Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: CT/dG3Fr3pUrUNgwQoCzC/IkFBn9GaozaXQlBXoOU8M=
Subject key identifier: 9A:EB:50:F9:E0:8C:82:F1:13:2E:96:EE:54:6A:FE:C3:D6:97:6F:61
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019D39098FEB9DB230FBD0320804B51983BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 05B0
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: gblHJpdOTgb7TCwcfE2LvX7+9jBHJd48a32hl19/S3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8f:eb:9d:b2:30:fb:d0:32:08:04:b5:19:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=9aeb50f9e08c82f1132e96ee546afec3d6976f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:d1:94:3b:a1:2e:d7:b5:aa:15:12:d9:17:
00:8b:5b:75:32:ab:5e:7d:06:fa:b6:12:7c:dd:9b:
0e:1f:44:ae:5b:d1:34:98:3c:81:18:b2:7f:41:25:
e9:82:85:97:c5:50:fe:7a:8d:b2:27:ea:be:54:65:
63:49:47:41:7b:e5:85:cc:08:96:5a:45:40:23:70:
f2:2a:3c:cf:9d:a6:55:00:8d:21:7b:0b:26:1a:3c:
91:54:f0:cb:85:d7:67:7b:80:c8:53:64:b8:e4:06:
b4:ad:e2:b1:c2:7d:94:6e:3f:68:2c:4b:6a:ea:6b:
16:3a:16:b2:db:ab:77:73:64:c6:4e:78:a6:b3:0c:
50:82:ae:ee:b7:97:37:ba:68:0a:0a:8c:de:a5:fe:
77:36:f1:b0:bf:17:e6:7a:30:7c:d6:7d:94:f5:1c:
b5:42:1c:1e:2b:61:0d:a6:a9:9e:4b:49:2c:d4:a4:
2f:1b:f2:22:47:77:27:4a:0f:c5:d1:d8:fd:19:89:
9f:ff:5c:21:6b:5d:fe:1b:9b:ef:f3:f0:bb:ae:82:
c5:b6:83:d2:8d:4c:3c:bb:81:0b:03:2d:63:05:b2:
fb:7e:28:d8:c7:d3:12:11:0d:4b:b9:99:b0:54:05:
74:d6:0b:e5:7f:c4:63:fd:98:28:d0:78:93:96:d8:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:50:F9:E0:8C:82:F1:13:2E:96:EE:54:6A:FE:C3:D6:97:6F:61
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:52:7d:29:20:66:42:55:2f:ee:ae:8a:a9:47:86:07:78:
7a:58:e5:e6:0e:4c:a5:6e:5b:20:ce:4a:cd:34:f3:fc:07:57:
ca:32:25:f1:98:33:7f:2c:b3:88:ed:16:1c:cd:3f:dc:1a:9f:
51:2a:bd:14:34:cb:0e:f2:0a:55:50:18:c7:a4:0a:e4:33:41:
f7:0d:3d:ef:13:c3:2b:2b:3d:2b:90:2d:1f:42:29:63:05:4f:
fc:aa:10:09:62:17:49:77:21:4a:a6:7e:2f:4c:72:48:a2:28:
3b:fa:4f:64:8b:d0:b9:6b:bf:25:94:4b:9a:c3:81:76:59:92:
10:ba:5b:08:0e:08:49:d1:6c:79:74:c6:be:f2:4d:76:45:4b:
56:2a:78:f4:ee:07:28:77:44:0b:ac:f9:5a:a2:04:a7:87:31:
58:b0:fa:dd:e2:9b:9b:df:8c:7d:d2:fa:b1:e7:21:a1:f7:9d:
24:b5:04:e9:3b:dc:98:88:62:83:89:8e:7d:71:ad:2e:30:8d:
55:18:11:2b:c1:62:94:60:22:b8:1a:64:9e:21:bd:7f:b2:ff:
d0:3e:2d:66:ba:1c:87:3a:d4:de:e1:91:fb:b8:92:14:94:ea:
24:db:79:83:27:8b:c7:3c:42:47:e1:63:32:90:57:19:8f:ce:
9b:74:f5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CY/rnbIw+9AyCAS1GYO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4
OGExZTQwHhcNMjYwMzI5MTAwMDIxWhcNMjYwMzMwMTAwMDIxWjAzMTEwLwYDVQQD
Eyg5YWViNTBmOWUwOGM4MmYxMTMyZTk2ZWU1NDZhZmVjM2Q2OTc2ZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU7RlDuhLte1qhUS2RcAi1t1Mqte
fQb6thJ83ZsOH0SuW9E0mDyBGLJ/QSXpgoWXxVD+eo2yJ+q+VGVjSUdBe+WFzAiW
WkVAI3DyKjzPnaZVAI0hewsmGjyRVPDLhddne4DIU2S45Aa0reKxwn2Ubj9oLEtq
6msWOhay26t3c2TGTnimswxQgq7ut5c3umgKCozepf53NvGwvxfmejB81n2U9Ry1
QhweK2ENpqmeS0ks1KQvG/IiR3cnSg/F0dj9GYmf/1wha13+G5vv8/C7roLFtoPS
jUw8u4ELAy1jBbL7fijYx9MSEQ1LuZmwVAV01gvlf8Rj/Zgo0HiTltiHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrrUPngjILxEy6W7lRq/sPWl29hMB8GA1UdIwQY
MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt
YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw
LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzVSfSkg
ZkJVL+6uiqlHhgd4eljl5g5MpW5bIM5KzTTz/AdXyjIl8ZgzfyyziO0WHM0/3Bqf
USq9FDTLDvIKVVAYx6QK5DNB9w097xPDKys9K5AtH0IpYwVP/KoQCWIXSXchSqZ+
L0xySKIoO/pPZIvQuWu/JZRLmsOBdlmSELpbCA4ISdFseXTGvvJNdkVLVip49O4H
KHdEC6z5WqIEp4cxWLD63eKbm9+MfdL6sechofedJLUE6TvcmIhig4mOfXGtLjCN
VRgRK8FilGAiuBpkniG9f7L/0D4tZrochzrU3uGR+7iSFJTqJNt5gyeLxzxCR+Fj
MpBXGY/Om3T1Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:07 2026 by rpki-client