Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: zr14NQ1i9X3+c8bE7rSjzX28tWQ1YG16PvMIWy6QR0U=
Subject key identifier: 9C:58:03:3D:E9:4E:A7:89:5D:C3:5B:9D:E8:B6:8A:9C:BD:A0:2B:2E
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019D273B2F27F56941C4FAC531181CA8BF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 16CE
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: ars3p6x3FrwYg4+a3/nr29Kb6sIGPjeoaIPx/NkmuzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2f:27:f5:69:41:c4:fa:c5:31:18:1c:a8:bf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=9c58033de94ea7895dc35b9de8b68a9cbda02b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:84:ed:16:18:24:3c:17:39:f3:49:ae:42:
eb:56:5f:d5:0a:fc:5d:d3:b3:49:5d:e1:9e:54:fd:
b6:5c:71:9b:06:4e:f6:03:6d:5f:13:ed:61:6c:8a:
45:ff:b5:52:5f:e6:ef:4a:9a:20:78:84:28:bd:1c:
d1:b2:2f:4b:77:61:3a:e6:a1:b3:01:88:da:99:c8:
b3:0c:2e:4f:92:fb:bc:fe:cc:da:fe:c6:e1:b0:47:
f6:16:23:aa:ab:87:2f:07:f6:97:28:f2:77:13:eb:
e6:a1:dc:ec:1f:3b:c4:0a:e2:2d:8b:d2:f5:e1:08:
18:68:32:d8:92:fb:74:a8:c9:b3:da:64:cf:89:45:
a9:a8:45:ff:d6:ec:bb:5a:d5:38:17:9f:7a:e6:1c:
53:6f:51:3b:22:61:e2:5c:74:aa:90:f8:bf:ca:62:
58:92:f0:6f:f9:8e:20:f5:ca:1b:e9:21:1f:1f:9d:
cb:da:9a:d2:c9:a1:97:f5:6d:6e:20:8d:dd:74:59:
b3:11:8b:4d:34:a8:17:f4:5c:e9:80:20:49:89:e9:
62:48:ff:5a:78:ae:bd:e1:02:ec:d0:50:88:c3:fc:
7f:d6:72:75:9f:e8:f7:06:9f:d0:fe:9a:a0:25:fc:
1a:87:fd:17:5e:9e:0f:b5:01:ed:e6:8c:17:a0:9d:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:03:3D:E9:4E:A7:89:5D:C3:5B:9D:E8:B6:8A:9C:BD:A0:2B:2E
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cc:2c:c8:07:4a:be:c2:85:9d:11:42:27:3a:61:05:d9:5e:
3b:3e:f8:f9:32:fa:11:d3:8b:60:c2:7d:e7:89:af:26:4f:41:
e7:de:4e:06:be:91:45:f8:4b:18:b7:88:e4:c0:e9:53:e2:0b:
a9:fe:69:3f:aa:d9:77:12:24:0b:8a:f9:a0:4e:60:fc:11:ac:
43:81:57:de:a4:f9:53:07:0e:d3:cd:0a:d3:60:37:cf:f3:10:
78:fc:75:ea:13:1a:68:9f:30:1e:58:f2:c6:41:db:a9:2e:df:
90:3f:45:73:48:df:d6:ee:fe:9e:6e:46:14:2c:2d:92:cf:ad:
d1:56:44:a7:45:eb:db:b1:ff:b7:53:d8:0b:92:03:e3:0b:fb:
98:89:75:c1:90:4c:d3:19:e8:4f:d9:e8:d7:b7:9e:b5:81:1b:
aa:29:49:ad:5d:f4:44:4a:88:74:6f:15:a2:38:f8:b8:b6:12:
74:0a:83:f8:80:ba:e0:9c:06:99:47:11:49:af:81:37:1d:5f:
91:d4:bf:5b:9e:64:13:16:87:08:f1:0e:d6:66:0c:e5:b5:3d:
a1:47:82:d8:99:85:88:b4:49:22:5c:a8:b2:2d:ed:ea:68:ff:
67:03:e1:a2:fe:16:57:9a:3b:3b:03:d2:0a:72:28:b4:15:bf:
c6:83:5d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOy8n9WlBxPrFMRgcqL8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
Eyg5YzU4MDMzZGU5NGVhNzg5NWRjMzViOWRlOGI2OGE5Y2JkYTAyYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMKE7RYYJDwXOfNJrkLrVl/VCvxd
07NJXeGeVP22XHGbBk72A21fE+1hbIpF/7VSX+bvSpogeIQovRzRsi9Ld2E65qGz
AYjamcizDC5Pkvu8/sza/sbhsEf2FiOqq4cvB/aXKPJ3E+vmodzsHzvECuIti9L1
4QgYaDLYkvt0qMmz2mTPiUWpqEX/1uy7WtU4F5965hxTb1E7ImHiXHSqkPi/ymJY
kvBv+Y4g9cob6SEfH53L2prSyaGX9W1uII3ddFmzEYtNNKgX9FzpgCBJieliSP9a
eK694QLs0FCIw/x/1nJ1n+j3Bp/Q/pqgJfwah/0XXp4PtQHt5owXoJ2kbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxYAz3pTqeJXcNbnei2ipy9oCsuMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMwsyAdK
vsKFnRFCJzphBdleOz74+TL6EdOLYMJ954mvJk9B595OBr6RRfhLGLeI5MDpU+IL
qf5pP6rZdxIkC4r5oE5g/BGsQ4FX3qT5UwcO080K02A3z/MQePx16hMaaJ8wHljy
xkHbqS7fkD9Fc0jf1u7+nm5GFCwtks+t0VZEp0Xr27H/t1PYC5ID4wv7mIl1wZBM
0xnoT9no17eetYEbqilJrV30REqIdG8Vojj4uLYSdAqD+IC64JwGmUcRSa+BNx1f
kdS/W55kExaHCPEO1mYM5bU9oUeC2JmFiLRJIlyosi3t6mj/ZwPhov4WV5o7OwPS
CnIotBW/xoNddA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:04 2026 by rpki-client