Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: Cqv1oC7jyL7xwjEhiGEEpPxNBR4/DEX/hHeFQ5+OC2U=
Subject key identifier: 6B:14:2B:46:BF:A1:13:70:D5:42:2B:3C:B3:22:F0:28:4D:13:B7:97
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01A131B4B0FD96CC3C9783E530DB4200CEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 17B1
Signing time: Mon 12 Oct 2026 20:01:27 +0000
Manifest this update: Mon 12 Oct 2026 20:01:27 +0000
Manifest next update: Tue 13 Oct 2026 20:01:27 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: +2hHPvFxShT7GWHLUQgTkYUTACSZR+ZZzWHf+3wOHMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:b0:fd:96:cc:3c:97:83:e5:30:db:42:00:ce:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Oct 12 20:01:27 2026 GMT
Not After : Oct 13 20:01:27 2026 GMT
Subject: CN=6b142b46bfa11370d5422b3cb322f0284d13b797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:b7:3d:1d:20:49:56:ac:bc:9c:0b:4d:63:
c4:40:81:c5:44:73:7f:e8:d8:83:e1:48:f8:0c:34:
21:dd:de:26:c6:ca:77:97:82:40:b5:5b:60:a6:bd:
c2:48:97:f0:38:38:e6:5c:71:ee:55:bb:fa:f3:2a:
84:e1:c5:17:e3:e4:4a:30:02:80:d0:18:08:22:fa:
74:9d:02:06:9b:cb:97:7b:28:82:50:a5:b9:2a:95:
eb:a4:a6:01:d0:94:cf:49:35:27:5a:8b:68:75:63:
a2:d1:96:b1:1b:62:bb:28:cc:4f:3a:bf:b9:ca:6d:
ef:14:63:2d:5d:0f:2e:3c:ca:b5:d0:5d:02:84:19:
95:36:8a:bc:57:bd:6d:56:97:ff:5c:55:cb:3b:b3:
80:84:7c:35:09:bd:87:bc:e2:c4:52:7d:47:31:76:
15:70:d8:ab:34:44:f4:bd:60:f1:5e:70:89:ae:7f:
12:b0:7f:d0:49:62:c6:89:19:e4:52:b7:96:3d:ec:
9d:61:54:9f:c4:b7:04:10:da:c4:db:65:dc:58:1f:
08:d4:e1:e1:8d:e4:7f:3c:8d:81:09:82:ef:23:ab:
6f:50:11:de:bc:83:45:96:cf:c5:41:76:ea:bc:05:
55:a6:fa:4a:60:98:82:41:ff:17:ee:6b:41:ee:f6:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:2B:46:BF:A1:13:70:D5:42:2B:3C:B3:22:F0:28:4D:13:B7:97
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:62:e1:1d:24:d2:df:64:45:f5:0e:26:fc:00:96:5e:b2:42:
d6:34:d0:da:bb:d9:1a:16:c4:82:e3:24:66:35:ea:aa:99:8e:
df:e2:0e:a3:b0:63:a4:e4:35:29:3b:ce:07:4b:cc:4b:a1:e1:
09:11:3e:ef:4f:a7:80:07:0c:c2:66:da:fb:5a:aa:c0:a5:98:
04:fd:5a:3a:5a:a7:7e:d7:4e:1e:22:39:ba:75:7d:80:fa:fe:
22:ef:af:bc:ba:e9:43:8c:09:ee:18:c1:33:9c:03:59:ba:b2:
3b:10:d9:ef:2c:91:e6:6e:fb:ff:6c:42:eb:b3:7c:65:88:e8:
f1:59:6a:cc:89:db:0f:1f:0b:dd:8b:2d:9e:5f:da:42:11:bd:
3d:20:99:87:a0:67:73:96:46:bd:51:52:b0:96:ef:6d:7a:fe:
7b:db:cd:72:a9:3f:10:be:10:13:b2:0e:ff:07:02:dc:36:1e:
ef:51:6b:10:8e:d0:c2:62:6c:db:79:36:9a:2f:39:67:1e:78:
34:df:f4:6f:bd:9b:e1:ac:9c:b3:da:3d:69:4f:56:b0:bb:87:
45:26:19:e0:ec:f0:3a:fe:f1:f0:62:5f:18:4a:e2:8a:7f:83:
18:98:2e:8b:9a:fa:89:ba:c2:2f:68:d2:8b:03:8b:c1:39:f0:
4e:8c:ac:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExtLD9lsw8l4PlMNtCAM7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTM0MjZlMjM2MWJhNjY1ZDhmMjViZDNjZmFlZmMyMGVi
ZGE0ODgwHhcNMjYxMDEyMjAwMTI3WhcNMjYxMDEzMjAwMTI3WjAzMTEwLwYDVQQD
Eyg2YjE0MmI0NmJmYTExMzcwZDU0MjJiM2NiMzIyZjAyODRkMTNiNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7C3PR0gSVasvJwLTWPEQIHFRHN/
6NiD4Uj4DDQh3d4mxsp3l4JAtVtgpr3CSJfwODjmXHHuVbv68yqE4cUX4+RKMAKA
0BgIIvp0nQIGm8uXeyiCUKW5KpXrpKYB0JTPSTUnWotodWOi0ZaxG2K7KMxPOr+5
ym3vFGMtXQ8uPMq10F0ChBmVNoq8V71tVpf/XFXLO7OAhHw1Cb2HvOLEUn1HMXYV
cNirNET0vWDxXnCJrn8SsH/QSWLGiRnkUreWPeydYVSfxLcEENrE22XcWB8I1OHh
jeR/PI2BCYLvI6tvUBHevINFls/FQXbqvAVVpvpKYJiCQf8X7mtB7vaQHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsUK0a/oRNw1UIrPLMi8ChNE7eXMB8GA1UdIwQY
MBaAFP5TQm4jYbpmXY8lvTz678IOvaSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2Mt
OTc3NWE1ZDY2MDRjLzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2MtOTc3NWE1ZDY2MDRj
LzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGLhHSTS
32RF9Q4m/ACWXrJC1jTQ2rvZGhbEguMkZjXqqpmO3+IOo7BjpOQ1KTvOB0vMS6Hh
CRE+70+ngAcMwmba+1qqwKWYBP1aOlqnftdOHiI5unV9gPr+Iu+vvLrpQ4wJ7hjB
M5wDWbqyOxDZ7yyR5m77/2xC67N8ZYjo8VlqzInbDx8L3Ystnl/aQhG9PSCZh6Bn
c5ZGvVFSsJbvbXr+e9vNcqk/EL4QE7IO/wcC3DYe71FrEI7QwmJs23k2mi85Zx54
NN/0b72b4aycs9o9aU9WsLuHRSYZ4OzwOv7x8GJfGEriin+DGJgui5r6ibrCL2jS
iwOLwTnwToysWQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:54:47 2026 by rpki-client