Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: +5eTZxYbAwKxnHGPWPULb5Zp2hu1nH1rbzzRkL9V/dA=
Subject key identifier: 6B:EA:80:C9:CF:88:25:76:A4:1B:4D:FD:C3:86:58:1C:80:3E:8F:63
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01A0E853DE77F0DCEE8B5CCC28142EF05457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 178B
Signing time: Mon 28 Sep 2026 14:03:25 +0000
Manifest this update: Mon 28 Sep 2026 14:03:25 +0000
Manifest next update: Tue 29 Sep 2026 14:03:25 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 2c3BXXpxoWYIr01NcAhTAAkdHnmjDV9AaU5DdNKfyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:de:77:f0:dc:ee:8b:5c:cc:28:14:2e:f0:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Sep 28 14:03:25 2026 GMT
Not After : Sep 29 14:03:25 2026 GMT
Subject: CN=6bea80c9cf882576a41b4dfdc386581c803e8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:38:00:d4:d8:bd:8d:04:14:38:62:26:93:
10:b9:6d:5d:d0:9b:87:cb:b5:15:4d:ba:e1:21:8a:
8b:ed:71:69:ca:a2:94:04:f0:54:3c:a4:89:46:1b:
e2:30:4d:2b:aa:ec:87:83:7d:1f:89:a4:84:f5:af:
ae:6d:79:53:32:8e:b7:ac:0b:63:91:5e:76:4e:fe:
8e:eb:56:06:2d:0d:e0:20:a7:23:ae:eb:96:38:be:
c2:d0:e9:45:a6:37:53:dc:66:fc:56:7c:39:62:0c:
48:66:ec:32:4a:9c:eb:20:04:58:cd:36:db:0e:53:
fd:cf:91:88:b4:9b:d2:68:22:11:aa:1d:94:fc:fa:
f8:5f:28:02:cb:69:97:9b:84:e4:b9:48:b2:ec:8d:
ac:79:97:17:20:14:55:ea:8f:3b:ae:1c:e8:ee:3e:
44:b0:ba:3d:20:ef:12:9c:58:61:e8:14:44:5b:38:
ad:a3:be:49:32:3a:f7:dd:31:69:1f:46:cd:1c:3f:
aa:0d:69:0f:fe:78:f7:9e:7d:cb:9f:c1:3a:c0:bd:
fa:d4:cb:6f:75:3e:3b:81:e8:40:92:1f:4d:99:cf:
e5:68:1c:93:87:b4:9d:dd:e2:b2:f8:c5:48:8b:ab:
f1:75:95:ab:61:7a:c6:f0:47:b6:c7:60:29:2f:82:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:80:C9:CF:88:25:76:A4:1B:4D:FD:C3:86:58:1C:80:3E:8F:63
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:57:b3:77:1c:d4:bb:56:e4:96:9b:f3:28:eb:76:b4:d0:
71:e3:e9:15:1a:58:4a:35:bd:89:e7:f3:69:22:b4:4d:64:80:
f5:3c:16:a6:a0:89:40:7a:d5:e7:61:5c:e6:f2:e6:6a:11:81:
e2:14:62:4b:34:a4:5b:72:23:9a:37:ec:ed:aa:c9:6b:11:5e:
1e:64:3c:c0:1d:b8:dd:a5:e1:d6:9f:c6:b3:b8:81:06:91:e9:
0b:bb:05:d5:a8:06:29:09:5a:f9:02:7e:64:d1:ad:d9:68:8f:
40:9a:8a:50:47:44:b0:d2:8d:86:fc:e9:fb:14:f4:fb:36:6f:
3b:75:aa:13:34:28:c7:87:0a:86:92:14:47:c1:f1:ca:8c:30:
72:02:c7:bd:46:8e:c9:f6:d8:c5:a0:aa:e7:32:76:82:b4:64:
8b:5a:09:1c:3b:a0:77:92:03:ba:51:88:ac:16:5e:d5:17:dd:
14:03:ea:37:64:dc:e1:90:28:ae:60:92:ab:28:01:52:a2:87:
3d:b6:b3:7d:86:bd:c3:3b:02:95:f6:c9:df:96:cf:7d:00:01:
53:0b:2b:8d:37:5b:37:c1:48:80:50:5a:09:9e:c8:45:5f:a4:
ca:0e:3f:90:3e:63:f2:b5:c5:0e:4f:1b:70:d0:88:8e:f7:f6:
0e:ee:26:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoU9538Nzui1zMKBQu8FRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTM0MjZlMjM2MWJhNjY1ZDhmMjViZDNjZmFlZmMyMGVi
ZGE0ODgwHhcNMjYwOTI4MTQwMzI1WhcNMjYwOTI5MTQwMzI1WjAzMTEwLwYDVQQD
Eyg2YmVhODBjOWNmODgyNTc2YTQxYjRkZmRjMzg2NTgxYzgwM2U4ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+U4ANTYvY0EFDhiJpMQuW1d0JuH
y7UVTbrhIYqL7XFpyqKUBPBUPKSJRhviME0rquyHg30fiaSE9a+ubXlTMo63rAtj
kV52Tv6O61YGLQ3gIKcjruuWOL7C0OlFpjdT3Gb8Vnw5YgxIZuwySpzrIARYzTbb
DlP9z5GItJvSaCIRqh2U/Pr4XygCy2mXm4TkuUiy7I2seZcXIBRV6o87rhzo7j5E
sLo9IO8SnFhh6BREWzito75JMjr33TFpH0bNHD+qDWkP/nj3nn3Ln8E6wL361Mtv
dT47gehAkh9Nmc/laByTh7Sd3eKy+MVIi6vxdZWrYXrG8Ee2x2ApL4Jj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvqgMnPiCV2pBtN/cOGWByAPo9jMB8GA1UdIwQY
MBaAFP5TQm4jYbpmXY8lvTz678IOvaSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2Mt
OTc3NWE1ZDY2MDRjLzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2MtOTc3NWE1ZDY2MDRj
LzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSlXs3cc
1LtW5Jab8yjrdrTQcePpFRpYSjW9iefzaSK0TWSA9TwWpqCJQHrV52Fc5vLmahGB
4hRiSzSkW3Ijmjfs7arJaxFeHmQ8wB243aXh1p/Gs7iBBpHpC7sF1agGKQla+QJ+
ZNGt2WiPQJqKUEdEsNKNhvzp+xT0+zZvO3WqEzQox4cKhpIUR8HxyowwcgLHvUaO
yfbYxaCq5zJ2grRki1oJHDugd5IDulGIrBZe1RfdFAPqN2Tc4ZAormCSqygBUqKH
PbazfYa9wzsClfbJ35bPfQABUwsrjTdbN8FIgFBaCZ7IRV+kyg4/kD5j8rXFDk8b
cNCIjvf2Du4mVw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:42:35 2026 by rpki-client