Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: x+AzNfinMkT6vcTT53e9a7pzmV3xMbfCYlS8X77Jpoc=
Subject key identifier: BF:11:E5:E4:E4:0A:36:B6:B5:5A:2F:6E:79:18:C3:9F:41:80:6C:1D
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01A0D5DDC0651553C44287C016530FF69EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 18B7
Signing time: Fri 25 Sep 2026 00:01:14 +0000
Manifest this update: Fri 25 Sep 2026 00:01:14 +0000
Manifest next update: Sat 26 Sep 2026 00:01:14 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: OO6ufEtFdBfsFMEZMT9PQaLNtDeY5UxnnH+ybP9FQXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:c0:65:15:53:c4:42:87:c0:16:53:0f:f6:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Sep 25 00:01:14 2026 GMT
Not After : Sep 26 00:01:14 2026 GMT
Subject: CN=bf11e5e4e40a36b6b55a2f6e7918c39f41806c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:4e:1a:cd:86:d4:ad:a0:12:28:cf:e4:8f:
d3:27:62:91:27:1e:32:eb:9f:e5:cd:f8:bf:80:73:
86:07:fb:e3:13:6d:db:20:21:28:ab:cf:4a:b6:f0:
3e:82:1e:03:46:9f:bf:da:7c:50:8d:80:f3:f1:f0:
3f:1b:f4:07:36:6d:ca:bd:0c:d0:fc:07:e9:e5:c3:
11:1f:e0:5f:ea:a6:27:17:c8:b5:c0:b9:a3:3e:0e:
61:e0:b5:0f:1c:24:6d:e1:98:18:37:5d:59:da:7b:
b7:21:eb:99:ac:a6:bf:d1:45:d7:d7:f8:5e:9a:e4:
5d:84:10:d3:e9:a0:2c:4f:ed:c6:8b:f6:fe:be:81:
9c:b6:5d:39:f3:e3:f1:23:ca:fd:d9:f5:2a:bd:46:
57:7a:b8:2b:68:26:0f:ac:0d:a4:e5:f3:99:22:f2:
7f:3e:77:fb:f2:85:37:62:0a:22:2a:5f:9f:c7:32:
99:ee:13:f9:fb:ee:77:d1:9e:84:bf:9c:a6:b4:2a:
8c:7c:a2:78:fd:43:af:9a:f8:f0:52:98:03:f1:7e:
6e:a4:a9:9f:5a:c4:2e:92:a8:49:3a:b7:68:a4:42:
26:a8:92:c9:b3:aa:db:22:96:b8:cf:58:da:19:9b:
e8:aa:96:5f:ae:e2:bd:7d:dd:ab:67:15:2a:a6:5d:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:11:E5:E4:E4:0A:36:B6:B5:5A:2F:6E:79:18:C3:9F:41:80:6C:1D
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:89:55:aa:ef:b3:d4:50:55:7a:3d:3c:9e:f0:fd:52:29:7b:
ba:b9:60:ef:24:7f:76:44:66:47:5a:93:58:23:5a:f3:d9:60:
af:77:09:a4:ab:98:03:ad:e9:81:96:d8:3d:57:f3:b0:76:e1:
67:4d:ec:44:ed:94:1e:70:5a:ce:d0:f9:e9:80:ea:2e:86:74:
ee:99:a0:8e:ea:ae:58:c2:74:cd:87:ea:30:48:37:ff:8a:65:
48:2c:cc:40:08:e2:71:5a:55:f0:20:14:fc:73:53:a5:dc:4c:
5a:c3:16:24:b5:e0:01:1f:ad:81:aa:0b:83:75:4d:1b:26:9e:
57:ee:a3:70:9e:17:6b:e4:6b:f7:4b:5a:0a:16:4a:1c:d3:6f:
42:0a:59:51:85:01:2b:80:24:96:a4:6d:6a:30:9a:be:8b:7f:
42:e7:d9:05:45:ec:38:fd:43:c3:ec:1b:6e:3c:eb:1a:a4:76:
e8:aa:77:35:c9:dd:a6:8c:44:fa:bc:9f:ae:f1:a7:db:f4:9c:
43:8d:a6:27:a2:3d:79:0a:e7:78:e7:1f:0f:dd:d7:aa:6b:86:
13:a2:22:88:c5:bb:8c:51:0c:be:60:81:8f:da:61:c4:50:f6:
d3:bf:a8:22:ec:50:61:84:3e:15:91:53:1d:8e:43:bd:c4:17:
84:64:a8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3cBlFVPEQofAFlMP9p77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjYwOTI1MDAwMTE0WhcNMjYwOTI2MDAwMTE0WjAzMTEwLwYDVQQD
EyhiZjExZTVlNGU0MGEzNmI2YjU1YTJmNmU3OTE4YzM5ZjQxODA2YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofdOGs2G1K2gEijP5I/TJ2KRJx4y
65/lzfi/gHOGB/vjE23bICEoq89KtvA+gh4DRp+/2nxQjYDz8fA/G/QHNm3KvQzQ
/Afp5cMRH+Bf6qYnF8i1wLmjPg5h4LUPHCRt4ZgYN11Z2nu3IeuZrKa/0UXX1/he
muRdhBDT6aAsT+3Gi/b+voGctl058+PxI8r92fUqvUZXergraCYPrA2k5fOZIvJ/
Pnf78oU3YgoiKl+fxzKZ7hP5++530Z6Ev5ymtCqMfKJ4/UOvmvjwUpgD8X5upKmf
WsQukqhJOrdopEImqJLJs6rbIpa4z1jaGZvoqpZfruK9fd2rZxUqpl2bJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8R5eTkCja2tVovbnkYw59BgGwdMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIlVqu+z
1FBVej08nvD9Uil7urlg7yR/dkRmR1qTWCNa89lgr3cJpKuYA63pgZbYPVfzsHbh
Z03sRO2UHnBaztD56YDqLoZ07pmgjuquWMJ0zYfqMEg3/4plSCzMQAjicVpV8CAU
/HNTpdxMWsMWJLXgAR+tgaoLg3VNGyaeV+6jcJ4Xa+Rr90taChZKHNNvQgpZUYUB
K4AklqRtajCavot/QufZBUXsOP1Dw+wbbjzrGqR26Kp3NcndpoxE+ryfrvGn2/Sc
Q42mJ6I9eQrneOcfD93XqmuGE6IiiMW7jFEMvmCBj9phxFD207+oIuxQYYQ+FZFT
HY5DvcQXhGSoyA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:27:30 2026 by rpki-client