Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: VbvxYIvotDLOci6pq0n0EXpf7qU/yr9ARs7flW2cXy0=
Subject key identifier: B9:98:03:A9:8B:6F:18:49:EC:EB:3E:22:19:AB:8F:12:32:6E:A2:84
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019D29CDB13E21789B5CF4FCA2894DEFE976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 1635
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: S2dSC30jeW33pKj9K5lF3xPhRrfhZCTKuhxPwEd8aSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b1:3e:21:78:9b:5c:f4:fc:a2:89:4d:ef:e9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=b99803a98b6f1849eceb3e2219ab8f12326ea284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:57:05:ec:90:b5:fb:0f:68:cf:f8:34:fa:
86:b0:3b:ed:2d:5c:7a:11:ca:bb:2e:dc:95:a4:12:
cd:c2:af:da:93:ec:e7:1e:cf:28:ec:66:e8:88:0c:
64:ce:b4:eb:e2:95:8e:76:eb:36:62:4c:93:83:78:
12:ea:d3:91:4d:3f:b6:c1:b6:25:69:53:67:92:65:
18:be:a7:3e:47:03:c0:1b:1f:b2:c0:ae:9c:d4:b9:
9a:0e:60:77:69:26:29:b4:0c:40:99:3c:fa:27:b6:
02:7d:50:30:22:08:88:8c:ea:ff:b8:4e:27:00:b8:
71:bd:db:48:fd:46:9b:b3:0a:00:9d:a3:6a:9c:78:
c7:31:8b:59:e0:8b:6c:9f:32:21:1a:e6:63:f5:bc:
e7:36:1a:f3:a4:24:b0:1a:00:5a:ba:f2:c9:06:86:
d7:8a:de:26:6f:cc:0d:2a:b3:f2:e8:88:52:0f:a1:
f9:86:80:d8:12:d8:2a:64:77:28:d8:0e:f6:00:a4:
da:68:24:b8:64:96:ba:27:f4:75:9f:8c:34:d2:5d:
ac:f6:d0:2c:3e:89:0c:e1:b9:cf:80:13:a2:39:3a:
df:ce:72:d8:1a:f5:1f:67:aa:f6:2c:a3:17:1c:32:
af:6b:87:2d:b3:a7:68:8a:25:92:84:38:8d:e9:c5:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:03:A9:8B:6F:18:49:EC:EB:3E:22:19:AB:8F:12:32:6E:A2:84
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ba:dc:ee:52:7c:97:34:36:22:0a:1d:9f:84:3a:d8:01:42:
41:e0:41:63:1a:aa:58:0a:54:58:55:8a:44:bf:6b:19:ec:c1:
81:60:de:30:8a:3d:35:dc:ad:c2:ad:a0:33:78:89:32:05:bd:
1b:c9:68:3d:f5:90:b7:47:9a:89:89:13:7e:08:3c:f8:ed:3e:
41:fc:d5:0a:a5:67:15:f3:0a:9e:1e:fc:d0:f3:54:06:5b:4a:
4e:12:53:7e:76:a3:81:be:ae:77:1a:9f:2a:2f:05:1f:fc:fe:
b3:c3:50:e1:2c:14:f0:14:79:34:e0:c2:4a:e6:a3:a0:39:c9:
d6:7e:35:88:3d:2b:97:bc:f8:97:3e:f2:e7:01:e4:46:bf:1c:
ed:ba:3c:5e:4d:a2:92:af:2e:1e:bf:b2:b5:af:4b:ba:31:dc:
cf:f8:58:6e:6f:51:b4:51:26:b2:5a:41:c7:42:95:d2:68:56:
61:de:d9:9f:ec:b7:b2:9e:4c:40:38:5a:ab:49:97:08:86:27:
9d:b8:72:8b:2e:20:ad:78:06:1e:7f:c8:8f:07:f1:06:db:49:
01:0d:39:d5:4c:2b:52:d1:b5:ab:34:a9:1e:49:e5:90:cc:74:
18:52:0b:cd:33:ef:a1:e4:50:3b:26:69:8d:3c:95:60:16:1f:
b2:fc:0e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzbE+IXibXPT8oolN7+l2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm
NTYwNmQwHhcNMjYwMzI2MTEwMDM5WhcNMjYwMzI3MTEwMDM5WjAzMTEwLwYDVQQD
EyhiOTk4MDNhOThiNmYxODQ5ZWNlYjNlMjIxOWFiOGYxMjMyNmVhMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFRXBeyQtfsPaM/4NPqGsDvtLVx6
Ecq7LtyVpBLNwq/ak+znHs8o7GboiAxkzrTr4pWOdus2YkyTg3gS6tORTT+2wbYl
aVNnkmUYvqc+RwPAGx+ywK6c1LmaDmB3aSYptAxAmTz6J7YCfVAwIgiIjOr/uE4n
ALhxvdtI/UabswoAnaNqnHjHMYtZ4ItsnzIhGuZj9bznNhrzpCSwGgBauvLJBobX
it4mb8wNKrPy6IhSD6H5hoDYEtgqZHco2A72AKTaaCS4ZJa6J/R1n4w00l2s9tAs
PokM4bnPgBOiOTrfznLYGvUfZ6r2LKMXHDKva4cts6doiiWShDiN6cXUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmYA6mLbxhJ7Os+IhmrjxIybqKEMB8GA1UdIwQY
MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt
MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj
LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbrc7lJ8
lzQ2Igodn4Q62AFCQeBBYxqqWApUWFWKRL9rGezBgWDeMIo9Ndytwq2gM3iJMgW9
G8loPfWQt0eaiYkTfgg8+O0+QfzVCqVnFfMKnh780PNUBltKThJTfnajgb6udxqf
Ki8FH/z+s8NQ4SwU8BR5NODCSuajoDnJ1n41iD0rl7z4lz7y5wHkRr8c7bo8Xk2i
kq8uHr+yta9LujHcz/hYbm9RtFEmslpBx0KV0mhWYd7Zn+y3sp5MQDhaq0mXCIYn
nbhyiy4grXgGHn/IjwfxBttJAQ051UwrUtG1qzSpHknlkMx0GFILzTPvoeRQOyZp
jTyVYBYfsvwO3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:07 2026 by rpki-client