Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
File: lYs6eEkk73mV168fvRdniKbCt1Q.mft (raw, json)
Hash identifier: Fr4XKP+re7Ewjqua7ezEPoYFfkCyKlu77UGKenqTZ1E=
Subject key identifier: 03:3B:A3:FB:63:B3:FC:5F:A4:9D:83:34:3E:1E:EE:B5:92:AE:77:AB
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 01A1859B2D57B33042ECED12F2E742958BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
Manifest number: 0143
Signing time: Thu 29 Oct 2026 03:01:41 +0000
Manifest this update: Thu 29 Oct 2026 03:01:41 +0000
Manifest next update: Fri 30 Oct 2026 03:01:41 +0000
Files and hashes: 1: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (hash: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=)
2: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (hash: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=)
3: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (hash: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=)
4: lYs6eEkk73mV168fvRdniKbCt1Q.crl (hash: GeaTETV+iHAAl2/CEFqnYbAvlF0FPCKVyPIx8HLYwdo=)
5: liKRFliJG9HmzqpkhjZr0nxWozg.roa (hash: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=)
6: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (hash: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:2d:57:b3:30:42:ec:ed:12:f2:e7:42:95:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Oct 29 03:01:41 2026 GMT
Not After : Oct 30 03:01:41 2026 GMT
Subject: CN=033ba3fb63b3fc5fa49d83343e1eeeb592ae77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:f1:0f:aa:00:5f:42:38:ed:2c:d3:bf:94:
fc:2e:63:c2:7f:48:2c:40:86:d7:94:ba:46:33:13:
cb:69:49:e8:26:b9:e6:aa:0b:22:42:74:20:16:93:
e0:d6:13:d3:3f:35:36:a3:ae:0b:da:7a:05:03:56:
29:bd:99:6a:45:2f:ea:fd:d7:2d:82:2b:51:c4:b6:
c8:dd:cc:76:b8:25:51:8c:69:83:e8:bd:9f:61:81:
4c:2b:bd:12:ef:16:02:27:4f:da:49:39:56:9d:d1:
4b:c1:57:0e:ce:93:50:9c:67:0b:e1:e4:a2:a1:53:
20:41:52:98:fc:27:71:88:a2:95:1f:b9:1d:69:68:
e6:c7:af:e5:57:58:13:09:eb:ec:1a:c6:f6:a1:70:
b9:ae:b2:e8:ef:32:bd:98:c1:77:83:f6:32:bc:15:
33:b8:1b:d2:3f:10:44:29:44:9f:32:21:0e:24:ff:
06:aa:b8:90:83:1f:c8:d1:8a:b5:58:c0:eb:ae:cb:
31:84:30:9b:c9:e8:f9:6c:0b:7e:f5:c8:a3:d2:d6:
d0:ae:8c:54:e7:4e:9d:b4:7a:56:d5:93:ba:4e:fe:
25:ca:6c:2f:60:4a:c9:63:fd:a7:aa:65:2d:c7:3d:
c0:5b:ae:4d:06:71:08:cc:ec:89:c2:39:58:ee:d8:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:A3:FB:63:B3:FC:5F:A4:9D:83:34:3E:1E:EE:B5:92:AE:77:AB
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:86:1a:1d:9f:67:9a:31:34:39:01:2e:e2:d5:86:e5:47:21:
87:e9:11:ba:d0:0f:ac:8e:c0:bb:06:81:cc:f9:64:29:45:74:
be:21:02:76:c0:c7:e6:bf:02:d1:cd:b1:6a:e0:b5:36:a7:dc:
65:85:d5:8d:45:60:68:60:b1:e3:95:cd:83:eb:f0:c5:1d:ac:
72:50:49:fd:f0:45:26:e1:2f:65:1c:a0:87:91:d4:46:48:fa:
fb:6a:07:18:da:08:bb:bf:e9:33:84:f4:e2:fa:ab:2d:0d:25:
bf:3a:d7:ee:53:14:dd:f3:9b:da:d5:a5:7d:02:d5:7a:d6:5d:
7a:71:3b:51:3e:90:8c:7f:54:9c:ca:22:29:bc:d9:92:3a:9d:
ab:88:0a:90:8a:5e:f5:67:73:15:d7:f7:d6:85:b2:d5:5b:9b:
bf:35:2b:61:f7:14:ea:1a:8f:a4:31:95:d8:7a:16:4a:18:33:
0d:f5:63:1a:28:6d:16:b1:a0:33:f8:92:84:02:0c:6f:c8:6e:
28:d5:90:68:18:ed:fc:db:c3:75:4b:bc:7c:98:ee:33:be:6f:
1c:5f:66:30:ad:dd:76:b8:02:f1:8c:ef:3c:e8:02:c8:ca:55:
bc:2f:ad:7c:25:0b:5a:77:25:0b:cc:86:49:e1:de:68:ba:16:
80:19:23:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFmy1XszBC7O0S8udClYutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OGIzYTc4NDkyNGVmNzk5NWQ3YWYxZmJkMTc2Nzg4YTZj
MmI3NTQwHhcNMjYxMDI5MDMwMTQxWhcNMjYxMDMwMDMwMTQxWjAzMTEwLwYDVQQD
EygwMzNiYTNmYjYzYjNmYzVmYTQ5ZDgzMzQzZTFlZWViNTkyYWU3N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnnxD6oAX0I47SzTv5T8LmPCf0gs
QIbXlLpGMxPLaUnoJrnmqgsiQnQgFpPg1hPTPzU2o64L2noFA1YpvZlqRS/q/dct
gitRxLbI3cx2uCVRjGmD6L2fYYFMK70S7xYCJ0/aSTlWndFLwVcOzpNQnGcL4eSi
oVMgQVKY/CdxiKKVH7kdaWjmx6/lV1gTCevsGsb2oXC5rrLo7zK9mMF3g/YyvBUz
uBvSPxBEKUSfMiEOJP8GqriQgx/I0Yq1WMDrrssxhDCbyej5bAt+9cij0tbQroxU
506dtHpW1ZO6Tv4lymwvYErJY/2nqmUtxz3AW65NBnEIzOyJwjlY7thf4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM7o/tjs/xfpJ2DND4e7rWSrnerMB8GA1UdIwQY
MBaAFJWLOnhJJO95ldevH70XZ4imwrdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlzNmVFa2s3M21WMTY4ZnZSZG5pS2JDdDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt
ODM4NmU3MGJkYzU4LzEvbFlzNmVFa2s3M21WMTY4ZnZSZG5pS2JDdDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4
LzEvbFlzNmVFa2s3M21WMTY4ZnZSZG5pS2JDdDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoYaHZ9n
mjE0OQEu4tWG5Uchh+kRutAPrI7AuwaBzPlkKUV0viECdsDH5r8C0c2xauC1Nqfc
ZYXVjUVgaGCx45XNg+vwxR2sclBJ/fBFJuEvZRygh5HURkj6+2oHGNoIu7/pM4T0
4vqrLQ0lvzrX7lMU3fOb2tWlfQLVetZdenE7UT6QjH9UnMoiKbzZkjqdq4gKkIpe
9WdzFdf31oWy1VubvzUrYfcU6hqPpDGV2HoWShgzDfVjGihtFrGgM/iShAIMb8hu
KNWQaBjt/NvDdUu8fJjuM75vHF9mMK3ddrgC8YzvPOgCyMpVvC+tfCULWnclC8yG
SeHeaLoWgBkjiQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:50:46 2026 by rpki-client