Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: 8J3vfAMLlaWhTXEezrxIuQQ4qfGFcfrpHMKZJtdQcas=
Subject key identifier: B0:45:9A:86:D4:97:8E:A6:34:2A:1B:B6:D3:60:84:17:39:35:AB:DF
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 019D371B4E25058CFED9C66B3ABBAD1064D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=)
2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=)
3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: OgytmmHYG5iKpaEAH1olT0LcTResw/vZi9wSU2/zrbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4e:25:05:8c:fe:d9:c6:6b:3a:bb:ad:10:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=b0459a86d4978ea6342a1bb6d36084173935abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:c7:62:e6:10:de:44:95:5c:bf:20:73:d3:
48:fa:5f:b8:61:98:d3:dd:5b:8e:96:bc:76:cb:17:
0b:30:d3:55:a4:ec:7d:b3:b5:88:fb:9e:fa:20:03:
8e:5a:40:28:52:7f:57:6b:6f:31:3c:04:59:74:4a:
86:df:86:32:e1:c1:7d:19:3a:7b:e7:8d:36:be:2d:
ea:be:1e:0f:75:24:c2:c5:66:a8:ae:66:9b:fe:f2:
25:86:14:b5:3d:78:35:04:b5:7d:db:8d:4f:da:4f:
5e:ca:b1:7a:b7:29:ac:e9:ef:9f:c3:47:c5:44:5f:
3c:ce:2b:7f:9b:a3:10:35:4f:25:ad:09:5f:68:61:
02:54:ad:75:d3:ae:78:da:8c:1b:5d:b7:9c:c1:35:
1b:54:c2:76:1c:62:0d:cd:32:2f:39:ef:00:2a:ce:
fc:7f:89:b5:ef:e7:44:91:a3:04:4b:c7:34:29:68:
3b:3c:00:be:b5:5e:78:db:f1:15:91:7e:73:50:d6:
9b:ea:07:d2:fd:56:49:ee:2f:c1:c2:65:e9:80:17:
ba:1c:55:b6:00:34:60:19:d0:ae:71:50:27:a4:d9:
71:38:d7:8a:95:56:35:fd:68:f6:31:5e:f9:b4:f8:
05:16:62:31:44:b7:18:4c:50:f0:a7:a0:2f:22:26:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:9A:86:D4:97:8E:A6:34:2A:1B:B6:D3:60:84:17:39:35:AB:DF
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:97:4c:b7:58:ec:74:b4:ac:23:68:62:32:5c:2c:63:34:50:
73:21:d3:71:fe:b2:dc:1a:00:d2:31:b6:ff:71:7a:c0:b6:78:
65:8b:cb:a4:3f:da:98:d2:50:ef:a8:18:51:77:8c:bb:d6:3c:
84:a3:4e:61:8c:4d:3a:2d:16:15:e4:43:38:88:12:7f:33:c7:
1f:7c:01:d0:f6:9e:bd:d0:12:03:bd:10:37:69:f5:16:94:ff:
4c:b1:4f:08:d7:b8:86:a2:17:1f:4f:a0:e5:76:c0:1c:88:6c:
00:17:d4:94:15:99:a2:74:bd:c7:5c:d1:67:9c:bc:5b:fc:66:
e7:ed:fc:2d:8e:b8:7a:8b:17:59:9e:42:a1:e4:13:10:9f:b7:
00:7e:84:f1:67:f0:3e:5e:1e:fa:22:f2:3f:81:bf:b0:66:49:
ae:58:f5:eb:fd:3e:19:5e:16:c8:1c:82:b4:a8:0c:5a:31:82:
94:2f:8d:7a:4a:b0:8b:6d:51:ea:87:58:a5:0b:d3:0c:2a:b2:
a3:5a:ba:ab:9e:2d:ab:dc:97:ac:bc:89:54:7e:bc:c0:5e:da:
7a:56:6d:32:bd:96:25:b0:03:2a:b5:65:ef:0c:68:c1:e0:93:
da:fd:b9:c5:82:d7:e1:e0:b5:f2:cf:de:d8:9e:68:1b:f0:b9:
5b:d1:26:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G04lBYz+2cZrOrutEGTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0
MjIwZjMwHhcNMjYwMzI5MDEwMDI5WhcNMjYwMzMwMDEwMDI5WjAzMTEwLwYDVQQD
EyhiMDQ1OWE4NmQ0OTc4ZWE2MzQyYTFiYjZkMzYwODQxNzM5MzVhYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y3HYuYQ3kSVXL8gc9NI+l+4YZjT
3VuOlrx2yxcLMNNVpOx9s7WI+576IAOOWkAoUn9Xa28xPARZdEqG34Yy4cF9GTp7
5402vi3qvh4PdSTCxWaormab/vIlhhS1PXg1BLV9241P2k9eyrF6tyms6e+fw0fF
RF88zit/m6MQNU8lrQlfaGECVK1106542owbXbecwTUbVMJ2HGINzTIvOe8AKs78
f4m17+dEkaMES8c0KWg7PAC+tV542/EVkX5zUNab6gfS/VZJ7i/BwmXpgBe6HFW2
ADRgGdCucVAnpNlxONeKlVY1/Wj2MV75tPgFFmIxRLcYTFDwp6AvIiY8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBFmobUl46mNCobttNghBc5NavfMB8GA1UdIwQY
MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et
MDUxODg2ZDBlZDRlLzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl
LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpdMt1js
dLSsI2hiMlwsYzRQcyHTcf6y3BoA0jG2/3F6wLZ4ZYvLpD/amNJQ76gYUXeMu9Y8
hKNOYYxNOi0WFeRDOIgSfzPHH3wB0PaevdASA70QN2n1FpT/TLFPCNe4hqIXH0+g
5XbAHIhsABfUlBWZonS9x1zRZ5y8W/xm5+38LY64eosXWZ5CoeQTEJ+3AH6E8Wfw
Pl4e+iLyP4G/sGZJrlj16/0+GV4WyByCtKgMWjGClC+Nekqwi21R6odYpQvTDCqy
o1q6q54tq9yXrLyJVH68wF7aelZtMr2WJbADKrVl7wxoweCT2v25xYLX4eC18s/e
2J5oG/C5W9EmYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client