Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: 7lx3MvtQJMNNpt3kIOX7nlyfry/ycxN9nlQG963ENoY=
Subject key identifier: BF:02:5D:41:E9:43:0D:64:4D:C4:B3:FB:6E:55:B1:F6:E6:59:E2:7E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A119068E14A77E5F8FA69D289D8910C48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 1B67
Signing time: Thu 08 Oct 2026 01:00:22 +0000
Manifest this update: Thu 08 Oct 2026 01:00:22 +0000
Manifest next update: Fri 09 Oct 2026 01:00:22 +0000
Files and hashes: 1: MZ-3-aIqvRV6T5DtJ5MLO-rLQb0.roa (hash: zkaLItcccqZtnfIrIvayqdwe8ah+gP2H4rdRMeXdUgQ=)
2: Oo01x8pERgWGLUwO9m5xfExXg9g.roa (hash: iSqQFbuWHpKMVbwARx0x5sxvGhMHq7DllvKbl8K+zMo=)
3: W65vFxXKbxmq7dK_TAJxVeUdWHA.roa (hash: yqxtHV/CslpZBPyeOdQKLmW4Iyq5xnMKwuGrDGPLQyQ=)
4: bgVdDIP4FIow1zAwSao7be6KrC8.roa (hash: 8F5clBuL/Te3i0D4X6PaEO16p9rv+ETHYqT2HNqrKbQ=)
5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: g7xMXlh3T7tmqBjWSaV0rGX3uT371rstGPP9xM2ydF8=)
6: q2983OPzklakgSCjeiVFDoK69Xs.roa (hash: sQVFXTJ4NvpmpUw5zr/gtuq6d3FLh30FaP1gqDZKaWI=)
7: r0mR3JdsSHjQijRrm4Pcq7lgM58.roa (hash: s1x3KCynDraX05aiffgCwXTC5LKE3qCWa29JhXg/r4M=)
8: xkh-HA8JIqHvPIH5H2s9TrhN9FM.roa (hash: yD4AUqZznGBBTnerrmGNIhz4MlxBSwQeUlD2elXSFEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:06:8e:14:a7:7e:5f:8f:a6:9d:28:9d:89:10:c4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 8 01:00:22 2026 GMT
Not After : Oct 9 01:00:22 2026 GMT
Subject: CN=bf025d41e9430d644dc4b3fb6e55b1f6e659e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:ad:3a:1e:12:f2:47:75:51:d7:8e:c2:97:
f6:36:e5:94:d2:84:bc:be:e1:f8:2d:27:b1:91:76:
48:a2:78:8f:4f:8f:11:d9:b3:34:86:06:cf:b8:fc:
42:37:89:38:30:c7:42:86:d6:66:31:a0:bd:6b:aa:
6e:05:3a:5d:c1:f8:46:be:8c:f2:de:95:a6:8c:0e:
2f:60:be:96:c3:06:0c:2e:a8:e8:f0:71:81:02:a7:
fd:98:fb:82:72:92:6f:e7:d7:dc:6d:78:01:b9:15:
14:0d:ca:0f:74:45:e6:2b:da:ad:ec:6f:98:e6:b9:
b1:65:9a:75:ca:ba:60:5a:36:d2:9f:fe:a3:c3:12:
ca:41:26:2e:09:f3:ce:4c:95:82:0b:87:eb:f5:76:
6d:79:f3:b2:20:a2:58:20:56:11:a1:34:53:42:67:
b7:b8:de:48:36:50:12:1d:17:2b:88:ba:9c:a6:4f:
73:62:ec:4e:fd:f2:a9:cf:9c:e8:db:62:97:e5:d9:
b7:43:03:dd:3e:54:5a:e8:d2:3b:56:dd:75:f1:43:
ca:ec:61:4c:c1:a0:0b:76:d0:2f:28:26:73:3e:fe:
73:42:39:9d:f7:08:f8:78:49:55:7c:c1:3e:a7:78:
98:98:a7:1b:ec:9a:c1:49:83:e7:ab:b6:39:a1:9d:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:5D:41:E9:43:0D:64:4D:C4:B3:FB:6E:55:B1:F6:E6:59:E2:7E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:20:77:3c:32:fb:2f:b1:d0:06:2d:39:94:4c:b4:34:00:
1f:2c:9f:dd:43:e2:06:25:f4:13:04:57:af:67:ca:15:a6:fe:
b8:75:17:49:4c:55:42:cd:e7:8f:e7:6b:87:4d:a8:86:39:a9:
48:9d:a2:f6:cf:59:3f:be:72:2c:dc:e9:5a:49:88:77:0f:77:
4a:ef:23:3d:0f:3e:b5:f7:86:0a:45:15:7e:3f:ff:be:4e:34:
6d:db:31:99:10:65:3c:64:cd:78:18:d4:cc:54:ba:31:a7:2b:
da:88:cc:85:af:07:4e:c7:32:a4:ed:24:17:3c:c9:d7:17:6e:
05:77:c0:0f:9c:a0:95:bf:bc:50:de:65:08:cb:7d:b2:6f:09:
39:33:0b:f3:72:7b:14:0b:0b:83:be:fe:51:6d:ca:16:f8:84:
09:a9:07:95:a3:09:2b:d5:85:a7:92:95:5d:fe:4a:09:d5:73:
d2:8c:58:dd:40:df:33:4f:61:63:43:3a:bd:bb:07:8b:29:10:
f3:a6:32:4c:a8:fb:a3:6e:b7:f5:d3:44:b6:ed:f6:a6:11:8b:
a9:95:84:b4:6e:88:21:cf:77:0f:b8:01:d9:fe:b4:e9:8d:e2:
0d:51:26:4b:00:bb:2a:f4:65:e5:ea:d3:30:46:b0:6b:bb:4f:
15:cf:50:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZBo4Up35fj6adKJ2JEMSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYxMDA4MDEwMDIyWhcNMjYxMDA5MDEwMDIyWjAzMTEwLwYDVQQD
EyhiZjAyNWQ0MWU5NDMwZDY0NGRjNGIzZmI2ZTU1YjFmNmU2NTllMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+B+tOh4S8kd1UdeOwpf2NuWU0oS8
vuH4LSexkXZIoniPT48R2bM0hgbPuPxCN4k4MMdChtZmMaC9a6puBTpdwfhGvozy
3pWmjA4vYL6WwwYMLqjo8HGBAqf9mPuCcpJv59fcbXgBuRUUDcoPdEXmK9qt7G+Y
5rmxZZp1yrpgWjbSn/6jwxLKQSYuCfPOTJWCC4fr9XZtefOyIKJYIFYRoTRTQme3
uN5INlASHRcriLqcpk9zYuxO/fKpz5zo22KX5dm3QwPdPlRa6NI7Vt118UPK7GFM
waALdtAvKCZzPv5zQjmd9wj4eElVfME+p3iYmKcb7JrBSYPnq7Y5oZ053wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8CXUHpQw1kTcSz+25VsfbmWeJ+MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/Egdzwy
+y+x0AYtOZRMtDQAHyyf3UPiBiX0EwRXr2fKFab+uHUXSUxVQs3nj+drh02ohjmp
SJ2i9s9ZP75yLNzpWkmIdw93Su8jPQ8+tfeGCkUVfj//vk40bdsxmRBlPGTNeBjU
zFS6Macr2ojMha8HTscypO0kFzzJ1xduBXfAD5yglb+8UN5lCMt9sm8JOTML83J7
FAsLg77+UW3KFviECakHlaMJK9WFp5KVXf5KCdVz0oxY3UDfM09hY0M6vbsHiykQ
86YyTKj7o2639dNEtu32phGLqZWEtG6IIc93D7gB2f606Y3iDVEmSwC7KvRl5erT
MEawa7tPFc9Qbw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:55:20 2026 by rpki-client