Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: ad6MHYDcOiDISgIQN3IMs0UuHtwxl12HL7V/NoReZT8=
Subject key identifier: 52:74:95:96:CE:F4:78:EC:4E:36:C8:52:4C:18:B6:4D:79:F2:D5:AB
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 01A08A8C47148A9E9BCCF0AD51636E71EE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 12B8
Signing time: Thu 10 Sep 2026 09:00:44 +0000
Manifest this update: Thu 10 Sep 2026 09:00:44 +0000
Manifest next update: Fri 11 Sep 2026 09:00:44 +0000
Files and hashes: 1: XZmCghwXS5uO6-nI0o-431gsq24.roa (hash: GdgInPSubyNcuUo9FhLcvzIGt3WuqRSexXnkp42MAmI=)
2: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: 9Ab65/hdHB4RGylg1dTS+DJGCO4FCDfiVFWsz2/jz18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:47:14:8a:9e:9b:cc:f0:ad:51:63:6e:71:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Sep 10 09:00:44 2026 GMT
Not After : Sep 11 09:00:44 2026 GMT
Subject: CN=52749596cef478ec4e36c8524c18b64d79f2d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:30:43:b4:47:b1:b9:56:fe:39:6b:56:54:
a0:78:bf:d3:54:0d:f9:dc:44:99:94:c8:67:92:f6:
66:f2:c3:2d:38:7d:8d:72:be:fa:37:ac:72:da:30:
24:08:cf:3b:2e:e0:16:45:ff:d3:46:f7:2e:0d:24:
47:93:d9:95:e5:d5:bf:38:e9:7e:f0:d3:63:7f:b8:
bf:77:6f:9e:81:73:62:87:56:cc:5c:7b:fb:74:c8:
f9:1c:52:89:0a:00:77:bc:c8:b8:a3:fe:5b:47:d4:
88:b4:d2:4a:0c:39:bb:08:75:d3:99:7e:d3:59:a2:
04:36:be:1d:88:b2:fc:e8:17:b7:47:da:1b:0a:e3:
e3:f0:32:4f:4c:15:e9:36:f1:dc:23:11:ac:96:99:
ca:4c:e8:1c:ef:cb:c8:0d:96:e8:9d:2c:fb:c4:39:
7d:5e:a8:90:67:60:78:5e:55:23:2b:98:2d:9d:b2:
5c:c1:e3:9b:cd:f0:e3:f1:7c:77:fa:ca:7a:47:ec:
74:15:ea:6b:a4:3a:8c:4f:5c:51:d6:20:61:9e:c0:
13:f2:f0:45:35:59:09:e7:e5:dd:7b:48:2c:08:2f:
cf:82:5c:1b:64:ec:12:c2:aa:0e:e4:84:01:80:ff:
95:0e:27:9c:4f:26:bb:27:2e:fa:b9:9b:40:cd:4a:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:95:96:CE:F4:78:EC:4E:36:C8:52:4C:18:B6:4D:79:F2:D5:AB
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b2:ed:67:b6:2c:22:da:09:60:f9:3c:63:ab:46:29:7f:9c:
78:b2:6e:6b:46:df:d2:86:1e:31:85:16:fd:64:a2:ed:16:32:
a3:a6:c0:4f:ca:24:8f:1b:2f:01:2f:08:c1:f1:f5:9e:a1:ad:
c4:8d:04:19:a0:d5:aa:8e:2c:13:50:33:fb:1e:c9:a3:12:a1:
aa:bf:0d:bf:8f:2f:19:6a:e7:a1:69:bb:b5:e5:04:70:b4:48:
cf:e8:42:56:47:fc:1d:51:62:93:05:41:95:0a:31:7c:90:3d:
45:b2:97:62:12:c8:96:3a:16:dd:0f:5d:58:01:79:3c:c7:0b:
68:73:31:f3:87:c0:a6:ea:a1:fe:06:8d:2a:20:08:5e:35:e1:
e0:ba:32:45:b0:ab:64:18:bd:9d:76:10:64:12:d3:97:03:b5:
c3:58:48:cc:e0:d4:43:56:8c:30:53:2d:22:34:ea:88:6a:6f:
a4:20:52:b6:f7:86:de:34:a6:bf:d2:d5:c4:c4:47:83:1b:0d:
ab:60:19:4e:f5:39:12:34:26:89:8b:92:f9:26:b9:1b:d1:db:
ce:3e:c9:9d:d6:76:f8:38:6d:32:1f:cb:49:36:40:36:a4:76:
59:d4:67:d4:6c:e1:18:fd:c9:60:72:be:fb:47:1b:81:ed:84:
dd:c4:3c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjEcUip6bzPCtUWNuce4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ4MTYyODkyODMxYWRkNWEwN2Q0MzAyZTdmY2ZmZjUy
ZjAyZmQwHhcNMjYwOTEwMDkwMDQ0WhcNMjYwOTExMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg1Mjc0OTU5NmNlZjQ3OGVjNGUzNmM4NTI0YzE4YjY0ZDc5ZjJkNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiUwQ7RHsblW/jlrVlSgeL/TVA35
3ESZlMhnkvZm8sMtOH2Ncr76N6xy2jAkCM87LuAWRf/TRvcuDSRHk9mV5dW/OOl+
8NNjf7i/d2+egXNih1bMXHv7dMj5HFKJCgB3vMi4o/5bR9SItNJKDDm7CHXTmX7T
WaIENr4diLL86Be3R9obCuPj8DJPTBXpNvHcIxGslpnKTOgc78vIDZbonSz7xDl9
XqiQZ2B4XlUjK5gtnbJcweObzfDj8Xx3+sp6R+x0FeprpDqMT1xR1iBhnsAT8vBF
NVkJ5+Xde0gsCC/PglwbZOwSwqoO5IQBgP+VDiecTya7Jy76uZtAzUoqSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ0lZbO9HjsTjbIUkwYtk158tWrMB8GA1UdIwQY
MBaAFJSEgWKJKDGt1aB9QwLn/P/1LwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYt
MTE5YzNlNzQ3OWQ5LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5
LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILLtZ7Ys
ItoJYPk8Y6tGKX+ceLJua0bf0oYeMYUW/WSi7RYyo6bAT8okjxsvAS8IwfH1nqGt
xI0EGaDVqo4sE1Az+x7JoxKhqr8Nv48vGWrnoWm7teUEcLRIz+hCVkf8HVFikwVB
lQoxfJA9RbKXYhLIljoW3Q9dWAF5PMcLaHMx84fApuqh/gaNKiAIXjXh4LoyRbCr
ZBi9nXYQZBLTlwO1w1hIzODUQ1aMMFMtIjTqiGpvpCBStveG3jSmv9LVxMRHgxsN
q2AZTvU5EjQmiYuS+Sa5G9Hbzj7JndZ2+DhtMh/LSTZANqR2WdRn1GzhGP3JYHK+
+0cbge2E3cQ8og==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:40 2026 by rpki-client