Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: vUhY2k0589th+OMLO6dsKYkxchGwnmFXuefWyV6Vg9A=
Subject key identifier: D6:B4:4C:B9:83:79:70:94:6D:92:26:CA:96:1F:14:93:19:4D:58:6A
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019D38D2AED971BB98A9E8F63738A1E058C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: Ki74C8QHYxpal0prQMmL0orYX6cm9OdOHSqF/S+suTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ae:d9:71:bb:98:a9:e8:f6:37:38:a1:e0:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=d6b44cb9837970946d9226ca961f1493194d586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:d0:f1:09:e5:b3:a2:5a:3e:34:39:60:c1:
e9:3b:ab:5a:65:fb:21:d6:11:16:df:ef:c2:52:d7:
63:33:4d:55:a4:a5:2e:92:c4:11:e3:90:6a:ba:dc:
3b:f6:0d:43:0e:38:bc:f8:d0:04:8e:b2:57:19:f2:
aa:19:ff:0a:5c:71:6c:20:9a:3d:2e:86:38:43:df:
17:42:bb:36:ca:fc:8d:7e:97:e7:9f:e3:4f:8e:56:
6b:4d:4b:49:fa:72:23:af:99:37:4e:34:48:7a:db:
74:7f:67:c0:b0:60:87:35:72:b3:2f:14:48:52:32:
2c:4d:85:bb:31:90:17:d0:7a:74:8f:e1:bc:e3:0f:
b0:2b:72:18:ae:40:43:2c:7b:87:b9:c6:6d:3c:b7:
33:e0:51:b1:62:9e:27:f9:df:c1:63:ba:08:a3:29:
5d:d0:dc:15:33:e3:80:f6:4f:c5:11:f9:07:da:e9:
9d:21:14:f3:35:86:d7:dc:ea:8e:28:b7:7e:66:0f:
bc:b7:ce:07:c3:39:76:49:b7:c0:d1:c1:25:74:15:
f8:01:d9:30:2c:f3:73:74:fb:5c:5b:5c:0f:09:37:
6c:22:84:9a:13:83:21:76:e4:c3:8c:f6:9a:26:9d:
31:99:a3:b6:d2:1a:e7:7d:28:9a:8e:05:08:0c:6a:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B4:4C:B9:83:79:70:94:6D:92:26:CA:96:1F:14:93:19:4D:58:6A
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:80:bd:e3:24:94:e6:93:6c:3a:28:ca:53:4a:96:6e:4e:
b6:61:a0:29:a9:8f:cd:03:df:56:06:ff:a8:f0:89:3e:22:e9:
86:05:09:50:cb:77:65:31:a6:90:e8:f9:c0:34:c5:9a:a7:06:
0e:26:12:77:f8:13:b9:bf:6b:4a:83:9b:24:d2:e5:f5:88:44:
48:e4:53:35:71:b9:c2:62:8b:b1:5e:57:ae:27:f5:2c:97:47:
8d:2d:9b:c7:20:4b:bc:dd:bf:85:a9:a6:a9:6f:05:a1:9c:d0:
c5:89:4a:d5:35:12:5a:e1:16:de:55:d5:62:e2:ae:c0:9a:66:
94:59:e0:aa:e7:9c:b4:03:f8:ab:67:c3:65:14:77:34:4f:98:
da:4e:af:48:61:96:9f:2f:58:2b:80:37:39:89:09:48:35:8e:
56:25:e6:27:cd:42:0e:cf:29:64:ba:bd:7e:1d:8c:46:5e:2b:
7b:94:e7:f6:af:3a:10:28:ec:56:91:bc:f6:20:74:40:94:25:
78:95:e2:8d:a4:06:11:83:2d:da:a4:f5:38:f3:3b:d7:64:e4:
fd:00:7c:85:64:4e:56:0a:01:e4:cb:c2:fb:d7:14:49:d4:53:
57:b9:88:79:10:2a:d1:9d:a2:c3:77:57:40:de:e0:92:c1:e3:
55:1b:dc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040q7ZcbuYqej2Nzih4FjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2
YzIwNDQwHhcNMjYwMzI5MDkwMDI0WhcNMjYwMzMwMDkwMDI0WjAzMTEwLwYDVQQD
EyhkNmI0NGNiOTgzNzk3MDk0NmQ5MjI2Y2E5NjFmMTQ5MzE5NGQ1ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu7Q8Qnls6JaPjQ5YMHpO6taZfsh
1hEW3+/CUtdjM01VpKUuksQR45Bqutw79g1DDji8+NAEjrJXGfKqGf8KXHFsIJo9
LoY4Q98XQrs2yvyNfpfnn+NPjlZrTUtJ+nIjr5k3TjRIett0f2fAsGCHNXKzLxRI
UjIsTYW7MZAX0Hp0j+G84w+wK3IYrkBDLHuHucZtPLcz4FGxYp4n+d/BY7oIoyld
0NwVM+OA9k/FEfkH2umdIRTzNYbX3OqOKLd+Zg+8t84Hwzl2SbfA0cEldBX4Adkw
LPNzdPtcW1wPCTdsIoSaE4MhduTDjPaaJp0xmaO20hrnfSiajgUIDGq7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa0TLmDeXCUbZImypYfFJMZTVhqMB8GA1UdIwQY
MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt
MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh
LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow6AveMk
lOaTbDooylNKlm5OtmGgKamPzQPfVgb/qPCJPiLphgUJUMt3ZTGmkOj5wDTFmqcG
DiYSd/gTub9rSoObJNLl9YhESORTNXG5wmKLsV5Xrif1LJdHjS2bxyBLvN2/hamm
qW8FoZzQxYlK1TUSWuEW3lXVYuKuwJpmlFngquectAP4q2fDZRR3NE+Y2k6vSGGW
ny9YK4A3OYkJSDWOViXmJ81CDs8pZLq9fh2MRl4re5Tn9q86ECjsVpG89iB0QJQl
eJXijaQGEYMt2qT1OPM712Tk/QB8hWROVgoB5MvC+9cUSdRTV7mIeRAq0Z2iw3dX
QN7gksHjVRvckg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:48 2026 by rpki-client