Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: z3lseMvKtz/QBG7lzFRFoNjiCOHySLtOMbctW+USu54=
Subject key identifier: 83:C4:EF:A7:B7:1F:A9:64:A1:82:11:1E:BF:52:52:59:17:61:C5:E0
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019E1FECC133D67FB0556FEB4CF6AB891ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 14C2
Signing time: Wed 13 May 2026 06:01:10 +0000
Manifest this update: Wed 13 May 2026 06:01:10 +0000
Manifest next update: Thu 14 May 2026 06:01:10 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: F3OWBVqaJ0OghtA47BiEvWRH1Oo4u3gtZvavJJTN6PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:c1:33:d6:7f:b0:55:6f:eb:4c:f6:ab:89:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: May 13 06:01:10 2026 GMT
Not After : May 14 06:01:10 2026 GMT
Subject: CN=83c4efa7b71fa964a182111ebf5252591761c5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:a6:7a:fa:91:03:fb:a1:cc:88:b2:ac:e2:
41:95:e6:e9:57:ef:1c:b7:c6:4d:86:e4:4f:9e:96:
4c:9f:58:cd:5a:9d:75:86:c0:31:6b:42:2c:46:cc:
6b:69:a2:e7:22:ed:4d:f1:e1:e1:37:8c:3e:d8:58:
a7:81:1d:99:b6:47:36:f3:dd:21:55:4b:52:00:b6:
7c:5f:39:e8:b9:20:10:3d:2c:61:7e:ae:e4:51:c8:
1f:d8:5f:58:54:e8:4e:3d:8f:88:43:a1:73:9d:4b:
12:d7:c3:09:57:75:95:89:a4:1f:10:47:8b:88:43:
14:d3:20:98:cd:55:35:3f:31:61:3e:b8:9e:0e:40:
c4:a3:97:59:5d:e9:fd:42:34:b2:09:01:d6:70:18:
47:8f:a5:ec:8e:2d:d6:28:ec:5e:b9:a2:24:fc:32:
a0:6d:39:2c:e2:e1:71:6a:7d:bc:fe:4b:22:b7:81:
87:26:86:1a:3e:f0:4d:f0:90:ac:32:56:35:10:6e:
25:c1:e0:fa:42:77:b4:c6:90:40:9d:cc:a1:65:08:
b5:1e:89:7b:7d:34:4d:8a:b3:0d:10:12:ca:08:26:
2c:c0:cd:04:95:d6:00:d3:e3:3b:35:b1:0b:a0:02:
4f:58:d3:ff:2a:7f:00:6f:02:c8:0f:f7:0a:d0:98:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C4:EF:A7:B7:1F:A9:64:A1:82:11:1E:BF:52:52:59:17:61:C5:E0
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:cf:e1:c6:fa:6c:bd:66:1b:9f:14:01:6a:33:db:0a:b8:1b:
91:f6:1c:06:40:2e:b3:a2:23:8b:bd:ca:d2:cc:1c:56:fd:0b:
b2:02:c8:37:b0:01:a1:fd:a6:b1:05:21:10:f0:ea:30:73:63:
f3:ee:ba:dd:60:f6:2b:40:ea:cd:c3:22:f7:e2:a5:c0:ce:3c:
58:6b:e4:eb:5b:2f:53:c4:de:c8:fb:5b:81:af:ff:9f:b4:73:
56:f3:d0:ba:8b:ff:39:f0:29:aa:22:38:ef:82:99:9d:dc:d1:
e1:e6:33:bc:6e:bc:1e:51:a9:82:f5:33:b4:9e:46:88:17:d1:
2d:1f:12:cc:d3:08:9f:ee:d5:34:5e:62:53:ee:8b:d3:52:c0:
2a:34:72:5e:23:0d:c0:24:2e:0f:1c:0c:52:b5:0a:d5:bd:03:
e5:96:72:2d:30:17:1c:eb:2b:1a:15:49:fa:54:a0:d1:84:56:
d7:6d:6a:56:37:67:21:dd:d3:e4:cb:64:02:26:8f:a1:da:9e:
b3:4f:9f:15:75:14:54:c0:8e:71:fa:d7:c9:e6:d5:4c:19:d9:
6c:be:d1:42:26:8a:4f:57:33:e1:1f:b0:3a:c8:ba:e1:5e:0c:
a5:4e:2b:72:32:8c:79:69:53:b6:26:92:f5:7e:05:64:60:68:
23:e2:b5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7MEz1n+wVW/rTPariR7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjYwNTEzMDYwMTEwWhcNMjYwNTE0MDYwMTEwWjAzMTEwLwYDVQQD
Eyg4M2M0ZWZhN2I3MWZhOTY0YTE4MjExMWViZjUyNTI1OTE3NjFjNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNamevqRA/uhzIiyrOJBlebpV+8c
t8ZNhuRPnpZMn1jNWp11hsAxa0IsRsxraaLnIu1N8eHhN4w+2FingR2Ztkc2890h
VUtSALZ8XznouSAQPSxhfq7kUcgf2F9YVOhOPY+IQ6FznUsS18MJV3WViaQfEEeL
iEMU0yCYzVU1PzFhPrieDkDEo5dZXen9QjSyCQHWcBhHj6Xsji3WKOxeuaIk/DKg
bTks4uFxan28/ksit4GHJoYaPvBN8JCsMlY1EG4lweD6Qne0xpBAncyhZQi1Hol7
fTRNirMNEBLKCCYswM0EldYA0+M7NbELoAJPWNP/Kn8AbwLID/cK0Ji7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPE76e3H6lkoYIRHr9SUlkXYcXgMB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08/hxvps
vWYbnxQBajPbCrgbkfYcBkAus6Iji73K0swcVv0LsgLIN7ABof2msQUhEPDqMHNj
8+663WD2K0DqzcMi9+KlwM48WGvk61svU8TeyPtbga//n7RzVvPQuov/OfApqiI4
74KZndzR4eYzvG68HlGpgvUztJ5GiBfRLR8SzNMIn+7VNF5iU+6L01LAKjRyXiMN
wCQuDxwMUrUK1b0D5ZZyLTAXHOsrGhVJ+lSg0YRW121qVjdnId3T5MtkAiaPodqe
s0+fFXUUVMCOcfrXyebVTBnZbL7RQiaKT1cz4R+wOsi64V4MpU4rcjKMeWlTtiaS
9X4FZGBoI+K1iQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:26:35 2026 by rpki-client