Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: JKp9/a+Y8/fY2tdDMygPp68yyVZrAWYao/Vc68+kkto=
Subject key identifier: B1:66:4C:18:28:C6:25:C1:D9:61:31:6C:43:F9:FB:63:37:14:D1:E5
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 019DA7F9B94C7BA852784590D1AE6FC0ED4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 05E5
Signing time: Sun 19 Apr 2026 23:00:54 +0000
Manifest this update: Sun 19 Apr 2026 23:00:54 +0000
Manifest next update: Mon 20 Apr 2026 23:00:54 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: 5Rufu2my9PYM7xumaxuZUdPd3xAsi6GsgvMgeIQnLzU=)
5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:b9:4c:7b:a8:52:78:45:90:d1:ae:6f:c0:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Apr 19 23:00:54 2026 GMT
Not After : Apr 20 23:00:54 2026 GMT
Subject: CN=b1664c1828c625c1d961316c43f9fb633714d1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:1b:a9:1a:5d:0b:2e:84:d8:77:c3:82:42:
f7:bf:b5:27:99:cf:0a:7b:60:6e:68:e8:55:84:a2:
e4:bc:21:16:fb:de:75:39:2e:50:35:54:18:67:bf:
3f:a3:87:ca:91:8d:4e:89:d6:7a:30:fc:56:00:ee:
bd:08:85:7c:91:08:79:5d:dd:be:8b:d9:0a:21:7a:
a6:46:ea:40:8e:c7:ad:7f:9d:ad:a1:f8:00:0e:30:
46:bf:7f:47:4f:ff:50:d5:ff:75:98:70:b6:74:72:
9f:0d:58:26:44:18:8e:50:95:33:bf:fe:70:4a:5c:
3c:77:e1:ad:e3:33:6d:97:14:8f:75:14:1b:87:6f:
36:f7:e0:a5:07:65:f9:7e:0f:37:c5:88:0b:ac:b4:
14:62:64:f3:32:b6:a6:e5:70:a5:c4:16:77:9f:05:
71:ba:99:94:a4:e3:68:d4:f5:b4:53:34:20:9c:6c:
bc:93:55:24:a5:35:05:c8:f9:8d:25:11:3d:88:43:
23:71:fa:81:94:ee:7f:76:9f:fb:54:86:e0:aa:da:
9d:91:1e:e9:b4:31:e6:4a:ae:f7:7b:b1:26:d2:4b:
4a:c1:b9:4b:19:6d:8c:1a:48:a9:d6:0e:51:a6:dc:
9b:d6:36:35:d2:33:f4:46:30:14:fc:2f:56:c9:d4:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:4C:18:28:C6:25:C1:D9:61:31:6C:43:F9:FB:63:37:14:D1:E5
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:51:09:23:0f:aa:3b:01:db:1b:5c:de:d3:04:34:b4:60:
89:d9:9f:86:07:b2:19:d1:0d:7f:0c:4c:ce:bb:41:f1:dc:e1:
7c:b4:d7:28:64:9c:31:fd:90:c2:a9:cd:41:1a:5c:8b:7e:9f:
5f:e9:d6:a3:8c:cb:e0:12:34:74:f6:c5:db:b9:bf:d2:c1:f7:
b0:e3:ae:9c:58:c8:75:c5:ea:18:f0:a7:35:00:ba:24:3e:11:
8a:b2:6b:04:c3:b7:a7:d8:58:93:4c:c7:ba:61:c1:82:2e:75:
a4:a6:3e:aa:7a:bf:57:fe:be:3f:b1:50:7b:79:e5:d3:4f:f7:
74:45:83:90:62:0d:f0:1c:4b:25:e8:7c:1d:b4:ca:b5:5f:28:
1c:b9:06:6b:c3:38:7a:97:7e:6f:04:7a:f1:3e:a5:c8:62:b0:
45:6e:b2:89:82:20:71:a0:b2:8e:11:54:e2:84:60:23:0f:0c:
1c:e8:ed:bb:33:77:45:ae:ee:2e:3a:4b:2d:99:f1:55:23:1c:
13:a4:ec:4c:64:8b:a2:a2:37:2d:8e:ce:e8:46:46:a8:7d:1b:
e9:c4:37:f4:c7:b0:15:ae:f7:d2:7d:5e:a9:66:00:1a:4f:34:
24:0b:12:c3:d8:a0:93:e2:b9:65:3c:db:de:6e:3c:63:79:83:
b3:f4:e5:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2n+blMe6hSeEWQ0a5vwO1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjYwNDE5MjMwMDU0WhcNMjYwNDIwMjMwMDU0WjAzMTEwLwYDVQQD
EyhiMTY2NGMxODI4YzYyNWMxZDk2MTMxNmM0M2Y5ZmI2MzM3MTRkMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eUbqRpdCy6E2HfDgkL3v7Unmc8K
e2BuaOhVhKLkvCEW+951OS5QNVQYZ78/o4fKkY1OidZ6MPxWAO69CIV8kQh5Xd2+
i9kKIXqmRupAjsetf52tofgADjBGv39HT/9Q1f91mHC2dHKfDVgmRBiOUJUzv/5w
Slw8d+Gt4zNtlxSPdRQbh2829+ClB2X5fg83xYgLrLQUYmTzMram5XClxBZ3nwVx
upmUpONo1PW0UzQgnGy8k1UkpTUFyPmNJRE9iEMjcfqBlO5/dp/7VIbgqtqdkR7p
tDHmSq73e7Em0ktKwblLGW2MGkip1g5Rptyb1jY10jP0RjAU/C9WydQFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFmTBgoxiXB2WExbEP5+2M3FNHlMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmxRCSMP
qjsB2xtc3tMENLRgidmfhgeyGdENfwxMzrtB8dzhfLTXKGScMf2QwqnNQRpci36f
X+nWo4zL4BI0dPbF27m/0sH3sOOunFjIdcXqGPCnNQC6JD4RirJrBMO3p9hYk0zH
umHBgi51pKY+qnq/V/6+P7FQe3nl00/3dEWDkGIN8BxLJeh8HbTKtV8oHLkGa8M4
epd+bwR68T6lyGKwRW6yiYIgcaCyjhFU4oRgIw8MHOjtuzN3Ra7uLjpLLZnxVSMc
E6TsTGSLoqI3LY7O6EZGqH0b6cQ39MewFa730n1eqWYAGk80JAsSw9igk+K5ZTzb
3m48Y3mDs/Tlyg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:41:02 2026 by rpki-client