Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: qAfji55JPE9e4DQpvvgf85odJ9+UNPSCuNcrA1caSFU=
Subject key identifier: 58:72:76:21:2B:33:F9:C7:4A:AE:E5:4C:F6:DD:8D:32:03:2A:1C:96
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019CED4B00DECC1DD65223EC1447728382F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 16B0
Signing time: Sat 14 Mar 2026 17:00:41 +0000
Manifest this update: Sat 14 Mar 2026 17:00:41 +0000
Manifest next update: Sun 15 Mar 2026 17:00:41 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: DsF/k4b/BVRAfw5ReACT9mKFFkQipb2vgmn5FNdeFpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:4b:00:de:cc:1d:d6:52:23:ec:14:47:72:83:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Mar 14 17:00:41 2026 GMT
Not After : Mar 15 17:00:41 2026 GMT
Subject: CN=587276212b33f9c74aaee54cf6dd8d32032a1c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:51:8e:d3:58:1a:91:9b:10:8d:f0:12:31:
db:82:95:30:bb:61:5d:c3:d9:d3:23:a6:a0:18:ef:
90:23:98:09:8e:26:15:6a:72:f6:49:43:32:6d:55:
70:77:85:15:29:3c:d5:87:2f:27:fa:f2:00:ce:9f:
39:4b:ab:3b:57:95:61:28:8f:bb:b5:c1:46:e6:eb:
58:cd:e4:90:54:5d:29:74:44:11:1d:34:65:98:37:
f0:6d:6a:28:79:2d:1a:1d:87:9a:7a:55:06:24:9a:
e6:f4:97:af:9c:9d:99:56:ef:61:aa:cd:69:26:7a:
b5:df:d2:77:cd:25:3a:fb:ea:17:a9:7c:1b:cc:79:
85:ae:74:ab:ef:d8:2a:f8:72:b7:a7:ff:d7:b2:ae:
96:bb:43:17:80:16:ea:9d:87:07:5f:24:38:e3:82:
11:2b:6c:24:39:42:73:bd:09:cd:c8:9e:86:5b:4c:
94:db:cf:17:14:d3:a1:a6:66:a3:e4:26:a3:54:84:
ae:47:64:46:92:22:c4:95:62:0b:96:26:0f:67:e8:
cb:d5:4d:62:25:d6:c6:26:46:3b:04:5c:23:f5:c1:
e9:a0:8b:52:64:8b:11:12:65:ba:09:21:c8:ac:f3:
3a:2c:1b:dc:dc:c7:32:49:a7:8f:3a:f4:84:6b:1d:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:76:21:2B:33:F9:C7:4A:AE:E5:4C:F6:DD:8D:32:03:2A:1C:96
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:67:05:37:c2:0f:35:4c:2c:2a:4f:b2:3d:e3:89:16:c0:
53:2c:01:ad:6e:37:31:51:a0:e3:6d:f2:71:7c:5b:73:1b:96:
53:ab:f5:7f:cd:cd:39:d5:e5:25:04:87:a7:7c:b6:af:35:f6:
fc:9c:37:fa:f9:c0:4b:ec:c7:57:4e:da:bb:ad:2e:9b:3b:07:
36:c7:ca:f5:31:1a:7a:08:fe:ac:a0:df:a5:ad:3e:59:4e:a7:
e3:bb:d7:1b:2d:f4:3c:0d:66:73:5f:a4:69:c1:95:2b:e5:ff:
57:d4:ee:5b:ff:c5:38:ac:e9:ff:a2:17:5b:6d:20:e5:dd:33:
dc:4b:34:b7:55:e5:29:c5:7c:cd:9a:13:a0:60:2c:3e:d1:6d:
75:09:7a:0b:ed:6a:25:81:b9:02:63:9e:61:31:1d:13:4f:43:
a2:1c:05:36:49:1b:54:e7:e7:a8:ab:7a:60:f5:10:b4:06:c1:
85:77:54:7a:a3:6c:9a:b2:07:2c:f4:7f:15:35:29:84:96:c8:
00:bb:da:e1:89:2f:62:87:2f:8b:26:0b:b3:e3:44:6c:12:fe:
80:da:30:56:e3:e2:fd:01:e0:27:c4:f2:d7:00:af:7e:93:95:
35:d4:f3:0f:42:7b:e9:ca:dd:c7:8d:b2:8e:e2:77:50:95:be:
6a:42:03:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZztSwDezB3WUiPsFEdyg4LzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjYwMzE0MTcwMDQxWhcNMjYwMzE1MTcwMDQxWjAzMTEwLwYDVQQD
Eyg1ODcyNzYyMTJiMzNmOWM3NGFhZWU1NGNmNmRkOGQzMjAzMmExYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10JRjtNYGpGbEI3wEjHbgpUwu2Fd
w9nTI6agGO+QI5gJjiYVanL2SUMybVVwd4UVKTzVhy8n+vIAzp85S6s7V5VhKI+7
tcFG5utYzeSQVF0pdEQRHTRlmDfwbWooeS0aHYeaelUGJJrm9JevnJ2ZVu9hqs1p
Jnq139J3zSU6++oXqXwbzHmFrnSr79gq+HK3p//Xsq6Wu0MXgBbqnYcHXyQ444IR
K2wkOUJzvQnNyJ6GW0yU288XFNOhpmaj5CajVISuR2RGkiLElWILliYPZ+jL1U1i
JdbGJkY7BFwj9cHpoItSZIsREmW6CSHIrPM6LBvc3McySaePOvSEax2aRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhydiErM/nHSq7lTPbdjTIDKhyWMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1tnBTfC
DzVMLCpPsj3jiRbAUywBrW43MVGg423ycXxbcxuWU6v1f83NOdXlJQSHp3y2rzX2
/Jw3+vnAS+zHV07au60umzsHNsfK9TEaegj+rKDfpa0+WU6n47vXGy30PA1mc1+k
acGVK+X/V9TuW//FOKzp/6IXW20g5d0z3Es0t1XlKcV8zZoToGAsPtFtdQl6C+1q
JYG5AmOeYTEdE09DohwFNkkbVOfnqKt6YPUQtAbBhXdUeqNsmrIHLPR/FTUphJbI
ALva4YkvYocviyYLs+NEbBL+gNowVuPi/QHgJ8Ty1wCvfpOVNdTzD0J76crdx42y
juJ3UJW+akIDog==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:23:31 2026 by rpki-client