Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: TAzMzVVIm4u6lgDG+szucYYwfD3EhC5pMxLrkyJx2cI=
Subject key identifier: 84:19:9A:15:59:6B:93:17:7F:31:16:D4:7C:D2:6D:35:33:27:24:9E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A0CE23C3FB4C858558E93C56911155388D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 1B40
Signing time: Wed 23 Sep 2026 12:00:45 +0000
Manifest this update: Wed 23 Sep 2026 12:00:45 +0000
Manifest next update: Thu 24 Sep 2026 12:00:45 +0000
Files and hashes: 1: Oo01x8pERgWGLUwO9m5xfExXg9g.roa (hash: iSqQFbuWHpKMVbwARx0x5sxvGhMHq7DllvKbl8K+zMo=)
2: VlYJfL62zXlK9zhHkeRcXKHwzJw.roa (hash: pyF74z/76/0FbrDm7tHeWDaoslBZYA7e5eho0bYw5/4=)
3: W65vFxXKbxmq7dK_TAJxVeUdWHA.roa (hash: yqxtHV/CslpZBPyeOdQKLmW4Iyq5xnMKwuGrDGPLQyQ=)
4: bgVdDIP4FIow1zAwSao7be6KrC8.roa (hash: 8F5clBuL/Te3i0D4X6PaEO16p9rv+ETHYqT2HNqrKbQ=)
5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 1tQkL5dt5kBz/WkdzVf0e2KbvDVQZcC/6QpZJpH29VA=)
6: q2983OPzklakgSCjeiVFDoK69Xs.roa (hash: sQVFXTJ4NvpmpUw5zr/gtuq6d3FLh30FaP1gqDZKaWI=)
7: r0mR3JdsSHjQijRrm4Pcq7lgM58.roa (hash: s1x3KCynDraX05aiffgCwXTC5LKE3qCWa29JhXg/r4M=)
8: xkh-HA8JIqHvPIH5H2s9TrhN9FM.roa (hash: yD4AUqZznGBBTnerrmGNIhz4MlxBSwQeUlD2elXSFEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:c3:fb:4c:85:85:58:e9:3c:56:91:11:55:38:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 23 12:00:45 2026 GMT
Not After : Sep 24 12:00:45 2026 GMT
Subject: CN=84199a15596b93177f3116d47cd26d353327249e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:1e:c3:6e:10:fb:64:b6:71:82:cf:9a:5e:
09:b6:18:8d:69:73:6d:93:c3:8a:22:da:60:e1:ff:
ed:7b:52:0d:1a:38:e7:43:5b:5b:ec:9c:fb:53:43:
6b:85:61:c4:7b:68:91:65:41:01:0d:ff:20:e2:34:
ee:63:bb:5b:cf:6b:dc:55:a3:a5:af:cc:0d:3a:d7:
9d:1b:10:91:39:14:e5:fd:73:00:43:45:cd:80:03:
42:a6:49:d2:33:68:dc:c0:8f:73:81:e3:65:c0:4b:
f7:f7:40:9d:cc:cf:f5:f8:17:08:e2:a3:31:61:27:
61:73:97:c1:ab:47:81:47:0a:6f:2f:cf:24:84:b4:
b6:15:66:f1:aa:28:4d:12:5d:a6:48:90:c5:8a:d8:
a9:df:1e:6f:ea:e9:6e:63:0d:78:dc:89:20:7c:3d:
8d:93:f5:54:57:54:47:12:f2:aa:66:3c:23:0f:3f:
a6:07:0c:91:71:b4:cd:80:79:5f:df:34:49:db:34:
f7:3e:b9:8f:b3:61:2b:30:8f:9a:18:f3:10:6b:55:
bf:82:9d:6a:c4:6b:91:f8:20:a4:ec:d3:c1:bd:cd:
48:20:95:44:66:f3:bc:e0:10:03:c6:92:ee:0b:b3:
d6:e7:e2:6b:c9:88:cd:ad:e0:26:f2:2a:d5:40:72:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:9A:15:59:6B:93:17:7F:31:16:D4:7C:D2:6D:35:33:27:24:9E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:a2:87:48:c5:92:fb:a7:f3:75:9e:c7:22:72:65:d1:c2:
66:e2:59:7c:4e:81:32:8f:a4:84:86:21:c6:e5:c6:69:20:a2:
f1:9e:31:0d:00:01:9a:eb:f5:bc:97:08:e5:35:8e:d8:2e:99:
f4:2d:ac:be:36:8f:53:b4:bb:d5:5f:bc:1a:15:b6:63:ae:ba:
85:06:38:87:8e:7a:09:8b:36:95:6d:48:5e:82:22:9f:18:6b:
7d:52:c8:b1:e2:2a:22:e8:4c:be:cb:3d:f4:13:d2:a6:b1:5a:
e8:cb:6e:22:4b:47:18:93:ec:99:73:cf:b6:f9:1c:1f:59:fc:
ad:df:08:f2:95:a6:5b:80:f1:ad:e8:5d:d0:83:22:e9:8d:38:
00:50:c2:23:98:87:ce:4d:54:79:03:35:a7:37:5f:ba:33:d1:
61:62:f2:eb:b7:37:86:e0:15:80:21:88:49:23:88:f3:9d:9c:
e0:da:ec:3a:e4:d8:88:79:bd:48:c1:1a:d8:d0:95:09:e0:57:
b9:db:3a:57:93:05:d5:e6:e2:4b:9b:1f:f1:25:73:83:e3:ee:
31:b1:53:90:83:42:4c:f3:06:f2:8b:d9:da:2a:1c:b1:76:7a:
b7:ad:85:80:be:5b:b9:93:14:73:6e:bb:cf:da:43:ff:2f:de:
3e:5b:33:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI8P7TIWFWOk8VpERVTiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwOTIzMTIwMDQ1WhcNMjYwOTI0MTIwMDQ1WjAzMTEwLwYDVQQD
Eyg4NDE5OWExNTU5NmI5MzE3N2YzMTE2ZDQ3Y2QyNmQzNTMzMjcyNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFAew24Q+2S2cYLPml4JthiNaXNt
k8OKItpg4f/te1INGjjnQ1tb7Jz7U0NrhWHEe2iRZUEBDf8g4jTuY7tbz2vcVaOl
r8wNOtedGxCRORTl/XMAQ0XNgANCpknSM2jcwI9zgeNlwEv390CdzM/1+BcI4qMx
YSdhc5fBq0eBRwpvL88khLS2FWbxqihNEl2mSJDFitip3x5v6uluYw143IkgfD2N
k/VUV1RHEvKqZjwjDz+mBwyRcbTNgHlf3zRJ2zT3PrmPs2ErMI+aGPMQa1W/gp1q
xGuR+CCk7NPBvc1IIJVEZvO84BADxpLuC7PW5+JryYjNreAm8irVQHIFcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQZmhVZa5MXfzEW1HzSbTUzJySeMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLuih0jF
kvun83WexyJyZdHCZuJZfE6BMo+khIYhxuXGaSCi8Z4xDQABmuv1vJcI5TWO2C6Z
9C2svjaPU7S71V+8GhW2Y666hQY4h456CYs2lW1IXoIinxhrfVLIseIqIuhMvss9
9BPSprFa6MtuIktHGJPsmXPPtvkcH1n8rd8I8pWmW4Dxrehd0IMi6Y04AFDCI5iH
zk1UeQM1pzdfujPRYWLy67c3huAVgCGISSOI852c4NrsOuTYiHm9SMEa2NCVCeBX
uds6V5MF1ebiS5sf8SVzg+PuMbFTkINCTPMG8ovZ2iocsXZ6t62FgL5buZMUc267
z9pD/y/ePlszlQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:30 2026 by rpki-client