Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: w11ukP3nRps1nWpB14zsoFkeRZEhOSLMkds2WPJkH14=
Subject key identifier: 5E:4C:93:74:88:0F:84:7A:4B:19:71:F1:A4:4A:50:E7:4F:6C:B0:CA
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019D39AEFE7736655FB13CB35B45B0764908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 75
Signing time: Sun 29 Mar 2026 13:01:02 +0000
Manifest this update: Sun 29 Mar 2026 13:01:02 +0000
Manifest next update: Mon 30 Mar 2026 13:01:02 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: igcAO/iTIzCl6Jp/gcvoQB/pd9uopeCyj7SJz+2X7sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fe:77:36:65:5f:b1:3c:b3:5b:45:b0:76:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Mar 29 13:01:02 2026 GMT
Not After : Mar 30 13:01:02 2026 GMT
Subject: CN=5e4c9374880f847a4b1971f1a44a50e74f6cb0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:27:15:4d:68:1b:f9:c0:87:42:4d:fb:98:
81:22:dd:8a:9f:dd:d4:52:8f:ad:3c:5e:d3:3e:af:
ee:cf:99:63:f6:d5:41:80:a1:5a:f1:72:15:a3:1c:
f3:5b:98:99:4b:2c:0c:dc:38:8c:35:dd:6c:d8:c7:
b7:1d:14:d8:bb:80:f1:4f:a8:f2:71:8b:68:a5:39:
7e:bb:bb:d5:7d:af:b0:1f:ba:5f:76:80:34:b8:2d:
b3:08:09:ce:1d:2d:1e:d6:cc:78:eb:7d:fd:46:19:
1c:f7:6d:41:41:cf:84:37:32:79:b4:4f:32:b3:a6:
ba:91:e7:8f:9b:8d:90:83:ed:89:8f:b1:76:ba:3f:
69:dc:82:d2:cb:6d:88:d9:21:91:0f:93:c0:f8:39:
8a:11:3a:84:55:e6:0a:25:af:cf:b0:e7:92:5a:e2:
ca:2a:40:8a:38:56:07:c0:92:af:7e:19:f8:ce:40:
66:fa:23:a3:fa:a2:d7:01:e4:c5:15:c1:bd:cc:b5:
ac:31:f6:29:1c:6d:22:b0:62:3b:d1:bb:14:cd:30:
b5:32:fc:15:1b:d4:32:16:d8:e7:7c:4d:9f:fe:6f:
f5:20:a6:54:34:cb:c7:a0:62:7d:e0:54:d0:41:3f:
70:6f:da:4b:9c:d9:bc:72:b1:c9:d1:bc:9b:02:e1:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:93:74:88:0F:84:7A:4B:19:71:F1:A4:4A:50:E7:4F:6C:B0:CA
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:2f:3b:3f:fd:6a:e0:2c:82:1c:9c:39:7d:8d:c7:47:ce:
07:1e:11:21:f3:27:d5:36:de:74:3b:c1:af:b2:4e:29:00:99:
1e:6b:8b:a0:3d:00:bd:3e:fa:72:fb:eb:ab:fa:99:61:49:ce:
20:4e:8b:f4:4d:25:44:06:2e:bf:dc:b7:31:64:65:51:36:79:
de:a1:73:e6:90:f4:22:ec:d4:6d:16:1c:d1:00:a3:02:c1:fb:
00:4c:da:e3:c4:d6:f4:5f:04:5c:43:44:8a:35:a7:26:92:d3:
6b:4b:71:9e:e1:dd:3a:65:09:bb:98:b4:2b:42:47:ff:c0:d2:
74:73:d8:a9:11:07:ca:9a:2a:6d:c0:9f:8b:22:34:95:0b:ea:
58:55:d5:b0:a9:2d:10:3f:98:7a:9a:5b:d0:64:0d:16:4f:d5:
8c:63:b8:b9:9a:8f:52:23:a8:24:3e:56:5a:dc:2a:7f:2b:41:
82:39:f2:26:6c:12:8c:08:b5:cd:1b:1f:80:86:75:04:13:8e:
bf:aa:2c:f2:5e:dd:91:83:c5:bd:16:46:be:4c:57:72:42:9c:
7c:cb:d7:80:88:1e:f9:07:80:6c:6c:1e:72:03:d7:e6:fe:f7:
17:f7:bf:1a:bd:2e:8e:6d:c7:24:05:0f:35:c9:7e:ad:40:cc:
cf:87:c4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rv53NmVfsTyzW0WwdkkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTM3ZTk5NjZkNGJhZmY3YzM5MjAzOGQ0MzMxN2QyYWY5
MTRiYTcwHhcNMjYwMzI5MTMwMTAyWhcNMjYwMzMwMTMwMTAyWjAzMTEwLwYDVQQD
Eyg1ZTRjOTM3NDg4MGY4NDdhNGIxOTcxZjFhNDRhNTBlNzRmNmNiMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYnFU1oG/nAh0JN+5iBIt2Kn93U
Uo+tPF7TPq/uz5lj9tVBgKFa8XIVoxzzW5iZSywM3DiMNd1s2Me3HRTYu4DxT6jy
cYtopTl+u7vVfa+wH7pfdoA0uC2zCAnOHS0e1sx46339Rhkc921BQc+ENzJ5tE8y
s6a6keePm42Qg+2Jj7F2uj9p3ILSy22I2SGRD5PA+DmKETqEVeYKJa/PsOeSWuLK
KkCKOFYHwJKvfhn4zkBm+iOj+qLXAeTFFcG9zLWsMfYpHG0isGI70bsUzTC1MvwV
G9QyFtjnfE2f/m/1IKZUNMvHoGJ94FTQQT9wb9pLnNm8crHJ0bybAuFPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5Mk3SID4R6Sxlx8aRKUOdPbLDKMB8GA1UdIwQY
MBaAFJUTfplm1Lr/fDkgONQzF9KvkUunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMt
OWM2NjdmMzBmZjhkLzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMtOWM2NjdmMzBmZjhk
LzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7MvOz/9
auAsghycOX2Nx0fOBx4RIfMn1TbedDvBr7JOKQCZHmuLoD0AvT76cvvrq/qZYUnO
IE6L9E0lRAYuv9y3MWRlUTZ53qFz5pD0IuzUbRYc0QCjAsH7AEza48TW9F8EXENE
ijWnJpLTa0txnuHdOmUJu5i0K0JH/8DSdHPYqREHypoqbcCfiyI0lQvqWFXVsKkt
ED+Yeppb0GQNFk/VjGO4uZqPUiOoJD5WWtwqfytBgjnyJmwSjAi1zRsfgIZ1BBOO
v6os8l7dkYPFvRZGvkxXckKcfMvXgIge+QeAbGwecgPX5v73F/e/Gr0ujm3HJAUP
Ncl+rUDMz4fEzQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:45 2026 by rpki-client