Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File: lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier: M5wv6LWKmMzHtSEVtUkzY4/dd0ID0sa5N5dpjKpjc6M=
Subject key identifier: 26:77:EC:CE:FF:07:33:8E:29:81:51:B7:B8:2D:E6:07:7C:D5:52:CB
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer: /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial: 019D25BA7F319301C2E90EAAECF167023549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 16:01:12 +0000
Manifest this update: Wed 25 Mar 2026 16:01:12 +0000
Manifest next update: Thu 26 Mar 2026 16:01:12 +0000
Files and hashes: 1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: MQQpucqFKr56hLQiri2IduHcCAT6e6He7VCBkhHO8rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7f:31:93:01:c2:e9:0e:aa:ec:f1:67:02:35:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
Validity
Not Before: Mar 25 16:01:12 2026 GMT
Not After : Mar 26 16:01:12 2026 GMT
Subject: CN=2677ecceff07338e298151b7b82de6077cd552cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:14:f7:b4:48:59:02:ca:80:b8:fa:55:08:
c5:ab:63:e1:44:96:96:4b:74:95:09:0d:bd:46:0d:
7a:33:14:d5:c9:46:2a:0b:4f:6f:95:1c:ee:7c:9b:
24:df:1e:bf:92:a0:c7:0d:57:e2:a0:b6:51:75:78:
a7:d6:e7:47:05:4e:56:b2:64:63:10:97:73:b8:22:
de:19:69:98:54:16:03:e7:b3:d1:32:82:d1:69:48:
ac:20:fe:ed:7b:88:7e:f1:ed:d7:48:c8:9d:0d:ae:
8b:2a:99:4a:1b:bc:c1:a0:78:b4:5f:15:ea:f7:fb:
2f:9c:43:b0:27:ba:35:48:e5:57:34:4b:0e:c9:ea:
0d:ee:bf:0c:c7:61:76:46:54:24:cd:98:c3:49:52:
c6:38:67:7b:40:96:c3:f5:b7:33:16:ff:5a:05:05:
86:2e:33:e9:83:66:06:0d:6f:9f:c5:e6:b2:c8:62:
52:15:db:b4:64:0a:d6:92:d3:13:a7:41:9c:c7:11:
53:7f:79:43:c8:1c:55:18:25:95:4b:f4:be:bb:7d:
d6:99:42:6b:7a:f4:f5:1b:3e:9d:4f:8f:33:b0:c8:
12:3c:e7:9e:38:56:89:46:2a:17:72:1d:7e:71:ee:
c5:0c:63:18:e0:e2:fb:14:9d:19:73:fb:c3:b2:7f:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:EC:CE:FF:07:33:8E:29:81:51:B7:B8:2D:E6:07:7C:D5:52:CB
X509v3 Authority Key Identifier:
keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:05:38:70:dc:01:a0:96:f5:f4:a9:47:1a:2a:7f:e9:a9:c3:
00:1a:e8:d9:cd:47:f9:76:4f:ce:83:26:79:15:b6:39:d5:37:
af:1f:42:ad:e7:b0:ec:d6:88:47:30:9d:54:ab:88:72:bb:09:
eb:f0:ba:9f:77:28:ff:e2:07:ab:54:90:00:2b:e5:da:c4:14:
35:e7:d9:95:33:55:60:d5:5a:9b:fb:0f:aa:09:3b:61:60:ea:
f2:e1:76:39:0e:04:16:a7:c2:28:84:3c:4b:90:25:90:50:cb:
b3:f9:27:ef:3d:28:bb:03:16:41:64:f4:51:10:97:00:88:27:
6b:87:b8:61:7a:66:55:63:a3:39:1b:33:64:eb:7c:ab:50:7e:
2d:b1:ae:90:36:b6:57:bd:f4:b7:f5:40:48:f0:6b:7d:0e:f0:
74:11:31:20:ef:7b:c5:c9:7b:ef:24:ab:34:71:2d:61:2a:82:
eb:89:9e:87:74:f7:9b:9a:1c:c9:06:0a:1e:6d:08:be:9e:b0:
41:78:6d:dd:90:66:58:61:b3:b2:87:3e:e2:df:3f:d9:0d:69:
00:85:76:83:73:2b:62:96:61:45:47:0f:2a:b7:b1:fd:81:0a:
dc:9d:19:56:2f:a1:b2:62:06:c6:9e:ce:2e:b0:93:fe:1a:93:
5e:ac:78:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lun8xkwHC6Q6q7PFnAjVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWYzNDYzOWRjOTZmZjE4NDYzMzg4MWNkNzA3M2FlMzE5
ZmUyZGEwHhcNMjYwMzI1MTYwMTEyWhcNMjYwMzI2MTYwMTEyWjAzMTEwLwYDVQQD
EygyNjc3ZWNjZWZmMDczMzhlMjk4MTUxYjdiODJkZTYwNzdjZDU1MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MMU97RIWQLKgLj6VQjFq2PhRJaW
S3SVCQ29Rg16MxTVyUYqC09vlRzufJsk3x6/kqDHDVfioLZRdXin1udHBU5WsmRj
EJdzuCLeGWmYVBYD57PRMoLRaUisIP7te4h+8e3XSMidDa6LKplKG7zBoHi0XxXq
9/svnEOwJ7o1SOVXNEsOyeoN7r8Mx2F2RlQkzZjDSVLGOGd7QJbD9bczFv9aBQWG
LjPpg2YGDW+fxeayyGJSFdu0ZArWktMTp0GcxxFTf3lDyBxVGCWVS/S+u33WmUJr
evT1Gz6dT48zsMgSPOeeOFaJRioXch1+ce7FDGMY4OL7FJ0Zc/vDsn/jjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ37M7/BzOOKYFRt7gt5gd81VLLMB8GA1UdIwQY
MBaAFJYfNGOdyW/xhGM4gc1wc64xn+LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZTgwMTgtY2FlMC00YTRjLWI5YzEt
YzEzNjAyN2E3NGUwLzEvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZTgwMTgtY2FlMC00YTRjLWI5YzEtYzEzNjAyN2E3NGUw
LzEvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAU4cNwB
oJb19KlHGip/6anDABro2c1H+XZPzoMmeRW2OdU3rx9Creew7NaIRzCdVKuIcrsJ
6/C6n3co/+IHq1SQACvl2sQUNefZlTNVYNVam/sPqgk7YWDq8uF2OQ4EFqfCKIQ8
S5AlkFDLs/kn7z0ouwMWQWT0URCXAIgna4e4YXpmVWOjORszZOt8q1B+LbGukDa2
V730t/VASPBrfQ7wdBExIO97xcl77ySrNHEtYSqC64meh3T3m5ocyQYKHm0Ivp6w
QXht3ZBmWGGzsoc+4t8/2Q1pAIV2g3MrYpZhRUcPKrex/YEK3J0ZVi+hsmIGxp7O
LrCT/hqTXqx41g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:05 2026 by rpki-client