Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: 6QBOl80OdyuCRLuWjz8069zm5I9s9ufMwNwaXUnEj68=
Subject key identifier: BE:20:B7:77:4F:1E:1B:61:68:07:5A:12:F1:8C:BA:6B:EF:74:C5:C9
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019D37C0BC88279374920BCC46D96B858532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0FD4
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: jy+FF7tREZqdBjbWCBDe5o9pWFJhIsW9s/hDr1fDKfU=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bc:88:27:93:74:92:0b:cc:46:d9:6b:85:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=be20b7774f1e1b6168075a12f18cba6bef74c5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:b6:a0:45:0d:82:5c:fb:a8:0b:0a:6b:99:
00:02:b5:5a:a1:7f:18:88:7a:fc:72:1f:7b:29:33:
44:9d:40:c8:32:14:2b:6c:68:4d:97:87:4d:92:cf:
47:cd:16:38:f9:bf:b8:54:97:2e:4c:d7:c8:3d:5e:
3c:63:9d:7d:c8:ca:52:9c:29:ed:ff:dc:83:4c:69:
c8:a9:a1:1f:0a:ad:fe:41:81:01:c9:a8:65:1b:46:
1a:9f:2c:3b:8b:3a:0f:e3:f7:4c:a2:84:fb:ee:87:
47:a4:9c:cc:3d:9c:d7:de:52:9f:33:19:b0:75:18:
2b:23:c0:4a:d9:77:81:1e:64:0b:61:09:65:f2:c4:
1c:c7:e0:94:23:b4:de:27:d8:8d:d7:a0:b8:e9:dc:
30:49:3f:c6:bc:35:53:d1:c3:a0:ea:b5:5c:a6:b6:
6b:24:42:6a:d3:a8:e2:37:b9:f2:c8:54:ff:98:86:
85:bc:43:8d:be:90:c2:27:b1:c2:ce:2a:2a:d2:f7:
5e:7f:01:53:ea:65:d9:db:b1:fc:55:04:59:9a:81:
d9:6a:3b:1c:2a:c9:01:73:dc:9e:50:9b:d5:c0:7b:
83:e9:88:13:cd:98:ed:5f:61:b5:00:97:7a:80:f3:
ac:d9:d8:95:f3:b6:67:ed:71:0b:b9:b5:af:75:56:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:B7:77:4F:1E:1B:61:68:07:5A:12:F1:8C:BA:6B:EF:74:C5:C9
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:14:7b:a3:23:d1:b5:84:78:be:a2:82:a3:75:13:2c:98:e3:
41:23:d4:b5:39:11:98:e6:52:34:15:a8:75:33:40:c8:f5:18:
92:98:0f:88:e0:d5:32:69:d8:e8:70:05:36:4b:56:17:ba:38:
3d:09:dc:1c:bb:81:77:9b:42:a3:55:36:3a:4f:1c:f8:eb:39:
5f:6b:26:5e:51:8c:85:46:27:73:ec:18:2c:f4:e8:c7:7a:40:
a8:39:0f:6c:8a:81:58:31:48:4b:88:06:15:3c:d4:e4:8b:a5:
9f:f5:6f:1d:72:ec:39:c6:19:69:61:76:a2:91:7f:48:9f:69:
ab:34:d9:13:52:87:55:1c:b4:54:d4:b4:f6:fa:a9:d5:c6:04:
b5:74:8d:b4:bf:0c:9a:fb:d1:c8:73:d3:d9:67:1a:c3:be:66:
8d:6c:dc:9b:f7:81:5c:02:7f:b1:d8:f1:0f:38:70:9f:9b:f9:
03:ad:c9:4a:90:14:b3:97:18:83:b5:e2:bf:6d:17:74:24:29:
85:90:07:38:71:46:ca:99:24:e2:12:60:47:d4:33:a1:93:92:
7a:07:c3:a5:39:3d:53:5d:71:49:ad:cc:8d:4d:55:59:67:12:
2e:fb:dd:8c:04:75:26:cf:9a:d9:32:9f:c0:5b:17:be:13:09:
bc:c8:15:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLyIJ5N0kgvMRtlrhYUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjYwMzI5MDQwMTExWhcNMjYwMzMwMDQwMTExWjAzMTEwLwYDVQQD
EyhiZTIwYjc3NzRmMWUxYjYxNjgwNzVhMTJmMThjYmE2YmVmNzRjNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs62oEUNglz7qAsKa5kAArVaoX8Y
iHr8ch97KTNEnUDIMhQrbGhNl4dNks9HzRY4+b+4VJcuTNfIPV48Y519yMpSnCnt
/9yDTGnIqaEfCq3+QYEByahlG0Yanyw7izoP4/dMooT77odHpJzMPZzX3lKfMxmw
dRgrI8BK2XeBHmQLYQll8sQcx+CUI7TeJ9iN16C46dwwST/GvDVT0cOg6rVcprZr
JEJq06jiN7nyyFT/mIaFvEONvpDCJ7HCzioq0vdefwFT6mXZ27H8VQRZmoHZajsc
KskBc9yeUJvVwHuD6YgTzZjtX2G1AJd6gPOs2diV87Zn7XELubWvdVbABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4gt3dPHhthaAdaEvGMumvvdMXJMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBR7oyPR
tYR4vqKCo3UTLJjjQSPUtTkRmOZSNBWodTNAyPUYkpgPiODVMmnY6HAFNktWF7o4
PQncHLuBd5tCo1U2Ok8c+Os5X2smXlGMhUYnc+wYLPTox3pAqDkPbIqBWDFIS4gG
FTzU5Iuln/VvHXLsOcYZaWF2opF/SJ9pqzTZE1KHVRy0VNS09vqp1cYEtXSNtL8M
mvvRyHPT2Wcaw75mjWzcm/eBXAJ/sdjxDzhwn5v5A63JSpAUs5cYg7Xiv20XdCQp
hZAHOHFGypkk4hJgR9QzoZOSegfDpTk9U11xSa3MjU1VWWcSLvvdjAR1Js+a2TKf
wFsXvhMJvMgVIA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:09 2026 by rpki-client