:ac:ec:24:cb:03:11:17:d1:7b:ab:9e:48:2c:48:b8:
9b:ae:3f:c5:e0:51:ae:0c:6c:86:fb:82:31:ce:32:e9:75:e9:
7e:e6:d9:59:85:13:51:da:62:7d:38:c4:d5:e3:de:5c:25:b0:
25:6f:b1:12:e9:e0:02:20:67:f8:74:e6:a6:4e:9b:0a:17:63:
06:c6:9d:7e:80:72:fe:97:6a:3b:33:3c:16:97:1e:78:28:05:
16:ac:c8:bd:8a:9d:06:df:08:f9:dd:31:e9:40:c7:66:e5:14:
99:da:d0:1f:1b:4d:79:9c:5c:57:57:cf:55:aa:35:d9:40:8b:
8e:d0:5d:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32Ifby3kXTz0qb10SH8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjYwMzI2MDIwMDQ0WhcNMjYwMzI3MDIwMDQ0WjAzMTEwLwYDVQQD
EygwMjA4N2E5Y2ZiYmMzYzIyYTI3YWMyODA5ZDNjMTkyYmYyMTYyOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJAYXENieIHRq4Xt+p4j1EOEEB5e
up6QbgP+NYBCdbdDUPCrcnHN4X6jD/zLS93jS7FCfLijxF/rrWeXNQdQPKEI1E7a
erkbCrhe8iLCH+QpiW3wckddif6SME0hTG3NoaOA604O/zPMtf+berl7cZgAHnOW
0Yhto7AORaCxr7WJV92jE0JnrFBh5PTIZMocymb1iKJfe6A4PJ3/hcoS1jath4If
7pI8NS2ueARAz8S7oyDVthoe6W6HJWonD+KT4gXz7u9UxkuI/AIghNfU980NZaEZ
ORFJODGb524pc5GoEAPxye5o5JWncEEA8d9zJlDtf/LuKI8xBEc25tdThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIIepz7vDwionrCgJ08GSvyFiiyMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/tJjcCE
4PCR1Hz1ydgKmexst3HTfgIgQV4bjDq3dVUOHr92BkH/GiFRAaBLhzTtGb8zXrQx
xkIwKvnMwxngs06mS8kxfkAxr4cegVz+cutMUVIDbB6VLzOzFeCS05n7ZtVVbhK+
OJCd4n8ajBC4wsdqc6YPV8MoGHDsYN6vYtmYrOwkywMRF9F7q55ILEi4m64/xeBR
rgxshvuCMc4y6XXpfubZWYUTUdpifTjE1ePeXCWwJW+xEungAiBn+HTmpk6bChdj
BsadfoBy/pdqOzM8FpceeCgFFqzIvYqdBt8I+d0x6UDHZuUUmdrQHxtNeZxcV1fP
Vao12UCLjtBd9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:14 2026 by rpki-client