Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: KB9OvalslRFMhcjQBSsOg/0ta8ZaHX7cBS1bPCMH7Xo=
Subject key identifier: 6F:E2:F0:3B:F0:6A:48:42:31:A5:B1:3B:61:DF:08:6F:99:1D:4E:5B
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019D37C0B1A53D8BD010F4B44C9FA7CD11FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 066B
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: GFIibP3fcCQAXue-pLs_MEmE4aM.roa (hash: vZPkadzf5zT9TuSZwyNbMA/XV23iCETvdmYU8OniDec=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: VLY1ijzgO0N6f7TsZVRGyGSXLJWaysByCGWSHwheAkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b1:a5:3d:8b:d0:10:f4:b4:4c:9f:a7:cd:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=6fe2f03bf06a484231a5b13b61df086f991d4e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:0f:24:3d:57:ac:86:57:5f:87:3b:5f:38:
aa:6e:54:c9:26:47:98:65:11:7f:c3:d4:98:52:30:
25:69:e0:62:7f:4c:de:3c:31:41:2a:6c:b2:e7:15:
37:97:ab:64:f6:4b:94:41:f0:96:0e:f5:bd:52:fd:
1a:59:50:03:c5:44:83:f5:2f:ae:dc:09:4e:36:e5:
ea:f7:9e:71:95:7c:9f:14:1e:95:5a:8c:85:08:95:
70:da:f0:9d:4c:dd:62:19:53:7c:4f:05:b7:75:7a:
86:15:a5:49:24:32:9c:2d:42:4e:22:4e:51:61:45:
97:77:4d:cd:ca:2b:2d:78:ec:cf:33:8d:25:35:74:
f5:7d:75:70:92:41:07:2e:fb:17:10:0e:9d:a8:06:
ad:a2:19:f5:bb:ce:5a:ed:fe:2e:cc:66:38:40:ae:
c0:16:c6:95:f2:ac:e1:4b:78:5d:2c:ad:1e:23:d6:
74:84:be:2d:50:eb:77:c1:9e:a4:93:91:ac:2a:d7:
eb:22:b8:d1:94:41:06:72:f3:4b:ff:5f:f9:3d:75:
25:53:4c:e8:de:33:f6:e3:3a:c1:a5:55:93:4a:0a:
63:f8:93:38:e4:6e:15:52:4a:cc:af:38:75:4c:3f:
4a:ab:23:b5:ad:63:63:29:34:e0:4e:e1:24:54:11:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:F0:3B:F0:6A:48:42:31:A5:B1:3B:61:DF:08:6F:99:1D:4E:5B
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:50:fc:6a:23:77:bb:60:6c:b8:ff:5a:1f:9a:8e:ae:56:
d3:d6:74:31:65:30:b2:f9:b9:6b:5e:0f:0d:88:df:4f:1a:0d:
7e:42:bf:bd:31:b1:8f:dd:8d:68:68:95:5a:be:b0:06:94:c8:
d7:79:72:cd:93:ab:64:25:08:08:b5:3a:60:77:88:95:6c:f6:
e7:1c:9b:45:ee:35:5a:fb:b5:17:9e:a4:4c:68:7d:5e:92:3c:
4b:fe:76:3b:b2:0d:7d:a7:31:35:d8:75:4c:91:3b:7c:1d:df:
8c:be:02:7b:80:92:50:0b:2d:14:80:f0:73:84:1c:e1:55:09:
0d:6d:2b:5d:83:5a:61:a5:78:dc:1c:ec:fe:97:2a:94:3f:81:
77:72:ea:3b:57:e0:7a:b7:04:67:d1:cd:7b:44:e9:86:e8:08:
37:be:07:c7:20:d9:74:d4:0c:64:58:3d:15:52:62:b3:19:61:
81:67:cc:c8:c9:02:1d:1d:41:c6:af:1d:e0:a6:1a:73:e6:57:
0e:85:ae:f9:a6:d0:f3:96:0a:43:49:41:4c:8d:96:de:3a:98:
a3:8f:ca:a2:be:ad:15:8e:08:27:85:57:ba:d4:30:c0:1a:78:
e8:90:4c:03:83:3e:18:d6:65:d0:64:31:96:71:fd:7c:0f:f8:
a0:aa:6b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLGlPYvQEPS0TJ+nzRH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj
ZjgyZjEwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
Eyg2ZmUyZjAzYmYwNmE0ODQyMzFhNWIxM2I2MWRmMDg2Zjk5MWQ0ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIPJD1XrIZXX4c7XziqblTJJkeY
ZRF/w9SYUjAlaeBif0zePDFBKmyy5xU3l6tk9kuUQfCWDvW9Uv0aWVADxUSD9S+u
3AlONuXq955xlXyfFB6VWoyFCJVw2vCdTN1iGVN8TwW3dXqGFaVJJDKcLUJOIk5R
YUWXd03NyisteOzPM40lNXT1fXVwkkEHLvsXEA6dqAatohn1u85a7f4uzGY4QK7A
FsaV8qzhS3hdLK0eI9Z0hL4tUOt3wZ6kk5GsKtfrIrjRlEEGcvNL/1/5PXUlU0zo
3jP24zrBpVWTSgpj+JM45G4VUkrMrzh1TD9KqyO1rWNjKTTgTuEkVBGRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/i8DvwakhCMaWxO2HfCG+ZHU5bMB8GA1UdIwQY
MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et
ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5
LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBdQ/Goj
d7tgbLj/Wh+ajq5W09Z0MWUwsvm5a14PDYjfTxoNfkK/vTGxj92NaGiVWr6wBpTI
13lyzZOrZCUICLU6YHeIlWz25xybRe41Wvu1F56kTGh9XpI8S/52O7INfacxNdh1
TJE7fB3fjL4Ce4CSUAstFIDwc4Qc4VUJDW0rXYNaYaV43Bzs/pcqlD+Bd3LqO1fg
ercEZ9HNe0TphugIN74HxyDZdNQMZFg9FVJisxlhgWfMyMkCHR1Bxq8d4KYac+ZX
DoWu+abQ85YKQ0lBTI2W3jqYo4/Kor6tFY4IJ4VXutQwwBp46JBMA4M+GNZl0GQx
lnH9fA/4oKprTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:16 2026 by rpki-client