Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: ko3IYDXwVfX8QAa7RG7hH1TGDe8G/J2CQ2YwuOqDFnU=
Subject key identifier: 7E:85:0B:0F:37:D5:58:BA:E7:63:28:6C:4A:DE:21:D2:3D:7B:32:24
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 01A0F0E6F9B2EDE2F9C353314704C9E9BFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 06:01:04 +0000
Manifest this update: Wed 30 Sep 2026 06:01:04 +0000
Manifest next update: Thu 01 Oct 2026 06:01:04 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: fDTJTj0znF5cgP7gxQRNcc2NgAlHjD+VyRXhaLf+XWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e6:f9:b2:ed:e2:f9:c3:53:31:47:04:c9:e9:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Sep 30 06:01:04 2026 GMT
Not After : Oct 1 06:01:04 2026 GMT
Subject: CN=7e850b0f37d558bae763286c4ade21d23d7b3224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:15:d3:34:88:48:7e:75:14:76:56:66:e6:
ef:46:d8:5e:d0:8f:3c:4b:9f:9e:c5:dd:b2:32:6b:
d2:54:70:83:7e:77:aa:13:bb:5e:2e:c2:45:19:14:
d9:c4:ff:af:ca:94:e2:d8:4f:c5:e5:b6:2a:12:53:
ca:7b:4d:fa:7d:cd:7b:3d:4c:04:4f:46:f8:98:36:
56:61:b1:4f:e4:1c:d7:6e:df:3e:fd:78:5f:22:c7:
36:f8:db:d7:e5:11:d3:eb:eb:05:53:0a:04:af:c8:
f6:ba:40:57:b9:08:9e:14:fe:4f:1d:c7:92:7a:7a:
cc:89:f6:74:73:31:ff:45:7c:0f:0c:a1:e7:b1:b1:
75:72:a7:fa:99:7f:99:83:d8:23:2e:68:4a:54:86:
dc:fe:9d:7c:7c:bc:d2:f4:c3:de:72:a5:8f:5e:5e:
75:26:b9:6f:69:01:6f:6f:c1:66:61:de:c9:4f:fd:
01:46:67:a6:94:8f:4a:95:d3:0d:81:d4:8f:07:63:
f7:db:56:87:10:fc:aa:5a:c6:da:68:43:0b:38:37:
e6:79:69:2d:66:2c:6f:3d:43:87:0f:99:ec:fa:4a:
1d:c6:22:90:b6:f3:63:c1:2a:bb:85:8b:76:ba:7d:
5b:58:6b:41:cc:c9:db:3f:67:50:9f:db:11:69:ec:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:85:0B:0F:37:D5:58:BA:E7:63:28:6C:4A:DE:21:D2:3D:7B:32:24
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:56:b7:84:6b:f8:d4:a6:25:ba:d5:f4:7d:1f:76:b7:42:00:
02:a9:6d:43:83:ca:2e:f1:f1:86:1d:bb:24:aa:27:e9:fe:4b:
c2:bb:fa:21:1d:a9:9c:74:3c:44:c6:42:07:65:3e:4b:47:7a:
ed:be:98:75:14:f4:7e:d0:1d:ee:07:07:a0:33:4a:f6:6e:a8:
5c:9b:07:a6:2d:d8:59:d1:49:e5:f9:bc:40:e5:26:1b:79:43:
18:fa:d9:56:d5:64:ce:1b:29:78:a0:f0:3a:c2:95:47:ae:09:
f8:15:ff:ec:2b:6e:18:cb:73:fc:15:d3:7f:22:d4:85:2e:63:
7b:4c:e1:3a:a8:27:d8:98:c4:fc:e2:32:b9:f3:ff:b5:72:57:
1d:8a:e1:b9:0a:92:a7:e3:b2:e0:a9:55:92:5a:8b:f8:21:ec:
16:1a:c7:76:89:b1:da:6c:98:a3:48:51:30:af:d5:fa:a3:8a:
20:e8:cf:0a:18:4e:86:12:13:c3:1b:e8:ca:4d:66:93:0a:a8:
54:1d:d5:40:24:ff:34:94:9a:aa:65:94:dd:ff:00:ae:79:47:
10:f4:c0:96:dd:38:14:5b:08:c2:9c:fb:49:28:5c:1b:82:bd:
0e:d4:62:ce:79:fd:26:c8:4b:be:dc:17:69:49:cb:79:0d:f2:
f8:fc:6b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDw5vmy7eL5w1MxRwTJ6b+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTg5YjE1OGQ4ZDYwMTFiYTVmOTYyNTJkMzAyNjZhNzBk
M2UwNjYwHhcNMjYwOTMwMDYwMTA0WhcNMjYxMDAxMDYwMTA0WjAzMTEwLwYDVQQD
Eyg3ZTg1MGIwZjM3ZDU1OGJhZTc2MzI4NmM0YWRlMjFkMjNkN2IzMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0YV0zSISH51FHZWZubvRthe0I88
S5+exd2yMmvSVHCDfneqE7teLsJFGRTZxP+vypTi2E/F5bYqElPKe036fc17PUwE
T0b4mDZWYbFP5BzXbt8+/XhfIsc2+NvX5RHT6+sFUwoEr8j2ukBXuQieFP5PHceS
enrMifZ0czH/RXwPDKHnsbF1cqf6mX+Zg9gjLmhKVIbc/p18fLzS9MPecqWPXl51
JrlvaQFvb8FmYd7JT/0BRmemlI9KldMNgdSPB2P321aHEPyqWsbaaEMLODfmeWkt
ZixvPUOHD5ns+kodxiKQtvNjwSq7hYt2un1bWGtBzMnbP2dQn9sRaex3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6FCw831Vi652MobEreIdI9ezIkMB8GA1UdIwQY
MBaAFJUYmxWNjWARul+WJS0wJmpw0+BmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJpYkZZMk5ZQkc2WDVZbExUQW1hbkRUNEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMjdhZDAtNTVjMi00OTA0LWE4YzUt
YWNlMTgwZmY5YjE5LzEvbFJpYkZZMk5ZQkc2WDVZbExUQW1hbkRUNEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMjdhZDAtNTVjMi00OTA0LWE4YzUtYWNlMTgwZmY5YjE5
LzEvbFJpYkZZMk5ZQkc2WDVZbExUQW1hbkRUNEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVa3hGv4
1KYlutX0fR92t0IAAqltQ4PKLvHxhh27JKon6f5Lwrv6IR2pnHQ8RMZCB2U+S0d6
7b6YdRT0ftAd7gcHoDNK9m6oXJsHpi3YWdFJ5fm8QOUmG3lDGPrZVtVkzhspeKDw
OsKVR64J+BX/7CtuGMtz/BXTfyLUhS5je0zhOqgn2JjE/OIyufP/tXJXHYrhuQqS
p+Oy4KlVklqL+CHsFhrHdomx2myYo0hRMK/V+qOKIOjPChhOhhITwxvoyk1mkwqo
VB3VQCT/NJSaqmWU3f8ArnlHEPTAlt04FFsIwpz7SShcG4K9DtRiznn9JshLvtwX
aUnLeQ3y+PxrYQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 12:57:37 2026 by rpki-client