Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: y8vlq7ULdlFU5GtuuqhsZ8XrobbIDsUEaxfiASvOhpc=
Subject key identifier: D7:66:72:53:51:87:E9:54:C0:DD:C4:E6:C7:55:4A:A9:6A:BA:DC:70
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 019D2695F6D0F59AAB13013404B1F8A65C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 05A2
Signing time: Wed 25 Mar 2026 20:00:55 +0000
Manifest this update: Wed 25 Mar 2026 20:00:55 +0000
Manifest next update: Thu 26 Mar 2026 20:00:55 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: OhvAQrvnkWEIG3su40Rb7cgVgao6BsMkW2g9ELdiKv4=)
5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f6:d0:f5:9a:ab:13:01:34:04:b1:f8:a6:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Mar 25 20:00:55 2026 GMT
Not After : Mar 26 20:00:55 2026 GMT
Subject: CN=d76672535187e954c0ddc4e6c7554aa96abadc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:ba:4e:eb:db:32:4a:55:2a:01:b8:68:1f:
d3:55:c1:36:fa:1a:3d:eb:09:18:c0:20:ef:23:5a:
c9:8a:df:51:0d:e7:79:de:dd:b3:b5:ed:b6:b9:bc:
fc:6b:e0:98:0b:dd:17:05:ca:2f:be:40:b2:8d:cd:
e0:03:40:3c:c3:c8:6a:9b:6e:70:af:c7:26:3e:f0:
c6:f8:0e:93:f8:0a:e0:8a:eb:90:12:d5:de:bb:a3:
10:e7:9e:58:c0:09:06:f3:25:56:f1:74:94:0b:eb:
20:c2:a3:99:c4:76:e1:7b:8f:3a:49:32:13:19:e6:
1a:32:c6:c2:d5:ce:27:a1:97:8d:52:c0:86:d7:61:
a1:69:e8:e7:49:2a:88:ef:4e:a6:54:dd:00:a2:fd:
34:21:a1:7a:ac:60:ed:8e:b1:95:b1:9f:1e:79:55:
f6:5b:3f:72:32:26:fe:c3:5e:bc:8f:7c:8b:f2:ef:
3e:2d:5c:f3:97:3d:0e:c0:2c:31:c6:d0:43:99:a3:
46:79:7c:80:da:9d:27:b9:f2:7d:cf:53:a8:eb:f4:
ca:c3:77:29:80:10:5d:0a:f6:66:a4:37:44:30:65:
76:d0:49:5b:6c:0b:f0:fe:fa:65:22:e0:97:cf:5e:
17:6b:f6:f6:0d:97:84:bf:3e:44:06:98:a4:ea:4d:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:72:53:51:87:E9:54:C0:DD:C4:E6:C7:55:4A:A9:6A:BA:DC:70
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:36:bc:e4:4f:cd:84:7e:82:d2:6b:b0:e8:5a:18:6a:4b:
c7:11:4a:a2:8a:cf:ce:e5:86:3a:86:bb:34:b7:e6:cc:e0:7d:
9d:db:78:32:19:49:6c:d0:e4:db:9d:25:67:de:5e:5a:95:8c:
4f:6b:a4:14:5b:11:94:c4:ef:db:9c:b5:20:6f:6f:c0:86:2e:
66:5b:3d:e6:b8:e2:64:91:c6:f8:98:6b:69:8f:aa:e3:38:50:
50:1e:b4:be:0e:9e:e3:7a:a2:bd:63:b6:a9:37:80:73:4d:00:
97:60:f3:d1:0d:a6:e7:0e:cc:af:ab:05:b5:7b:e8:6e:dd:8b:
48:60:a2:ff:bf:75:43:08:f1:d1:7e:6d:0f:f2:34:36:40:b9:
fe:96:27:ae:27:04:60:bc:73:31:c8:cb:7b:4a:ea:23:25:0c:
bd:96:67:91:26:9d:04:70:08:9d:29:00:89:5e:5e:49:7e:b1:
88:93:3f:5c:b7:ba:03:2a:10:c9:77:e6:21:ff:82:f9:94:a0:
a9:23:31:30:f9:f1:04:3f:14:4b:c4:70:03:56:05:15:f7:1b:
a1:a6:6a:4a:ac:87:99:73:7e:88:9d:47:a8:8f:ab:cc:eb:c6:
c1:92:c4:49:68:be:b7:62:39:7d:74:c7:42:02:02:af:3a:9a:
78:9e:ed:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfbQ9ZqrEwE0BLH4plwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjYwMzI1MjAwMDU1WhcNMjYwMzI2MjAwMDU1WjAzMTEwLwYDVQQD
EyhkNzY2NzI1MzUxODdlOTU0YzBkZGM0ZTZjNzU1NGFhOTZhYmFkYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCq6TuvbMkpVKgG4aB/TVcE2+ho9
6wkYwCDvI1rJit9RDed53t2zte22ubz8a+CYC90XBcovvkCyjc3gA0A8w8hqm25w
r8cmPvDG+A6T+ArgiuuQEtXeu6MQ555YwAkG8yVW8XSUC+sgwqOZxHbhe486STIT
GeYaMsbC1c4noZeNUsCG12GhaejnSSqI706mVN0Aov00IaF6rGDtjrGVsZ8eeVX2
Wz9yMib+w168j3yL8u8+LVzzlz0OwCwxxtBDmaNGeXyA2p0nufJ9z1Oo6/TKw3cp
gBBdCvZmpDdEMGV20ElbbAvw/vplIuCXz14Xa/b2DZeEvz5EBpik6k30LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdmclNRh+lUwN3E5sdVSqlqutxwMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceo2vORP
zYR+gtJrsOhaGGpLxxFKoorPzuWGOoa7NLfmzOB9ndt4MhlJbNDk250lZ95eWpWM
T2ukFFsRlMTv25y1IG9vwIYuZls95rjiZJHG+JhraY+q4zhQUB60vg6e43qivWO2
qTeAc00Al2Dz0Q2m5w7Mr6sFtXvobt2LSGCi/791Qwjx0X5tD/I0NkC5/pYnricE
YLxzMcjLe0rqIyUMvZZnkSadBHAInSkAiV5eSX6xiJM/XLe6AyoQyXfmIf+C+ZSg
qSMxMPnxBD8US8RwA1YFFfcboaZqSqyHmXN+iJ1HqI+rzOvGwZLESWi+t2I5fXTH
QgICrzqaeJ7tew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:41 2026 by rpki-client