Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: 5HpmioxkAEbeh4aO3p7wZb2aEsXy9YSF1DfSBFxVKmM=
Subject key identifier: 02:8D:BF:5E:65:18:BF:CE:D4:FE:02:97:43:19:B5:08:88:0F:BD:3F
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019E32CEC598F8070A3B2D1EE8D0A9D21691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0808
Signing time: Sat 16 May 2026 22:01:12 +0000
Manifest this update: Sat 16 May 2026 22:01:12 +0000
Manifest next update: Sun 17 May 2026 22:01:12 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: dBtDiy/odbWSfmC6Go67xWj0iMFuP7gGP7hXPgUnsi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:c5:98:f8:07:0a:3b:2d:1e:e8:d0:a9:d2:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: May 16 22:01:12 2026 GMT
Not After : May 17 22:01:12 2026 GMT
Subject: CN=028dbf5e6518bfced4fe02974319b508880fbd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:f7:68:c3:da:5b:a1:a8:e4:7a:4d:47:71:
11:81:5f:b2:4b:d4:2f:db:ec:ce:c0:ac:df:1a:08:
71:bb:02:5e:c7:f0:32:b6:fa:fa:1f:22:fe:41:14:
8b:54:73:4d:3c:35:fe:ba:8d:7d:e5:f9:df:db:fb:
63:7b:2c:ec:15:33:6d:c9:c5:46:8e:34:0e:33:16:
dc:4a:66:cf:53:21:40:f9:3b:62:8a:6c:40:80:c7:
42:fa:86:53:00:59:bd:ec:01:e2:db:ee:29:2b:a0:
be:f8:b6:55:68:75:10:0f:88:1e:92:24:09:6d:4b:
0c:05:91:69:d4:34:c7:72:d7:b1:b8:92:f0:ec:0d:
5e:3e:82:15:a1:19:40:d3:a6:c2:bc:8d:6a:df:73:
79:00:c2:92:0f:a1:7a:d8:01:0e:77:9e:ac:82:1e:
35:a5:7f:96:67:e5:72:c5:78:11:84:31:31:b8:f4:
5d:f2:6e:6e:06:79:a9:77:8a:f9:b0:60:61:a8:35:
56:b5:8d:69:23:01:33:fe:b3:92:86:a1:f6:39:c5:
7f:33:79:fa:23:8d:94:1c:f2:77:18:47:6d:d2:5e:
3e:c6:51:6a:fd:8d:21:a8:49:ca:c0:80:49:f4:ed:
6d:74:bb:5d:81:01:67:07:64:25:c4:71:5e:d5:34:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:BF:5E:65:18:BF:CE:D4:FE:02:97:43:19:B5:08:88:0F:BD:3F
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:29:9f:05:cd:df:55:ba:6d:e9:71:fb:59:6b:94:8a:c4:
d8:12:5a:09:04:f9:96:eb:22:5c:a7:7e:8e:9c:13:3d:38:9e:
01:5a:45:a0:12:42:7e:83:f3:3b:03:c6:56:2d:76:ac:d4:ee:
e5:93:87:6e:f1:fc:6c:55:18:c9:c5:87:8f:bb:56:0b:9a:96:
d2:04:5f:15:85:59:6f:2c:3e:66:4e:f2:a5:5b:7a:4f:ac:ea:
18:5e:3b:2d:55:cf:5f:b5:18:eb:a5:49:32:f7:78:1f:c8:fe:
51:c6:83:75:7b:54:ab:18:b6:59:ce:56:d4:aa:17:df:08:8e:
11:70:a9:d6:4b:16:d0:6f:39:5f:d6:18:3f:c8:99:84:6d:5e:
ff:62:a3:4a:09:67:87:1f:11:21:d6:04:18:5a:5a:f3:37:72:
18:f5:8c:2c:ca:d1:d9:a8:4a:74:a5:6f:0b:62:6a:50:be:f3:
ba:ec:4c:2f:72:61:82:09:5d:ce:3c:e7:3f:61:10:61:d4:c4:
6e:17:97:16:15:a2:1e:78:cb:c8:36:cd:7d:e0:21:63:fd:39:
36:7d:05:34:35:55:80:46:fb:db:d0:c5:2d:dd:56:f3:bd:bc:
d3:b5:57:ac:eb:a6:1c:55:e4:77:ad:a5:6f:25:b9:e8:a8:1f:
74:b5:7b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yzsWY+AcKOy0e6NCp0haRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjYwNTE2MjIwMTEyWhcNMjYwNTE3MjIwMTEyWjAzMTEwLwYDVQQD
EygwMjhkYmY1ZTY1MThiZmNlZDRmZTAyOTc0MzE5YjUwODg4MGZiZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu73aMPaW6Go5HpNR3ERgV+yS9Qv
2+zOwKzfGghxuwJex/Aytvr6HyL+QRSLVHNNPDX+uo195fnf2/tjeyzsFTNtycVG
jjQOMxbcSmbPUyFA+TtiimxAgMdC+oZTAFm97AHi2+4pK6C++LZVaHUQD4gekiQJ
bUsMBZFp1DTHctexuJLw7A1ePoIVoRlA06bCvI1q33N5AMKSD6F62AEOd56sgh41
pX+WZ+VyxXgRhDExuPRd8m5uBnmpd4r5sGBhqDVWtY1pIwEz/rOShqH2OcV/M3n6
I42UHPJ3GEdt0l4+xlFq/Y0hqEnKwIBJ9O1tdLtdgQFnB2QlxHFe1TR4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKNv15lGL/O1P4Cl0MZtQiID70/MB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFApnwXN
31W6belx+1lrlIrE2BJaCQT5lusiXKd+jpwTPTieAVpFoBJCfoPzOwPGVi12rNTu
5ZOHbvH8bFUYycWHj7tWC5qW0gRfFYVZbyw+Zk7ypVt6T6zqGF47LVXPX7UY66VJ
Mvd4H8j+UcaDdXtUqxi2Wc5W1KoX3wiOEXCp1ksW0G85X9YYP8iZhG1e/2KjSgln
hx8RIdYEGFpa8zdyGPWMLMrR2ahKdKVvC2JqUL7zuuxML3JhggldzjznP2EQYdTE
bheXFhWiHnjLyDbNfeAhY/05Nn0FNDVVgEb729DFLd1W872807VXrOumHFXkd62l
byW56KgfdLV7XA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:29:01 2026 by rpki-client