Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: kxQn95UUvRqdnr0yB+tt0F9plkjIfqDwjav3SfYBvLE=
Subject key identifier: B2:47:90:2D:DF:56:85:A5:EB:78:B9:56:36:8D:12:10:42:1D:54:EF
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 01A11B63C58CA94DB7B11D00941CEEEB071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:01:25 +0000
Manifest this update: Thu 08 Oct 2026 12:01:25 +0000
Manifest next update: Fri 09 Oct 2026 12:01:25 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: gl9DQ2A8Qfpeo4hXgSoylb8Z8h2UVszjeoTV+f+fEgg=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:c5:8c:a9:4d:b7:b1:1d:00:94:1c:ee:eb:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Oct 8 12:01:25 2026 GMT
Not After : Oct 9 12:01:25 2026 GMT
Subject: CN=b247902ddf5685a5eb78b956368d1210421d54ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:ea:69:40:4b:47:c4:e4:a5:42:f4:ce:2d:
82:cf:d4:b7:92:f5:6b:30:4a:88:2d:e5:65:1b:5c:
4e:22:c4:df:14:c3:e8:ea:53:f1:5a:28:43:6b:11:
c7:d5:1c:6a:81:b3:4d:1d:c7:7e:ba:4b:44:b2:c3:
54:2f:37:0c:89:6e:3a:40:33:f8:38:e2:80:0a:85:
7d:36:8a:bb:2f:1a:91:e1:a7:3b:17:c1:83:15:35:
e8:6c:a9:87:fd:92:57:05:3b:b1:df:22:2f:b3:7b:
bc:12:88:2d:a6:c9:c5:49:d9:fd:80:c5:6b:89:8d:
0b:2e:92:e6:f9:1a:d3:cf:94:e5:61:fa:ef:fc:4b:
14:c6:55:d3:5a:86:fc:df:85:ac:79:1c:fa:16:82:
c3:af:b1:28:75:b0:97:4e:b6:49:39:86:e5:39:a0:
ab:8a:eb:0d:cb:54:a0:c7:97:0e:87:4f:ad:52:89:
d4:41:d3:3e:80:76:4b:b0:5f:5e:0a:db:83:7b:7f:
15:aa:2c:96:55:ae:f1:99:5b:8f:da:93:4d:6f:61:
a7:a6:e2:1f:eb:21:66:d0:7e:0a:da:22:52:0f:08:
35:ce:50:0a:87:b3:72:2a:8b:09:12:b4:f2:dd:97:
7a:25:c7:e1:60:dc:3f:e8:da:e6:da:db:c9:6b:e5:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:90:2D:DF:56:85:A5:EB:78:B9:56:36:8D:12:10:42:1D:54:EF
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:09:3e:10:27:2a:06:d0:d8:bf:a0:c9:cd:7a:66:47:51:
03:14:63:21:03:6a:f8:1d:b6:13:6c:98:15:f5:fa:cd:be:74:
f1:eb:2e:06:6b:3f:a9:ee:95:76:56:c6:22:22:30:2f:53:93:
32:7f:e4:b7:e1:f2:e7:d5:b5:ba:f0:6b:63:74:b9:b0:29:ca:
8a:36:64:65:78:99:64:af:a2:18:23:51:c7:0e:7a:1c:c9:49:
b8:6b:1c:65:c0:50:24:83:3d:05:a1:97:18:5c:0b:bb:98:1c:
21:76:d3:b9:69:05:7f:86:c7:60:cd:46:27:62:db:15:73:ec:
2e:d9:14:70:ee:94:3c:9a:19:98:7a:48:b8:5d:03:ba:51:ec:
7d:74:3e:7b:a1:7c:73:dd:1a:e4:ce:92:05:bd:0b:e0:19:bf:
b9:9e:a8:06:47:d4:97:63:4f:51:12:35:96:b1:2d:2b:26:1a:
00:af:35:ce:e8:8d:69:0e:d4:fc:88:7d:19:16:1b:2c:c1:30:
80:c9:d0:c1:c3:2a:b8:d2:0b:ad:8a:2a:57:c4:18:be:3e:2e:
ba:48:b9:3f:79:aa:66:c2:29:00:cf:c5:62:a5:4c:57:07:b5:
29:80:d9:de:97:28:58:39:83:33:55:6f:21:4d:0c:ae:97:42:
10:e5:82:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbY8WMqU23sR0AlBzu6wcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YWIzMzlhMWRhM2JkNGY3MmM3MzAyNmVmNThkMGI2MWFk
Mjc3MDUwHhcNMjYxMDA4MTIwMTI1WhcNMjYxMDA5MTIwMTI1WjAzMTEwLwYDVQQD
EyhiMjQ3OTAyZGRmNTY4NWE1ZWI3OGI5NTYzNjhkMTIxMDQyMWQ1NGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYrqaUBLR8TkpUL0zi2Cz9S3kvVr
MEqILeVlG1xOIsTfFMPo6lPxWihDaxHH1RxqgbNNHcd+uktEssNULzcMiW46QDP4
OOKACoV9Noq7LxqR4ac7F8GDFTXobKmH/ZJXBTux3yIvs3u8EogtpsnFSdn9gMVr
iY0LLpLm+RrTz5TlYfrv/EsUxlXTWob834WseRz6FoLDr7EodbCXTrZJOYblOaCr
iusNy1Sgx5cOh0+tUonUQdM+gHZLsF9eCtuDe38VqiyWVa7xmVuP2pNNb2GnpuIf
6yFm0H4K2iJSDwg1zlAKh7NyKosJErTy3Zd6JcfhYNw/6Nrm2tvJa+US0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJHkC3fVoWl63i5VjaNEhBCHVTvMB8GA1UdIwQY
MBaAFJSrM5odo71PcscwJu9Y0LYa0ncFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtzem1oMmp2VTl5eHpBbTcxalF0aHJTZHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MzMxNzQtZWRkNi00YjQyLWIwMTEt
OTgwNTgxMDBhNjQ4LzEvbEtzem1oMmp2VTl5eHpBbTcxalF0aHJTZHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83MzMxNzQtZWRkNi00YjQyLWIwMTEtOTgwNTgxMDBhNjQ4
LzEvbEtzem1oMmp2VTl5eHpBbTcxalF0aHJTZHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU0JPhAn
KgbQ2L+gyc16ZkdRAxRjIQNq+B22E2yYFfX6zb508esuBms/qe6VdlbGIiIwL1OT
Mn/kt+Hy59W1uvBrY3S5sCnKijZkZXiZZK+iGCNRxw56HMlJuGscZcBQJIM9BaGX
GFwLu5gcIXbTuWkFf4bHYM1GJ2LbFXPsLtkUcO6UPJoZmHpIuF0DulHsfXQ+e6F8
c90a5M6SBb0L4Bm/uZ6oBkfUl2NPURI1lrEtKyYaAK81zuiNaQ7U/Ih9GRYbLMEw
gMnQwcMquNILrYoqV8QYvj4uuki5P3mqZsIpAM/FYqVMVwe1KYDZ3pcoWDmDM1Vv
IU0MrpdCEOWCnA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:10 2026 by rpki-client