Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: olcvy5l010LQZU2k4t6cYqzK7MNfe1AsDhwaBYI0Zzo=
Subject key identifier: 43:58:6E:32:B5:BC:20:03:84:E8:52:02:D8:C4:F3:8C:95:C7:65:EC
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019D05532F139AC10D4D9A38C1593B8BDF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1571
Signing time: Thu 19 Mar 2026 09:00:30 +0000
Manifest this update: Thu 19 Mar 2026 09:00:30 +0000
Manifest next update: Fri 20 Mar 2026 09:00:30 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: rCkWZms9C5KAlw7x+2Kv48FJm9/o2uNtB2DhhCq0dfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:2f:13:9a:c1:0d:4d:9a:38:c1:59:3b:8b:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Mar 19 09:00:30 2026 GMT
Not After : Mar 20 09:00:30 2026 GMT
Subject: CN=43586e32b5bc200384e85202d8c4f38c95c765ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:b9:18:52:6b:0d:46:40:2e:7b:ad:e8:0a:
a3:ec:e5:c8:1d:85:c7:6b:78:05:b1:ab:28:ac:2b:
88:85:96:a6:11:05:8a:ca:6b:16:d1:e0:23:72:0a:
86:c3:b1:2d:58:c2:95:d6:8a:f4:45:32:ec:24:7d:
f6:4f:4f:2c:a2:40:d8:0f:97:c5:1e:14:53:95:1d:
08:60:9f:d9:93:40:58:8f:40:b0:0b:ac:ff:5c:60:
d2:11:d3:5f:31:ad:81:1d:fb:dc:6f:c5:72:6c:b3:
27:2d:4b:f2:7a:8e:e9:19:0b:97:a1:32:2a:43:d1:
1b:be:e2:14:8e:35:b0:7a:ba:a3:76:a7:4c:ce:ee:
dc:63:33:c5:69:d0:27:e9:43:28:f8:e2:17:0a:d2:
a4:b9:92:7e:af:f3:d2:18:3c:70:13:f8:ca:c8:6b:
e1:b5:42:4e:14:33:26:cd:f3:bd:11:ef:52:4a:82:
1e:3e:19:62:b4:9c:67:5c:37:91:7d:58:04:69:e1:
49:98:93:78:65:07:ef:9b:65:fd:ee:fb:c4:a1:d3:
24:2e:9f:b6:86:26:b9:9e:7b:51:15:52:13:78:bc:
17:8d:43:0d:45:2c:29:41:66:a5:28:20:c4:67:80:
c7:76:60:2f:69:34:82:90:86:42:99:d9:5c:22:45:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:6E:32:B5:BC:20:03:84:E8:52:02:D8:C4:F3:8C:95:C7:65:EC
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:06:e0:c4:07:9f:ef:16:bb:cb:98:a3:01:04:38:bb:7f:
ad:37:67:74:35:0f:9e:56:dd:d7:d4:25:78:ea:74:69:e4:3f:
7d:13:c5:45:6c:17:a1:0b:5e:83:1a:42:6c:3d:a7:93:b2:56:
7b:80:4c:3d:8b:6f:5b:2e:09:72:00:f6:f2:59:dd:16:84:80:
54:59:66:ea:bd:a6:18:37:ef:59:fb:cb:97:09:19:bf:a0:ae:
e7:36:53:15:e7:44:a5:6a:99:60:3e:f6:3d:7e:e0:04:04:e3:
8e:ee:7e:4e:77:19:e7:9a:09:a8:58:ed:c5:1b:f1:9a:66:3d:
0c:1b:61:c8:01:21:06:d0:69:ab:f3:38:23:e1:02:64:7a:35:
81:2e:7f:0a:f7:67:31:c0:28:31:eb:99:17:e2:cd:01:a9:0f:
74:6a:04:8b:b8:c5:20:43:3b:f2:f5:7c:73:41:5c:c5:12:ad:
3b:cf:5b:82:7c:97:73:c5:be:bc:c5:99:1c:d0:b2:62:61:f0:
4e:b7:7a:d5:d7:27:24:1d:63:75:03:6c:02:a4:36:0c:17:9b:
42:29:77:b2:a7:1e:5a:69:e5:f1:96:10:8c:21:b3:c5:3b:6b:
60:35:f0:12:82:aa:fc:ff:13:03:57:83:23:35:a0:b5:18:56:
89:05:31:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FUy8TmsENTZo4wVk7i9+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjYwMzE5MDkwMDMwWhcNMjYwMzIwMDkwMDMwWjAzMTEwLwYDVQQD
Eyg0MzU4NmUzMmI1YmMyMDAzODRlODUyMDJkOGM0ZjM4Yzk1Yzc2NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5G5GFJrDUZALnut6Aqj7OXIHYXH
a3gFsasorCuIhZamEQWKymsW0eAjcgqGw7EtWMKV1or0RTLsJH32T08sokDYD5fF
HhRTlR0IYJ/Zk0BYj0CwC6z/XGDSEdNfMa2BHfvcb8VybLMnLUvyeo7pGQuXoTIq
Q9EbvuIUjjWwerqjdqdMzu7cYzPFadAn6UMo+OIXCtKkuZJ+r/PSGDxwE/jKyGvh
tUJOFDMmzfO9Ee9SSoIePhlitJxnXDeRfVgEaeFJmJN4ZQfvm2X97vvEodMkLp+2
hia5nntRFVITeLwXjUMNRSwpQWalKCDEZ4DHdmAvaTSCkIZCmdlcIkUOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENYbjK1vCADhOhSAtjE84yVx2XsMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeMG4MQH
n+8Wu8uYowEEOLt/rTdndDUPnlbd19QleOp0aeQ/fRPFRWwXoQtegxpCbD2nk7JW
e4BMPYtvWy4JcgD28lndFoSAVFlm6r2mGDfvWfvLlwkZv6Cu5zZTFedEpWqZYD72
PX7gBATjju5+TncZ55oJqFjtxRvxmmY9DBthyAEhBtBpq/M4I+ECZHo1gS5/Cvdn
McAoMeuZF+LNAakPdGoEi7jFIEM78vV8c0FcxRKtO89bgnyXc8W+vMWZHNCyYmHw
Trd61dcnJB1jdQNsAqQ2DBebQil3sqceWmnl8ZYQjCGzxTtrYDXwEoKq/P8TA1eD
IzWgtRhWiQUxGA==
-----END CERTIFICATE-----
Generated at Thu Mar 19 13:50:33 2026 by rpki-client