Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: gzRzi9GDOTULpewF312qnJlFsCZSwfH43+cXlKj+BUI=
Subject key identifier: 41:92:79:C9:59:83:B4:E4:23:B4:B6:8B:67:6C:FB:63:9A:27:B5:17
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019E326067523544269C0D3D3D32971D88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 16F0
Signing time: Sat 16 May 2026 20:00:39 +0000
Manifest this update: Sat 16 May 2026 20:00:39 +0000
Manifest next update: Sun 17 May 2026 20:00:39 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 6EFP+SyxLiS7UG8G4n+dEApaYeoFiikRnUy363f49Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:67:52:35:44:26:9c:0d:3d:3d:32:97:1d:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: May 16 20:00:39 2026 GMT
Not After : May 17 20:00:39 2026 GMT
Subject: CN=419279c95983b4e423b4b68b676cfb639a27b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:21:d1:28:f3:20:36:8e:61:64:e1:69:e7:
ab:47:3b:13:1e:70:dc:93:0a:46:2f:29:c3:bb:6a:
79:98:a8:da:40:16:e2:82:f7:05:aa:0a:e4:30:7e:
14:97:70:bb:ee:9b:02:6a:4b:5e:d4:73:5c:60:b8:
17:fc:52:87:e0:8c:59:09:08:5a:f2:78:3c:82:7c:
2a:d6:d1:eb:22:84:60:7f:00:88:f1:0e:05:c1:45:
1c:72:6e:9d:89:7b:19:f0:37:1c:77:e5:2a:4d:17:
ec:86:10:c3:59:a9:9c:80:3f:9c:c2:c5:83:e1:e2:
96:5d:79:07:1f:e4:d6:82:12:ee:73:1a:d4:1d:a6:
09:55:32:32:05:b7:4b:5e:12:a0:31:ae:9f:81:97:
16:92:7d:16:a2:e4:32:6d:a8:12:01:d5:74:a1:3a:
cf:ba:65:1c:33:5c:f4:84:2b:90:3e:9d:30:a6:7d:
03:8e:b8:23:de:8d:6f:2c:62:9c:3f:fa:1f:a8:f5:
57:79:ee:e5:26:d1:19:fe:a8:00:77:38:6a:86:89:
f2:85:13:e9:bd:74:15:41:ce:db:0a:35:c6:af:0e:
26:7c:ac:41:a3:cd:7d:97:7f:bf:62:98:28:c8:51:
b7:15:d6:0b:37:a4:cd:c5:2b:20:89:19:f1:3d:71:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:79:C9:59:83:B4:E4:23:B4:B6:8B:67:6C:FB:63:9A:27:B5:17
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:1f:44:f2:4a:76:59:ce:5b:cd:79:d2:ae:87:8d:02:d1:
27:50:99:68:b7:2c:fc:7f:dd:8d:5c:ef:05:ac:93:bb:7d:8e:
6a:76:c2:4c:ef:f1:19:c7:1f:9b:37:5c:79:cd:43:99:b8:7d:
2a:f6:99:cc:49:19:83:9a:0b:7b:6c:f9:a3:01:b4:52:82:62:
db:a1:25:59:b5:d4:f2:d1:f6:10:6c:dd:ff:e4:50:52:36:61:
65:8b:da:5a:47:2e:b8:da:c2:6e:1d:f2:7c:3b:19:e2:7d:4c:
82:96:20:20:77:cd:5e:59:df:92:5b:c9:a2:f9:ac:2d:f7:55:
94:e6:ce:62:a0:91:48:a5:55:bb:63:dc:44:c4:2c:41:04:73:
e1:53:51:33:ff:55:f0:7d:79:4d:35:ed:c2:5b:70:8a:66:dd:
20:09:f0:0f:7c:35:13:f9:0d:59:c7:bf:74:5d:cc:8a:e8:7a:
83:83:82:df:5a:5b:67:69:f3:64:c6:bb:44:4f:0e:9d:c2:44:
83:47:65:21:d6:fe:07:13:7b:bc:46:d6:48:17:34:5f:9d:2b:
55:aa:c7:6a:36:6c:69:6a:9b:f0:bf:6b:41:74:c5:d0:98:59:
65:d0:9c:20:1c:e3:75:7a:4b:c7:d7:bc:3c:5d:57:f5:1b:da:
cc:ed:48:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYGdSNUQmnA09PTKXHYjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjYwNTE2MjAwMDM5WhcNMjYwNTE3MjAwMDM5WjAzMTEwLwYDVQQD
Eyg0MTkyNzljOTU5ODNiNGU0MjNiNGI2OGI2NzZjZmI2MzlhMjdiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0h0SjzIDaOYWThaeerRzsTHnDc
kwpGLynDu2p5mKjaQBbigvcFqgrkMH4Ul3C77psCakte1HNcYLgX/FKH4IxZCQha
8ng8gnwq1tHrIoRgfwCI8Q4FwUUccm6diXsZ8Dccd+UqTRfshhDDWamcgD+cwsWD
4eKWXXkHH+TWghLucxrUHaYJVTIyBbdLXhKgMa6fgZcWkn0WouQybagSAdV0oTrP
umUcM1z0hCuQPp0wpn0Djrgj3o1vLGKcP/ofqPVXee7lJtEZ/qgAdzhqhonyhRPp
vXQVQc7bCjXGrw4mfKxBo819l3+/YpgoyFG3FdYLN6TNxSsgiRnxPXHt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGSeclZg7TkI7S2i2ds+2OaJ7UXMB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDwfRPJK
dlnOW8150q6HjQLRJ1CZaLcs/H/djVzvBayTu32OanbCTO/xGccfmzdcec1Dmbh9
KvaZzEkZg5oLe2z5owG0UoJi26ElWbXU8tH2EGzd/+RQUjZhZYvaWkcuuNrCbh3y
fDsZ4n1MgpYgIHfNXlnfklvJovmsLfdVlObOYqCRSKVVu2PcRMQsQQRz4VNRM/9V
8H15TTXtwltwimbdIAnwD3w1E/kNWce/dF3Miuh6g4OC31pbZ2nzZMa7RE8OncJE
g0dlIdb+BxN7vEbWSBc0X50rVarHajZsaWqb8L9rQXTF0JhZZdCcIBzjdXpLx9e8
PF1X9RvazO1IyA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:28:57 2026 by rpki-client