Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: SPN9s+q95oMAiE0e2tUUKOSueS3aMr/f14l2k++Fiqw=
Subject key identifier: 47:19:A7:FA:11:26:30:0B:57:C4:FC:98:6C:E0:BB:59:AF:EB:51:8D
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 019D29CDE8741C3BC36EDCDD63F39CAD4E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:00:53 +0000
Manifest this update: Thu 26 Mar 2026 11:00:53 +0000
Manifest next update: Fri 27 Mar 2026 11:00:53 +0000
Files and hashes: 1: YYcTpfzg-qxOriFzAQc4sR83vwQ.roa (hash: 5h0JVwXb5CNZ8oS+rmCxklJ1x85gCyuZA9bxlvjYhdU=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: ewXToCvPalJKc4klZT1cE01EXx/LJpCHFF+tTEctSc8=)
3: oxwK7ORpNdbpT88HwfpKeXMaclU.roa (hash: Wa92A7nZrCyu9yJGfUvVy9HkpHlaa9cNxOWmvKp3jX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e8:74:1c:3b:c3:6e:dc:dd:63:f3:9c:ad:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Mar 26 11:00:53 2026 GMT
Not After : Mar 27 11:00:53 2026 GMT
Subject: CN=4719a7fa1126300b57c4fc986ce0bb59afeb518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:2e:91:e0:d0:c8:d4:f2:98:82:0b:ea:37:
8b:01:ab:9a:a8:75:e8:95:3b:17:fb:1e:04:21:6e:
e8:86:f5:52:49:41:49:ae:9f:a5:7d:0f:23:9d:00:
af:c8:07:7e:b0:d9:40:db:a7:83:6a:40:b4:e7:f5:
ea:70:49:0b:ec:65:20:7b:01:c1:f0:8b:c7:d8:61:
a1:23:38:8c:28:d0:36:36:47:bb:e6:49:dc:a9:5f:
de:b2:17:b4:d3:e5:58:53:43:58:c0:1c:fc:d8:e7:
3c:bc:92:79:f9:8f:e7:f8:1c:75:d9:86:31:4e:77:
76:cc:53:b4:65:3e:ef:0b:5b:97:5f:9c:fd:4c:a4:
df:00:3a:8c:8a:0d:e6:8a:1e:e0:31:ae:39:05:02:
14:54:55:29:ad:4b:45:f2:15:aa:87:44:22:be:6d:
2a:bc:7e:54:a3:08:7f:db:9e:d0:12:dc:25:2c:89:
de:b6:36:a7:f2:13:77:49:3f:0c:6c:a0:d8:a2:8e:
33:26:e4:f2:bd:a4:72:e6:50:e4:4b:d2:b7:da:ef:
ed:eb:2b:c8:4f:0f:e0:a4:a9:16:3d:8a:0d:11:e2:
9f:44:ba:77:a0:20:e5:22:40:62:58:7f:73:d2:3f:
ba:06:e4:e5:f0:25:8b:2b:22:19:df:06:8d:69:27:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:19:A7:FA:11:26:30:0B:57:C4:FC:98:6C:E0:BB:59:AF:EB:51:8D
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:13:6b:a0:fc:39:45:70:e2:c2:97:dd:39:ec:1a:64:ce:90:
12:e7:07:b5:c9:e2:2a:04:a5:82:e5:cf:86:18:87:68:07:14:
dd:43:4b:30:2d:3f:6d:cb:12:d9:73:67:b8:62:3f:db:ca:f0:
bd:6a:e0:e9:b9:c1:d7:42:13:c5:d1:5e:8f:2c:49:ff:a0:70:
eb:77:dd:d1:3b:e5:f2:32:cb:5e:06:42:05:62:e4:cb:03:52:
b5:c6:b1:c7:2d:bc:45:c4:a3:ce:7e:33:50:92:7d:26:a4:1d:
e3:dd:7a:86:34:91:01:c3:a1:4a:67:cc:5a:c7:dc:a2:41:fc:
83:7a:e2:8b:7b:94:78:9e:d8:c1:f9:08:2d:6f:42:1c:10:3c:
a9:b8:77:e5:54:ec:4a:0e:5a:82:bc:74:15:c0:d3:82:61:7a:
31:a0:f7:cc:9f:4e:4f:f4:60:be:36:ca:a0:00:31:df:84:c6:
ac:89:d5:04:0a:ea:6c:ab:27:72:81:ed:cc:8d:a1:d3:a9:b1:
34:2f:51:49:1c:e8:b3:f4:30:eb:4a:e5:c9:d9:c8:ae:7b:ff:
fb:ec:cc:72:be:c9:c4:b2:4d:db:be:ba:29:d6:ce:b9:24:96:
a1:54:10:01:2e:fc:15:88:46:dd:8b:5b:8f:17:38:59:f4:19:
4a:20:ab:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzeh0HDvDbtzdY/OcrU5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3
YjBiMDkwHhcNMjYwMzI2MTEwMDUzWhcNMjYwMzI3MTEwMDUzWjAzMTEwLwYDVQQD
Eyg0NzE5YTdmYTExMjYzMDBiNTdjNGZjOTg2Y2UwYmI1OWFmZWI1MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9sukeDQyNTymIIL6jeLAauaqHXo
lTsX+x4EIW7ohvVSSUFJrp+lfQ8jnQCvyAd+sNlA26eDakC05/XqcEkL7GUgewHB
8IvH2GGhIziMKNA2Nke75kncqV/eshe00+VYU0NYwBz82Oc8vJJ5+Y/n+Bx12YYx
Tnd2zFO0ZT7vC1uXX5z9TKTfADqMig3mih7gMa45BQIUVFUprUtF8hWqh0Qivm0q
vH5Uowh/257QEtwlLInetjan8hN3ST8MbKDYoo4zJuTyvaRy5lDkS9K32u/t6yvI
Tw/gpKkWPYoNEeKfRLp3oCDlIkBiWH9z0j+6BuTl8CWLKyIZ3waNaScHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcZp/oRJjALV8T8mGzgu1mv61GNMB8GA1UdIwQY
MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt
YTgyZjY1OGEyYWExLzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx
LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxNroPw5
RXDiwpfdOewaZM6QEucHtcniKgSlguXPhhiHaAcU3UNLMC0/bcsS2XNnuGI/28rw
vWrg6bnB10ITxdFejyxJ/6Bw63fd0Tvl8jLLXgZCBWLkywNStcaxxy28RcSjzn4z
UJJ9JqQd4916hjSRAcOhSmfMWsfcokH8g3rii3uUeJ7YwfkILW9CHBA8qbh35VTs
Sg5agrx0FcDTgmF6MaD3zJ9OT/RgvjbKoAAx34TGrInVBArqbKsncoHtzI2h06mx
NC9RSRzos/Qw60rlydnIrnv/++zMcr7JxLJN2766KdbOuSSWoVQQAS78FYhG3Ytb
jxc4WfQZSiCrBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:40 2026 by rpki-client