Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: PVj3hygW9XPJipLSUoi/kt2OjGBp6EgpprZVzlehmRI=
Subject key identifier: CA:E4:60:42:2E:13:F7:37:2F:9B:17:08:95:40:13:EE:87:07:18:6F
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019DED1259DE6A66AB333743AB675C601EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 15E9
Signing time: Sun 03 May 2026 09:01:35 +0000
Manifest this update: Sun 03 May 2026 09:01:35 +0000
Manifest next update: Mon 04 May 2026 09:01:35 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: 6vmzelg8p3NyeAvLj9FFNnXkKvrjVIaXcCMp9lN4pOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:12:59:de:6a:66:ab:33:37:43:ab:67:5c:60:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: May 3 09:01:35 2026 GMT
Not After : May 4 09:01:35 2026 GMT
Subject: CN=cae460422e13f7372f9b1708954013ee8707186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:b9:37:02:99:be:a5:5a:28:7e:9a:49:b5:
9c:a3:e5:12:8d:a9:82:bb:29:ac:99:d3:ec:3e:5a:
b8:03:a2:b1:21:20:18:f2:9b:10:29:4e:3a:e1:d7:
ad:cb:84:ca:e4:d6:97:4a:34:ae:9b:84:06:d5:a9:
c9:e0:c8:78:b0:30:19:4a:28:58:0c:e0:71:22:fb:
41:b0:1a:37:6f:e4:37:e9:62:bc:93:0b:50:08:26:
12:48:e2:88:fe:dc:42:88:ed:d6:df:8b:22:d9:2d:
26:16:65:b1:84:f2:f5:68:8c:c6:f0:16:c6:4d:2a:
ea:39:03:26:4d:77:bd:c3:7e:dd:a5:0c:22:e9:3e:
41:35:8b:82:79:01:9b:a2:3f:48:d6:db:a9:2e:ba:
c6:01:54:17:29:3f:66:bd:3f:ea:16:62:2d:57:7f:
f5:5d:0a:2b:68:88:d1:47:06:86:00:84:88:1f:0f:
3a:49:f8:f7:d7:6f:67:0c:bc:56:18:5c:d1:55:ce:
c3:35:2a:4e:32:a4:93:44:18:0d:c3:b0:49:7a:a7:
73:bc:cc:6e:30:4f:18:34:14:f6:aa:34:76:56:ae:
cf:31:fc:c9:3b:a3:11:09:2a:5d:4a:72:fe:f9:05:
c2:1e:af:f8:19:39:31:14:e1:b7:97:04:10:9e:10:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:60:42:2E:13:F7:37:2F:9B:17:08:95:40:13:EE:87:07:18:6F
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:a6:c2:9b:c4:a8:38:dd:40:98:2b:e3:ef:86:ad:44:df:
3a:04:d6:66:f7:ec:93:01:cd:0e:79:18:6b:2c:4b:ee:85:46:
83:f1:3c:af:af:06:73:f7:c3:74:69:de:16:fa:bc:d9:23:82:
1a:6f:e8:1d:1c:13:04:31:89:11:00:94:37:a3:80:85:bd:a7:
95:35:10:9f:a3:f8:76:d5:d6:dc:72:e1:1c:be:47:65:16:4b:
36:f7:58:7d:69:b3:4b:f0:46:bf:ba:66:9b:a2:df:8e:38:cd:
b2:06:2f:9a:19:f8:3f:e7:bb:1a:55:17:25:08:cc:83:e3:a2:
7f:ab:0b:a9:3b:31:8b:24:d1:ed:91:13:d5:31:c1:04:69:2f:
c6:20:09:99:dc:b3:35:c0:f8:a5:20:99:0d:89:3f:ca:26:9f:
0f:22:2e:91:91:00:5c:c7:50:5a:13:bd:7d:92:2e:6a:d7:47:
6a:86:fb:8d:47:9a:df:27:dc:42:ed:41:38:01:c1:58:31:96:
d8:9f:4e:72:e3:d1:49:79:3c:cb:f6:73:35:e0:97:6f:9b:a7:
14:a0:e0:35:6d:87:38:55:53:dc:a6:3e:e8:05:c7:33:d3:e0:
e3:c2:ca:85:82:3e:7a:1f:25:ad:a4:1f:48:7d:76:78:5b:6e:
fa:e6:55:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3tElneamarMzdDq2dcYB7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjYwNTAzMDkwMTM1WhcNMjYwNTA0MDkwMTM1WjAzMTEwLwYDVQQD
EyhjYWU0NjA0MjJlMTNmNzM3MmY5YjE3MDg5NTQwMTNlZTg3MDcxODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC25NwKZvqVaKH6aSbWco+USjamC
uymsmdPsPlq4A6KxISAY8psQKU464dety4TK5NaXSjSum4QG1anJ4Mh4sDAZSihY
DOBxIvtBsBo3b+Q36WK8kwtQCCYSSOKI/txCiO3W34si2S0mFmWxhPL1aIzG8BbG
TSrqOQMmTXe9w37dpQwi6T5BNYuCeQGboj9I1tupLrrGAVQXKT9mvT/qFmItV3/1
XQoraIjRRwaGAISIHw86Sfj3129nDLxWGFzRVc7DNSpOMqSTRBgNw7BJeqdzvMxu
ME8YNBT2qjR2Vq7PMfzJO6MRCSpdSnL++QXCHq/4GTkxFOG3lwQQnhCTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrkYEIuE/c3L5sXCJVAE+6HBxhvMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRimwpvE
qDjdQJgr4++GrUTfOgTWZvfskwHNDnkYayxL7oVGg/E8r68Gc/fDdGneFvq82SOC
Gm/oHRwTBDGJEQCUN6OAhb2nlTUQn6P4dtXW3HLhHL5HZRZLNvdYfWmzS/BGv7pm
m6LfjjjNsgYvmhn4P+e7GlUXJQjMg+Oif6sLqTsxiyTR7ZET1THBBGkvxiAJmdyz
NcD4pSCZDYk/yiafDyIukZEAXMdQWhO9fZIuatdHaob7jUea3yfcQu1BOAHBWDGW
2J9OcuPRSXk8y/ZzNeCXb5unFKDgNW2HOFVT3KY+6AXHM9Pg48LKhYI+eh8lraQf
SH12eFtu+uZVhA==
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:32 2026 by rpki-client