Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: A5JphQezJt+leo6lcBts1AN5SjDg90CeBxVeLMVi+AE=
Subject key identifier: C0:14:F5:CB:C3:C9:0B:92:EC:C7:BD:50:D1:19:31:CA:EA:74:09:73
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 019D2A7286825A9D31F8FBF29537C57B59BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 0418
Signing time: Thu 26 Mar 2026 14:00:41 +0000
Manifest this update: Thu 26 Mar 2026 14:00:41 +0000
Manifest next update: Fri 27 Mar 2026 14:00:41 +0000
Files and hashes: 1: Edwl4zoG96dbPmsUFIhkRgXADTQ.roa (hash: IM2GNpBVkyKGNEQ7blWR/nLPMnuseIERVwBOhweWa0c=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: n4mgucMCoSO1VGJbZ9fnPKvb333VeZHIx91KCZ7Zm0A=)
3: SiTvdADyt2fD0BmQero13SpoFlc.roa (hash: Rvbprp9eKcxJ4n+nMPmN6bW/SfzHf4iedPaOjtazvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:86:82:5a:9d:31:f8:fb:f2:95:37:c5:7b:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Mar 26 14:00:41 2026 GMT
Not After : Mar 27 14:00:41 2026 GMT
Subject: CN=c014f5cbc3c90b92ecc7bd50d11931caea740973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:67:e2:5d:fd:dd:cd:6d:81:3d:09:95:bb:
35:08:0b:ce:06:33:cb:c8:2c:9d:69:d0:f1:f2:bd:
b3:56:52:0f:0c:f8:fc:64:63:21:10:b3:d6:58:b1:
80:ae:20:76:6b:8e:78:b1:e4:be:b4:fe:b8:38:f4:
78:2e:2e:aa:f5:36:60:57:e7:a0:98:bc:e3:ee:f0:
a5:df:7c:95:91:0a:21:77:97:49:4b:44:e7:b2:67:
02:fb:e5:bc:14:d8:97:b1:7e:41:e8:21:dc:42:ce:
51:28:4d:1c:6e:74:1c:2f:21:fb:49:eb:50:a5:2f:
02:d4:e9:ed:57:16:78:5e:a2:d0:ca:98:54:8e:3d:
94:ac:49:3d:59:29:de:8c:46:39:40:72:e2:c5:14:
82:2b:66:0d:2c:3c:ca:fe:bc:0a:8e:a5:c5:0b:22:
79:61:cb:4d:de:3f:4f:dc:15:33:19:a1:dc:47:5b:
9e:85:f3:98:57:c9:db:db:0a:e7:f2:84:4e:3a:14:
15:85:3a:5e:15:10:9f:ca:d1:3d:1d:c5:1d:f7:2f:
71:f2:bb:a0:ba:1b:aa:68:36:97:42:a5:cb:03:8b:
98:a9:06:80:51:af:6f:8e:5e:91:b7:3a:76:81:a5:
83:4f:97:51:2a:a3:a9:41:6e:f0:29:fb:d7:92:b5:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:F5:CB:C3:C9:0B:92:EC:C7:BD:50:D1:19:31:CA:EA:74:09:73
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bf:90:c6:a7:2e:8e:b7:8b:66:74:37:20:ad:0e:c1:e1:a5:
be:55:3d:6d:c4:7d:46:45:22:de:e7:0a:b0:42:40:6e:ba:33:
1c:3c:99:40:69:61:74:aa:dc:0f:36:d1:5a:1d:67:06:aa:90:
f8:66:58:45:b2:98:c5:72:26:19:54:b7:fe:91:39:8d:3a:10:
71:1c:0e:8f:61:f6:1d:d1:5b:f8:dc:16:22:97:15:c7:65:04:
f0:0b:7d:e7:4e:a3:c0:38:6b:2e:e6:01:39:96:1d:d9:25:cd:
d8:57:8e:fb:a9:ad:b6:4e:1f:39:3b:42:61:12:db:30:89:b8:
4f:d9:9f:f8:9f:1f:f1:ac:d1:9a:7e:e0:8a:24:20:8e:f8:6b:
89:b4:c4:19:08:b7:83:2d:43:9d:6c:9b:f5:c4:4d:fe:2d:4d:
19:57:37:5b:8a:a9:fe:93:9d:0f:3b:19:d0:3f:b3:b6:a0:18:
8d:c1:dc:e9:ee:6b:49:3e:a6:bc:e5:2c:23:6b:5f:18:2e:15:
13:4b:c7:85:a6:f3:17:16:61:e7:2b:d0:6e:ec:2c:7b:f7:6e:
0a:bd:61:02:2e:87:e0:55:db:c8:6e:7a:8b:93:18:a8:3d:a1:
05:26:01:88:0d:67:ac:05:aa:a4:d1:6f:3e:2b:d5:05:8b:f2:
22:af:12:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcoaCWp0x+PvylTfFe1m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0
ZWZhODIwHhcNMjYwMzI2MTQwMDQxWhcNMjYwMzI3MTQwMDQxWjAzMTEwLwYDVQQD
EyhjMDE0ZjVjYmMzYzkwYjkyZWNjN2JkNTBkMTE5MzFjYWVhNzQwOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDtn4l393c1tgT0Jlbs1CAvOBjPL
yCydadDx8r2zVlIPDPj8ZGMhELPWWLGAriB2a454seS+tP64OPR4Li6q9TZgV+eg
mLzj7vCl33yVkQohd5dJS0TnsmcC++W8FNiXsX5B6CHcQs5RKE0cbnQcLyH7SetQ
pS8C1OntVxZ4XqLQyphUjj2UrEk9WSnejEY5QHLixRSCK2YNLDzK/rwKjqXFCyJ5
YctN3j9P3BUzGaHcR1uehfOYV8nb2wrn8oROOhQVhTpeFRCfytE9HcUd9y9x8rug
uhuqaDaXQqXLA4uYqQaAUa9vjl6Rtzp2gaWDT5dRKqOpQW7wKfvXkrXQgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAU9cvDyQuS7Me9UNEZMcrqdAlzMB8GA1UdIwQY
MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt
MTE1NzVkYjY0ZmJlLzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl
LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr+Qxqcu
jreLZnQ3IK0OweGlvlU9bcR9RkUi3ucKsEJAbrozHDyZQGlhdKrcDzbRWh1nBqqQ
+GZYRbKYxXImGVS3/pE5jToQcRwOj2H2HdFb+NwWIpcVx2UE8At9506jwDhrLuYB
OZYd2SXN2FeO+6mttk4fOTtCYRLbMIm4T9mf+J8f8azRmn7giiQgjvhribTEGQi3
gy1DnWyb9cRN/i1NGVc3W4qp/pOdDzsZ0D+ztqAYjcHc6e5rST6mvOUsI2tfGC4V
E0vHhabzFxZh5yvQbuwse/duCr1hAi6H4FXbyG56i5MYqD2hBSYBiA1nrAWqpNFv
PivVBYvyIq8SFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:17 2026 by rpki-client