Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: dKCMS+0kmA+v0IuuHlH28JpFvD+sauICKZGLYVrHfRs=
Subject key identifier: 9E:84:35:18:CE:61:E4:D9:19:04:96:8F:69:2E:56:4B:87:8F:EB:5B
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019D2A3BAAF6D88584C4AF2A8F505754C967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0FCD
Signing time: Thu 26 Mar 2026 13:00:46 +0000
Manifest this update: Thu 26 Mar 2026 13:00:46 +0000
Manifest next update: Fri 27 Mar 2026 13:00:46 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: Z9EOsiCgFRDtHr/JE7cvfds9kq96TAVAiv4OedAuVb0=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:aa:f6:d8:85:84:c4:af:2a:8f:50:57:54:c9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Mar 26 13:00:46 2026 GMT
Not After : Mar 27 13:00:46 2026 GMT
Subject: CN=9e843518ce61e4d91904968f692e564b878feb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:d6:20:32:bd:42:82:47:0f:7e:f5:a0:87:
c5:c2:f5:b0:ad:9b:74:3d:f9:09:98:66:f1:6b:d6:
c3:69:4e:69:cb:b9:34:38:cb:5d:5d:cf:21:91:2e:
66:c1:2f:2e:ef:d3:7c:0c:50:11:43:04:3d:8e:d4:
a5:f4:fd:4c:f9:29:55:0d:30:ff:4f:23:c0:45:ef:
41:1f:e4:69:fe:aa:52:ae:85:3c:25:f5:49:46:99:
5f:0e:bd:00:f5:c6:d4:47:97:95:88:42:27:39:ea:
bc:17:cc:9a:86:cb:67:2a:18:74:61:7e:d6:2c:fb:
c6:68:d5:38:a5:1f:d6:31:18:4a:18:0d:58:c0:f1:
93:d7:da:10:9e:1e:22:2b:ca:0e:91:34:0e:8d:78:
b4:0f:c6:7e:72:b5:7d:d3:54:d3:7b:a7:04:26:06:
d0:4c:7c:3a:85:99:79:7f:f7:99:5d:65:76:89:10:
93:8c:8b:35:3a:44:6d:be:6d:31:8f:de:6f:60:20:
e4:5b:f4:af:cd:35:81:b7:43:b7:35:08:ff:4b:62:
93:ff:58:ae:6e:74:a5:48:ee:36:bc:03:0a:52:12:
05:e0:5b:b3:cf:78:cd:cc:46:ac:b3:6e:5c:82:80:
69:34:1d:19:a0:f8:88:ff:17:03:57:16:ae:ff:28:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:35:18:CE:61:E4:D9:19:04:96:8F:69:2E:56:4B:87:8F:EB:5B
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:bf:fa:67:df:28:86:60:87:65:46:e8:84:21:03:7d:a3:
ad:2c:71:27:32:d5:b9:c6:99:ab:0c:36:89:9f:57:bf:c7:58:
c3:0b:89:14:f9:8b:2c:50:4b:ce:c5:19:9d:77:56:ee:84:3f:
47:c3:5a:c3:1d:3b:20:54:78:41:02:30:9e:2f:4b:1e:4c:68:
da:f3:e6:59:df:94:77:1d:4c:a7:67:a3:52:bd:a6:ea:98:e9:
1c:a5:a2:cc:15:cd:8f:82:87:90:3b:41:0d:0a:1c:61:ee:d0:
b0:5f:20:2d:04:30:e2:14:93:d7:cd:e3:86:a9:d1:f3:ee:42:
dd:bf:b4:d0:47:c4:ac:b7:26:7b:18:38:e9:85:0b:23:2d:ea:
31:01:b3:70:d3:c8:1c:c8:55:08:f7:3e:66:77:49:e0:81:9e:
ac:fa:bd:58:04:f7:21:51:ce:f5:85:44:e3:18:0b:11:f9:31:
17:75:2e:1e:14:f2:30:78:df:c8:30:3a:f9:14:b3:0f:7b:ac:
4e:55:d6:51:09:f0:05:e0:f4:cb:45:0c:74:b5:3f:f9:69:a4:
61:ee:1f:f1:bc:5d:bc:1c:b9:36:f2:65:07:d9:06:30:47:32:
5d:c6:33:ef:e8:d7:df:7f:77:7c:66:fc:88:b2:06:5d:cf:6d:
cd:95:fa:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO6r22IWExK8qj1BXVMlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjYwMzI2MTMwMDQ2WhcNMjYwMzI3MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTg0MzUxOGNlNjFlNGQ5MTkwNDk2OGY2OTJlNTY0Yjg3OGZlYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+LWIDK9QoJHD371oIfFwvWwrZt0
PfkJmGbxa9bDaU5py7k0OMtdXc8hkS5mwS8u79N8DFARQwQ9jtSl9P1M+SlVDTD/
TyPARe9BH+Rp/qpSroU8JfVJRplfDr0A9cbUR5eViEInOeq8F8yahstnKhh0YX7W
LPvGaNU4pR/WMRhKGA1YwPGT19oQnh4iK8oOkTQOjXi0D8Z+crV901TTe6cEJgbQ
THw6hZl5f/eZXWV2iRCTjIs1OkRtvm0xj95vYCDkW/SvzTWBt0O3NQj/S2KT/1iu
bnSlSO42vAMKUhIF4Fuzz3jNzEass25cgoBpNB0ZoPiI/xcDVxau/yj43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6ENRjOYeTZGQSWj2kuVkuHj+tbMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbg6/+mff
KIZgh2VG6IQhA32jrSxxJzLVucaZqww2iZ9Xv8dYwwuJFPmLLFBLzsUZnXdW7oQ/
R8Nawx07IFR4QQIwni9LHkxo2vPmWd+Udx1Mp2ejUr2m6pjpHKWizBXNj4KHkDtB
DQocYe7QsF8gLQQw4hST183jhqnR8+5C3b+00EfErLcmexg46YULIy3qMQGzcNPI
HMhVCPc+ZndJ4IGerPq9WAT3IVHO9YVE4xgLEfkxF3UuHhTyMHjfyDA6+RSzD3us
TlXWUQnwBeD0y0UMdLU/+WmkYe4f8bxdvBy5NvJlB9kGMEcyXcYz7+jX3393fGb8
iLIGXc9tzZX6kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:11 2026 by rpki-client