Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: /AuWiKvEgV/zbidCcdfuafVYhStqBnWjY3quJk3l92o=
Subject key identifier: B2:0A:AE:74:9F:22:61:5C:27:87:0A:40:D3:EE:93:63:58:49:C4:8A
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019CAA900F47FF6835333B4179B0DAB3A689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0EF2
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: 4wk9G6gIn4aYwuhM1IHla1F3g_o.roa (hash: zRDXNJfCkrvxLeiW37gj5jm7Vy6uGsNGYEbIgmJIKNY=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: fBNWKpeQpoCsZwJUOOMTsZG6hUA4/jCdOZnllh2afok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0f:47:ff:68:35:33:3b:41:79:b0:da:b3:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=b20aae749f22615c27870a40d3ee93635849c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:94:fc:41:e6:0b:4a:e1:aa:e4:78:7c:ab:
55:9c:3b:e0:93:b1:ab:b1:9b:0e:78:7a:21:79:e3:
9d:d0:ef:1d:03:b9:51:8b:70:4b:61:43:08:de:c2:
a4:c4:a8:08:fa:05:d1:f2:e0:9f:cb:0d:0f:cf:58:
38:f9:32:70:26:09:93:f4:a2:a4:36:25:c4:33:60:
cd:0a:0d:38:42:44:fe:3b:1b:2d:20:06:72:2b:b3:
ef:9b:74:aa:66:10:72:12:19:a0:1e:c7:1d:7e:0f:
8e:f5:b0:c9:a6:a5:5a:4a:c7:6a:7a:77:6b:50:b2:
9b:29:2e:20:ff:1c:85:27:d0:07:ab:8e:4b:02:81:
bb:00:3e:24:77:06:ab:d1:48:c0:02:2a:10:c0:76:
0c:f7:66:cd:79:2e:ae:3a:89:f3:bd:51:1c:37:ce:
9f:1a:b3:20:1a:6d:7d:38:26:42:a3:c3:24:8b:a4:
3d:1b:2d:42:cc:ec:a0:46:a4:e1:39:18:4e:07:a5:
35:b6:3b:93:b5:3e:a2:d0:d2:71:af:06:08:2d:59:
56:ed:ce:36:67:d3:47:06:ea:62:fe:03:66:35:36:
ec:ab:94:f9:88:4e:12:83:fb:fd:7a:a4:ed:b0:39:
e0:69:d8:61:9a:59:e8:66:c4:eb:c4:12:e1:d7:bb:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:AE:74:9F:22:61:5C:27:87:0A:40:D3:EE:93:63:58:49:C4:8A
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:94:9d:d2:fc:79:31:43:aa:10:e5:ba:f5:2f:c5:ed:b0:cb:
c4:39:ca:87:b6:94:0f:41:53:6d:2a:61:12:dd:41:38:04:6e:
53:aa:38:42:b5:e2:96:9c:a0:cd:4e:c1:6d:9e:9c:46:1f:af:
49:a9:ff:2d:1f:4c:9a:84:5b:a5:34:14:39:1a:bf:d3:53:b6:
b0:cc:9c:e1:af:92:75:0c:2a:84:a0:1a:31:fb:27:d6:a5:77:
27:cc:33:93:f6:28:84:c9:de:34:12:8b:d8:1a:27:cc:6f:5c:
b8:98:30:2d:af:5f:ff:fa:2f:f6:32:e9:c4:b7:c3:59:31:06:
ea:1b:62:66:dd:17:00:58:71:69:d2:ca:ab:54:80:0b:de:57:
68:a8:d1:de:e7:4d:a0:f4:3a:d0:01:8e:89:27:9f:6b:bb:23:
7a:c5:7c:d2:47:3e:2a:d9:df:fa:88:84:00:25:e1:28:61:33:
68:fa:fe:4e:20:b5:d1:dd:80:15:4d:2c:05:a3:23:5c:46:f5:
da:a0:18:6c:1f:3f:69:d6:8f:c9:b4:44:92:4c:04:b5:ad:c9:
0e:26:7f:55:c3:e0:c2:4f:bb:4c:3f:62:f6:31:e3:35:4c:e8:
b4:52:bc:c6:b0:b1:8a:b6:7d:81:88:e7:ac:2a:41:ee:3d:83:
82:56:bd:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkA9H/2g1MztBebDas6aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0
Y2UxNDcwHhcNMjYwMzAxMTgwMTMzWhcNMjYwMzAyMTgwMTMzWjAzMTEwLwYDVQQD
EyhiMjBhYWU3NDlmMjI2MTVjMjc4NzBhNDBkM2VlOTM2MzU4NDljNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUCU/EHmC0rhquR4fKtVnDvgk7Gr
sZsOeHoheeOd0O8dA7lRi3BLYUMI3sKkxKgI+gXR8uCfyw0Pz1g4+TJwJgmT9KKk
NiXEM2DNCg04QkT+OxstIAZyK7Pvm3SqZhByEhmgHscdfg+O9bDJpqVaSsdqendr
ULKbKS4g/xyFJ9AHq45LAoG7AD4kdwar0UjAAioQwHYM92bNeS6uOonzvVEcN86f
GrMgGm19OCZCo8Mki6Q9Gy1CzOygRqThORhOB6U1tjuTtT6i0NJxrwYILVlW7c42
Z9NHBupi/gNmNTbsq5T5iE4Sg/v9eqTtsDngadhhmlnoZsTrxBLh17vgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIKrnSfImFcJ4cKQNPuk2NYScSKMB8GA1UdIwQY
MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt
NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz
LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Sd0vx5
MUOqEOW69S/F7bDLxDnKh7aUD0FTbSphEt1BOARuU6o4QrXilpygzU7BbZ6cRh+v
San/LR9MmoRbpTQUORq/01O2sMyc4a+SdQwqhKAaMfsn1qV3J8wzk/YohMneNBKL
2BonzG9cuJgwLa9f//ov9jLpxLfDWTEG6htiZt0XAFhxadLKq1SAC95XaKjR3udN
oPQ60AGOiSefa7sjesV80kc+Ktnf+oiEACXhKGEzaPr+TiC10d2AFU0sBaMjXEb1
2qAYbB8/adaPybREkkwEta3JDiZ/VcPgwk+7TD9i9jHjNUzotFK8xrCxirZ9gYjn
rCpB7j2Dgla9Xg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:59 2026 by rpki-client