Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: URsOO3urqPkp+tURQIPYj8QF27T4p+EDMO/Ba2BEgRY=
Subject key identifier: 1A:57:B4:6A:65:EB:B9:FE:03:CB:1A:E1:3B:3F:C8:9B:26:48:BD:97
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019D2704C18F5A4BA49A387B17D25B823438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: ZFjhRKTc_fnA_elueyMFvSF4ti4.roa (hash: Lr1LH8WlImW1FyLPaQdB6U9jkpj964a1iqduTqMC4rA=)
2: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: FZEIuStd7ZSCTHlbIqtGqv515u5zo9NMPTBI7mZQoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c1:8f:5a:4b:a4:9a:38:7b:17:d2:5b:82:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=1a57b46a65ebb9fe03cb1ae13b3fc89b2648bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:81:94:63:e6:d8:9a:f3:27:a8:e2:fa:a8:
52:63:4b:ec:19:be:8a:b0:24:24:f8:b7:43:a5:e9:
55:38:e0:30:06:45:fc:f7:d3:19:f0:e1:18:61:2f:
98:f8:16:89:f0:09:39:d1:6e:87:77:c2:0e:e6:b4:
25:fc:db:24:0d:a3:53:52:20:da:ed:e2:64:fe:7a:
49:4a:c9:a1:1c:31:9b:ce:80:8f:4b:be:f3:f6:0c:
a8:1f:29:fd:24:b5:2b:87:0a:a8:ef:8a:b7:64:09:
a2:7b:a5:dc:81:45:8b:f2:c7:f4:7e:69:d2:91:7c:
db:c9:fd:f8:92:d9:d6:95:d3:cd:fa:9e:2a:af:89:
d7:04:c4:23:d9:ef:8f:a6:33:3b:c1:2e:d4:58:d4:
49:98:2a:90:a5:8b:8c:cb:bc:44:ca:e1:75:66:d7:
b4:de:38:89:57:62:20:63:26:8f:b9:de:b4:2a:87:
01:16:d5:08:ac:13:20:e6:a9:00:ff:b7:74:dd:e1:
a1:9a:18:11:a4:04:7e:b4:27:f5:e9:5f:36:36:49:
63:38:3c:a9:3d:2b:94:82:22:c1:bf:b3:97:d3:3b:
e4:2f:c0:78:81:98:6c:3d:38:37:eb:8a:1b:5b:b3:
4d:d5:6b:af:08:a4:f5:ab:1b:f6:75:ed:6d:e1:ca:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:B4:6A:65:EB:B9:FE:03:CB:1A:E1:3B:3F:C8:9B:26:48:BD:97
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:05:7b:90:87:aa:11:cb:be:0c:56:58:20:75:e5:22:c1:c4:
2c:cf:2f:5a:1f:fb:5c:8e:8a:3b:27:5a:47:b2:5f:c0:1e:2b:
6d:4f:f7:86:0e:9e:cd:9a:87:6e:1c:39:26:f9:fd:a3:93:65:
3d:38:90:e5:51:6c:5a:bf:33:b4:26:10:bd:99:17:26:63:0b:
68:df:80:03:54:de:99:4d:bd:b9:0e:46:85:17:95:f9:c5:6d:
2e:9b:a4:ec:45:1d:e5:29:14:df:2a:fa:d2:27:25:6d:89:86:
d4:b8:45:9c:95:74:6d:ed:01:ed:71:28:01:51:7b:19:23:a3:
ef:be:cb:e5:fb:5d:79:0e:4f:d2:b6:8e:0c:12:65:da:d6:4c:
4e:ab:cc:07:e3:41:91:8c:37:28:2d:33:26:41:4f:49:fe:57:
ef:02:9a:05:c3:7a:83:32:e9:a2:ca:21:4b:c0:03:e6:e2:0d:
5c:d6:fb:7b:da:98:3c:5c:40:1d:7e:6a:6a:b2:6e:ab:8b:bb:
01:8b:eb:2c:ae:31:c7:be:82:71:b6:d2:b4:4b:d0:3b:b8:80:
78:ad:d5:7b:8f:41:95:68:f6:29:2f:bc:3d:a3:36:fe:e9:f5:
59:15:3b:de:e4:b4:6a:8b:0f:09:6d:83:9e:96:5e:65:97:79:
d0:d9:37:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMGPWkukmjh7F9JbgjQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1
MGY1YTkwHhcNMjYwMzI1MjIwMTU2WhcNMjYwMzI2MjIwMTU2WjAzMTEwLwYDVQQD
EygxYTU3YjQ2YTY1ZWJiOWZlMDNjYjFhZTEzYjNmYzg5YjI2NDhiZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m+BlGPm2JrzJ6ji+qhSY0vsGb6K
sCQk+LdDpelVOOAwBkX899MZ8OEYYS+Y+BaJ8Ak50W6Hd8IO5rQl/NskDaNTUiDa
7eJk/npJSsmhHDGbzoCPS77z9gyoHyn9JLUrhwqo74q3ZAmie6XcgUWL8sf0fmnS
kXzbyf34ktnWldPN+p4qr4nXBMQj2e+PpjM7wS7UWNRJmCqQpYuMy7xEyuF1Zte0
3jiJV2IgYyaPud60KocBFtUIrBMg5qkA/7d03eGhmhgRpAR+tCf16V82NkljODyp
PSuUgiLBv7OX0zvkL8B4gZhsPTg364obW7NN1WuvCKT1qxv2de1t4cry0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpXtGpl67n+A8sa4Ts/yJsmSL2XMB8GA1UdIwQY
MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt
NjZkMjUzNDMyZjVmLzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm
LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgV7kIeq
Ecu+DFZYIHXlIsHELM8vWh/7XI6KOydaR7JfwB4rbU/3hg6ezZqHbhw5Jvn9o5Nl
PTiQ5VFsWr8ztCYQvZkXJmMLaN+AA1TemU29uQ5GhReV+cVtLpuk7EUd5SkU3yr6
0iclbYmG1LhFnJV0be0B7XEoAVF7GSOj777L5ftdeQ5P0raODBJl2tZMTqvMB+NB
kYw3KC0zJkFPSf5X7wKaBcN6gzLposohS8AD5uINXNb7e9qYPFxAHX5qarJuq4u7
AYvrLK4xx76CcbbStEvQO7iAeK3Ve49BlWj2KS+8PaM2/un1WRU73uS0aosPCW2D
npZeZZd50Nk3/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client