Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: MMMaHSWzK+fcw23CjZMksB/SF3HvCRpeC3vEF0l4Pko=
Subject key identifier: BB:1D:A0:56:93:A8:D0:C5:EF:2D:4C:DF:AA:D5:AF:D2:59:A6:1E:A2
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019F9248B7C693F085AB479C6D846F3F909E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 110C
Signing time: Fri 24 Jul 2026 04:01:06 +0000
Manifest this update: Fri 24 Jul 2026 04:01:06 +0000
Manifest next update: Sat 25 Jul 2026 04:01:06 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: mhAXL+jSVPw+bWxBoJq64lbRVX0cmaR05WSMILtjfVk=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b7:c6:93:f0:85:ab:47:9c:6d:84:6f:3f:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jul 24 04:01:06 2026 GMT
Not After : Jul 25 04:01:06 2026 GMT
Subject: CN=bb1da05693a8d0c5ef2d4cdfaad5afd259a61ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:32:a4:ac:70:a1:b3:5d:b3:cf:de:cf:c9:
7e:e2:f7:8d:56:23:ef:17:86:b8:fe:79:4a:6d:be:
30:d5:a9:d4:88:59:3c:bd:c4:de:51:d3:18:b7:cb:
b8:bc:1a:c7:2c:8d:f7:d3:20:65:a6:14:03:a2:23:
5c:b6:38:2c:51:13:24:d6:a8:b8:0b:d0:5e:ba:c4:
49:56:f5:f7:9e:bb:de:92:c3:5a:31:0d:f4:f7:51:
09:b1:97:33:2f:bd:c0:a8:64:5d:06:91:fd:80:60:
ad:5d:bf:fd:df:ef:16:ca:92:6d:f4:ce:6c:36:ac:
71:37:79:fb:e3:9a:c9:73:b1:0f:19:e8:17:97:a4:
a5:0d:88:cc:04:16:76:09:7f:47:0b:bf:65:1b:44:
a8:68:ec:39:2e:77:18:7b:db:34:5f:a5:07:d7:bd:
56:45:c5:d4:8f:a2:09:3b:4a:74:cd:9e:e3:49:a5:
d7:84:1f:0b:e3:7f:99:d4:e0:86:4c:9f:f5:5a:fb:
06:5f:8b:6e:48:90:ef:43:4a:f1:ea:d2:a8:51:75:
7c:37:44:27:40:ed:ed:50:cb:0c:13:4d:4a:da:5a:
5c:27:3f:a3:78:47:a4:44:e7:d2:ab:d0:48:94:f8:
9b:02:81:f9:7f:2c:41:5c:c9:f4:ca:56:b0:23:02:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:A0:56:93:A8:D0:C5:EF:2D:4C:DF:AA:D5:AF:D2:59:A6:1E:A2
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:d7:fc:da:b0:cb:81:7f:dc:d6:ae:9b:02:3a:8f:66:3b:
3e:25:0d:da:42:c1:88:76:2a:94:3b:89:e2:9c:24:3f:84:18:
49:38:ec:6b:5d:5d:9a:b7:0d:3f:74:1a:7b:c1:52:62:80:c7:
8a:e1:0c:20:92:97:ff:59:4b:b1:21:79:fc:71:20:ee:36:e3:
7a:f8:5c:e3:a5:82:98:dc:5e:41:a6:c3:ac:2c:81:fd:8c:4d:
e5:64:23:33:56:36:76:a4:be:e4:95:7d:c5:2e:76:a5:d5:5d:
16:9c:9d:47:0a:2d:42:c5:87:89:b8:05:42:97:8c:53:41:80:
d5:4a:9b:d2:6a:33:8e:e5:1b:fe:63:c5:13:aa:0b:af:e2:fe:
dd:2b:49:2f:94:81:7b:a1:73:e2:1e:5a:9e:ca:74:23:f7:14:
66:ec:80:2c:cd:dd:ac:87:86:0a:82:86:9d:dd:8c:ff:a0:e6:
c7:4e:00:ec:4d:76:5e:2f:d2:55:96:41:71:f7:af:a5:41:ac:
dd:6f:ee:3f:da:88:70:e1:f4:7d:ae:16:9d:24:84:ff:c4:84:
9d:16:eb:a7:cc:10:38:68:6a:8d:d1:5c:70:86:e4:04:0d:b8:
48:f9:a9:d4:cf:65:f0:c7:f2:9f:d0:16:d2:d1:f0:42:8f:95:
a3:73:aa:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSLfGk/CFq0ecbYRvP5CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjYwNzI0MDQwMTA2WhcNMjYwNzI1MDQwMTA2WjAzMTEwLwYDVQQD
EyhiYjFkYTA1NjkzYThkMGM1ZWYyZDRjZGZhYWQ1YWZkMjU5YTYxZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg4ypKxwobNds8/ez8l+4veNViPv
F4a4/nlKbb4w1anUiFk8vcTeUdMYt8u4vBrHLI330yBlphQDoiNctjgsURMk1qi4
C9BeusRJVvX3nrveksNaMQ3091EJsZczL73AqGRdBpH9gGCtXb/93+8WypJt9M5s
NqxxN3n745rJc7EPGegXl6SlDYjMBBZ2CX9HC79lG0SoaOw5LncYe9s0X6UH171W
RcXUj6IJO0p0zZ7jSaXXhB8L43+Z1OCGTJ/1WvsGX4tuSJDvQ0rx6tKoUXV8N0Qn
QO3tUMsME01K2lpcJz+jeEekROfSq9BIlPibAoH5fyxBXMn0ylawIwLuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsdoFaTqNDF7y1M36rVr9JZph6iMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAzX/Nqw
y4F/3NaumwI6j2Y7PiUN2kLBiHYqlDuJ4pwkP4QYSTjsa11dmrcNP3Qae8FSYoDH
iuEMIJKX/1lLsSF5/HEg7jbjevhc46WCmNxeQabDrCyB/YxN5WQjM1Y2dqS+5JV9
xS52pdVdFpydRwotQsWHibgFQpeMU0GA1Uqb0mozjuUb/mPFE6oLr+L+3StJL5SB
e6Fz4h5ansp0I/cUZuyALM3drIeGCoKGnd2M/6Dmx04A7E12Xi/SVZZBcfevpUGs
3W/uP9qIcOH0fa4WnSSE/8SEnRbrp8wQOGhqjdFccIbkBA24SPmp1M9l8Mfyn9AW
0tHwQo+Vo3Oq6g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:31 2026 by rpki-client