Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: V+XCWb6dhr50JBEoR3SmoY7EY4k9mDuv0sqZUlBYhbw=
Subject key identifier: 3A:47:8E:02:14:75:C3:84:47:13:37:37:F5:24:DA:B3:56:77:2D:C3
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019DDD3135C1F2B7BEB17A220D83C5D1569D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 0402
Signing time: Thu 30 Apr 2026 07:01:22 +0000
Manifest this update: Thu 30 Apr 2026 07:01:22 +0000
Manifest next update: Fri 01 May 2026 07:01:22 +0000
Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: sKY4hDC4767QrF4yzAaI/h7FkZBLoGsU/5xBzlv20Co=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:35:c1:f2:b7:be:b1:7a:22:0d:83:c5:d1:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Apr 30 07:01:22 2026 GMT
Not After : May 1 07:01:22 2026 GMT
Subject: CN=3a478e021475c38447133737f524dab356772dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:5c:7f:a1:e2:ea:d2:e9:cb:5a:ca:1b:48:
01:93:d4:4b:c7:e1:5f:12:b0:10:1e:31:59:ac:16:
3a:a8:27:81:69:d9:87:d0:af:66:64:c8:a8:3e:dc:
68:19:e7:6e:2a:a6:f2:7f:23:44:97:51:ea:e9:74:
c3:f9:01:0f:14:71:41:16:3d:19:05:c5:17:31:21:
15:40:1c:4f:d5:1c:24:20:f0:e8:bc:21:22:8a:86:
7f:eb:06:84:63:6e:2c:51:dd:e4:b2:26:3d:cb:e1:
f2:07:22:b6:fa:39:00:9b:c6:d4:aa:d3:7e:66:8b:
07:e0:49:59:6e:95:76:b2:6e:9f:bc:dc:5a:d7:20:
46:df:aa:c6:db:c9:82:41:bf:6d:eb:66:df:7a:72:
d4:b6:95:80:f3:ff:1b:a3:6d:43:d1:a9:33:50:8b:
0a:56:42:1f:81:06:37:f9:ec:bd:c5:00:1d:3d:cf:
8f:82:c7:92:af:4e:12:78:62:c3:3a:57:9b:69:80:
b3:c6:a8:f7:db:05:f5:2a:50:6f:9e:a5:84:db:7e:
04:38:36:fc:c1:ac:95:65:12:c3:95:6f:55:65:fd:
a2:d9:b7:a4:b9:c3:cb:76:d2:fa:0c:1e:7a:f5:23:
51:32:18:78:ac:37:7b:3e:59:6b:20:4f:43:06:58:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:8E:02:14:75:C3:84:47:13:37:37:F5:24:DA:B3:56:77:2D:C3
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e9:b5:1e:d7:56:94:a8:36:27:79:e0:1b:13:23:e8:1f:18:
99:38:ff:56:79:9e:f7:62:71:65:de:52:d5:8e:ea:02:16:2f:
18:a4:47:ab:83:9e:2a:da:a4:17:86:8b:93:2f:99:75:ae:6f:
29:36:a4:70:49:e9:55:dd:7d:e8:d4:b4:5c:a8:08:93:ab:04:
da:5b:30:ba:ab:5f:05:31:4f:22:20:c9:bb:10:37:d2:2e:50:
2a:2b:c7:df:a8:6c:83:01:6c:ce:9b:18:24:78:4f:8c:1d:4a:
f4:51:fa:ea:7f:50:f7:5c:fc:ac:0c:9b:4f:95:24:7c:e4:4d:
bf:f5:9d:c4:ac:d6:f6:82:9f:38:01:bd:64:41:7d:6e:24:91:
ab:fa:a9:32:20:3f:eb:9f:23:a0:b8:3e:e2:10:c2:14:4a:58:
39:59:1c:cf:bb:b2:8a:f4:a7:62:bd:35:bd:88:65:e0:81:b7:
5b:c2:03:fa:1e:5e:b5:67:3c:bf:ab:2e:df:46:25:f4:ff:c6:
38:01:cd:2c:fa:bd:a3:da:d1:1f:b0:f2:96:5f:2d:d5:68:6a:
42:61:5b:de:d6:e6:ec:5e:90:c8:95:91:74:b5:bf:05:0b:34:
91:48:e0:f9:27:d6:9b:ad:36:91:2c:aa:c4:95:5e:57:d4:5f:
1f:1d:93:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dMTXB8re+sXoiDYPF0VadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjYwNDMwMDcwMTIyWhcNMjYwNTAxMDcwMTIyWjAzMTEwLwYDVQQD
EygzYTQ3OGUwMjE0NzVjMzg0NDcxMzM3MzdmNTI0ZGFiMzU2NzcyZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPlcf6Hi6tLpy1rKG0gBk9RLx+Ff
ErAQHjFZrBY6qCeBadmH0K9mZMioPtxoGeduKqbyfyNEl1Hq6XTD+QEPFHFBFj0Z
BcUXMSEVQBxP1RwkIPDovCEiioZ/6waEY24sUd3ksiY9y+HyByK2+jkAm8bUqtN+
ZosH4ElZbpV2sm6fvNxa1yBG36rG28mCQb9t62bfenLUtpWA8/8bo21D0akzUIsK
VkIfgQY3+ey9xQAdPc+PgseSr04SeGLDOlebaYCzxqj32wX1KlBvnqWE234EODb8
wayVZRLDlW9VZf2i2bekucPLdtL6DB569SNRMhh4rDd7PllrIE9DBlioZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpHjgIUdcOERxM3N/Uk2rNWdy3DMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+m1HtdW
lKg2J3ngGxMj6B8YmTj/Vnme92JxZd5S1Y7qAhYvGKRHq4OeKtqkF4aLky+Zda5v
KTakcEnpVd196NS0XKgIk6sE2lswuqtfBTFPIiDJuxA30i5QKivH36hsgwFszpsY
JHhPjB1K9FH66n9Q91z8rAybT5UkfORNv/WdxKzW9oKfOAG9ZEF9biSRq/qpMiA/
658joLg+4hDCFEpYOVkcz7uyivSnYr01vYhl4IG3W8ID+h5etWc8v6su30Yl9P/G
OAHNLPq9o9rRH7Dyll8t1WhqQmFb3tbm7F6QyJWRdLW/BQs0kUjg+SfWm602kSyq
xJVeV9RfHx2T8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:30 2026 by rpki-client