Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: QlVzL1m5BvplkLibIoHT9JsDdPUReDfVKCYD53QMo50=
Subject key identifier: C9:F0:FE:2B:61:14:57:47:EE:85:69:92:64:ED:D0:20:FC:61:15:04
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 019C853953E0E87E348B0663B4291431F0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 167B
Signing time: Sun 22 Feb 2026 12:00:52 +0000
Manifest this update: Sun 22 Feb 2026 12:00:52 +0000
Manifest next update: Mon 23 Feb 2026 12:00:52 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: WvumZJQ6UvVkNCqq6DjVMVLNMJm9pJ+SIcVUVsN0a7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:85:39:53:e0:e8:7e:34:8b:06:63:b4:29:14:31:f0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Feb 22 12:00:52 2026 GMT
Not After : Feb 23 12:00:52 2026 GMT
Subject: CN=c9f0fe2b61145747ee85699264edd020fc611504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:1a:66:53:ba:11:6d:fe:cf:14:64:dc:0b:
98:73:da:42:ec:a8:6e:9a:14:bf:f3:35:e4:2e:a9:
5a:bc:f0:a3:eb:f7:09:f2:e0:25:fd:ca:16:b9:fc:
c8:5f:25:4f:5e:1f:ee:f3:68:28:8c:37:dd:e3:d0:
7f:a5:be:a2:98:1e:d4:ce:c7:38:01:55:4d:f5:65:
a7:6f:8f:f0:37:e6:20:a5:36:d5:23:fa:c9:99:82:
ad:ef:bd:3e:15:2f:e3:67:90:2f:87:d3:ba:54:18:
81:6d:1f:cc:a2:37:df:e3:b8:2d:6a:11:6a:65:22:
b6:9d:02:7e:79:b9:ca:dd:f7:b1:48:17:28:44:bc:
8c:c6:b8:57:2e:70:63:e0:12:05:b6:5c:3a:d0:80:
c1:1f:7e:68:61:83:03:5e:05:8c:02:b4:c9:d0:9d:
81:a8:98:e0:04:10:8d:09:f3:6f:c1:82:d4:6d:28:
1a:48:c3:e4:c0:42:47:2e:5c:76:63:16:0d:35:a4:
0a:f5:90:25:11:4b:da:41:80:a1:aa:75:44:43:e1:
96:23:2f:97:97:17:1b:f2:ed:45:a0:f8:97:e8:9c:
8c:8c:4c:be:21:bd:0c:23:df:7e:6c:93:97:2a:65:
34:00:96:d6:75:5d:36:b0:ee:aa:2a:d3:56:a9:e0:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:FE:2B:61:14:57:47:EE:85:69:92:64:ED:D0:20:FC:61:15:04
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:ac:c3:ea:5c:01:e0:60:62:e0:34:86:33:21:cf:32:bb:
59:5c:1d:5e:28:71:33:a6:59:5f:f6:b5:32:a1:46:52:93:22:
cc:6a:20:9d:68:24:32:70:4d:ee:a6:f4:76:79:1d:f9:d4:47:
da:ee:5a:87:5a:89:19:4b:1e:b0:39:bd:90:f2:47:2a:1e:db:
e2:04:13:cf:65:f6:3c:b8:ad:98:80:e6:d1:08:e9:d8:cc:b1:
ab:98:18:55:0d:3b:12:ff:bc:17:5b:3b:bb:c9:39:77:40:ac:
b7:8f:60:f4:26:dc:d7:60:a1:d0:bb:5c:3b:b3:09:1e:a2:dc:
79:e7:74:8c:e1:f5:08:40:dd:06:75:e1:cb:cb:e8:79:8a:25:
5d:77:0d:48:b4:2d:02:9e:40:34:ac:39:e9:72:c8:77:1d:d2:
9d:0a:e0:3a:37:05:b0:66:fd:63:a2:49:79:15:eb:48:23:3a:
65:22:5e:44:7e:5d:a0:bd:fb:8e:eb:33:11:2e:62:ea:54:73:
40:f3:e7:3a:1a:de:56:06:f2:0c:9c:c4:7c:70:e3:76:f1:64:
06:c6:d1:a1:a0:1e:76:54:26:3d:37:51:99:27:a6:63:cf:c6:
4f:29:56:01:e1:ab:21:92:69:2f:55:a7:18:89:95:43:d3:6e:
fb:e1:4c:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyFOVPg6H40iwZjtCkUMfD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjYwMjIyMTIwMDUyWhcNMjYwMjIzMTIwMDUyWjAzMTEwLwYDVQQD
EyhjOWYwZmUyYjYxMTQ1NzQ3ZWU4NTY5OTI2NGVkZDAyMGZjNjExNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMaZlO6EW3+zxRk3AuYc9pC7Khu
mhS/8zXkLqlavPCj6/cJ8uAl/coWufzIXyVPXh/u82gojDfd49B/pb6imB7Uzsc4
AVVN9WWnb4/wN+YgpTbVI/rJmYKt770+FS/jZ5Avh9O6VBiBbR/Mojff47gtahFq
ZSK2nQJ+ebnK3fexSBcoRLyMxrhXLnBj4BIFtlw60IDBH35oYYMDXgWMArTJ0J2B
qJjgBBCNCfNvwYLUbSgaSMPkwEJHLlx2YxYNNaQK9ZAlEUvaQYChqnVEQ+GWIy+X
lxcb8u1FoPiX6JyMjEy+Ib0MI99+bJOXKmU0AJbWdV02sO6qKtNWqeCE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnw/ithFFdH7oVpkmTt0CD8YRUEMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYWsw+pc
AeBgYuA0hjMhzzK7WVwdXihxM6ZZX/a1MqFGUpMizGognWgkMnBN7qb0dnkd+dRH
2u5ah1qJGUsesDm9kPJHKh7b4gQTz2X2PLitmIDm0Qjp2Myxq5gYVQ07Ev+8F1s7
u8k5d0Cst49g9Cbc12Ch0LtcO7MJHqLceed0jOH1CEDdBnXhy8voeYolXXcNSLQt
Ap5ANKw56XLIdx3SnQrgOjcFsGb9Y6JJeRXrSCM6ZSJeRH5doL37juszES5i6lRz
QPPnOhreVgbyDJzEfHDjdvFkBsbRoaAedlQmPTdRmSemY8/GTylWAeGrIZJpL1Wn
GImVQ9Nu++FM+Q==
-----END CERTIFICATE-----
Generated at Sun Feb 22 15:22:35 2026 by rpki-client