Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: TKRZLNG4L+kVLMUmmPWdFvtJ+CgiHgDaOY15r+TLvDM=
Subject key identifier: 13:62:28:B1:F2:FC:E7:F0:07:FE:E2:B4:87:ED:3E:6B:A7:04:9B:5C
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019D9A071E48B8F1C189B04E563CDD78CB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0F6E
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: 4wk9G6gIn4aYwuhM1IHla1F3g_o.roa (hash: zRDXNJfCkrvxLeiW37gj5jm7Vy6uGsNGYEbIgmJIKNY=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: BHe054Ny80aSyFpFEvCYcbL1kizm+jwcD1SzvMN/Xo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1e:48:b8:f1:c1:89:b0:4e:56:3c:dd:78:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=136228b1f2fce7f007fee2b487ed3e6ba7049b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:05:2c:5b:5b:58:1f:b3:4c:d8:94:b4:b0:
df:d4:a6:52:65:44:7c:10:5c:ff:cb:58:6e:94:df:
82:48:54:a5:a2:e6:4a:2a:6b:75:fa:e4:47:ba:2b:
40:c8:88:1e:e7:35:51:3c:27:85:04:32:88:e3:e8:
b8:b4:03:7f:5f:0c:88:58:68:98:3a:92:90:12:51:
52:d8:08:7c:91:3d:fd:c6:fd:bd:cc:10:46:27:5d:
38:1f:0e:fb:1f:bf:2b:1d:de:93:88:b5:d2:3c:20:
bb:62:61:be:3b:3d:24:f8:b1:04:67:40:7d:a6:dc:
d4:65:b7:94:74:d7:b6:8c:a2:8c:d9:c3:8a:ef:03:
49:a6:e1:81:29:c3:be:52:42:99:aa:de:99:3e:d3:
be:b6:1d:c6:74:f8:50:81:e4:ec:c2:f0:f3:13:41:
a8:6a:8d:09:a8:7b:39:0f:fe:80:2b:91:82:e2:d9:
59:e5:75:91:9f:cf:c5:84:c6:76:67:a5:09:eb:4e:
af:f1:03:14:cc:19:6c:15:f9:3e:96:d9:fd:37:18:
08:3d:25:2f:95:a4:ad:32:f2:12:47:8b:96:ee:06:
2e:14:78:3e:79:35:c0:00:53:57:0c:ef:4e:17:41:
37:b7:78:34:d9:a1:b9:40:77:7d:93:3d:14:f1:8e:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:28:B1:F2:FC:E7:F0:07:FE:E2:B4:87:ED:3E:6B:A7:04:9B:5C
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5d:8a:d9:3f:1b:2a:e8:09:6b:7b:96:a8:01:ab:5d:24:10:
5c:36:52:f2:ec:4e:db:b8:c6:11:49:f5:a8:63:61:40:22:bb:
1b:2a:47:3f:0b:23:90:fa:d0:2c:68:96:07:0b:60:53:d2:7e:
ff:f2:b6:a7:79:f6:82:57:7f:fe:62:ce:83:e7:81:aa:14:85:
e2:25:ba:26:5c:66:e0:d9:fa:d0:2f:86:11:a2:0d:19:3a:1d:
9f:c4:fc:bc:72:26:60:5e:ce:b3:3f:63:56:18:64:b4:c7:16:
b9:4a:30:b4:b4:92:11:4a:b2:44:d3:76:19:1c:fc:f1:13:51:
cd:fc:ac:c0:ba:92:ed:e3:bd:9a:b4:a5:e9:0a:4a:8c:5d:03:
31:bd:3b:6a:69:a8:a5:ff:0d:47:aa:3f:dc:36:a0:e1:05:88:
91:29:b5:0d:1e:ea:1b:cf:f6:7b:d3:7d:24:5b:50:ef:5a:ec:
36:18:69:ed:7f:e7:9b:8b:f6:6e:5c:e3:2c:37:ee:dc:27:3e:
8b:fc:93:49:a5:bb:6a:a4:56:f6:d8:60:61:bd:ff:74:5f:7d:
76:51:97:e8:95:de:3d:20:85:97:20:08:5a:85:08:f8:4d:58:
9a:06:c3:4d:0e:7f:13:57:18:7a:ce:9c:1f:07:3e:ed:e4:f1:
06:de:f7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBx5IuPHBibBOVjzdeMtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0
Y2UxNDcwHhcNMjYwNDE3MDYwMDUwWhcNMjYwNDE4MDYwMDUwWjAzMTEwLwYDVQQD
EygxMzYyMjhiMWYyZmNlN2YwMDdmZWUyYjQ4N2VkM2U2YmE3MDQ5YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKcFLFtbWB+zTNiUtLDf1KZSZUR8
EFz/y1hulN+CSFSlouZKKmt1+uRHuitAyIge5zVRPCeFBDKI4+i4tAN/XwyIWGiY
OpKQElFS2Ah8kT39xv29zBBGJ104Hw77H78rHd6TiLXSPCC7YmG+Oz0k+LEEZ0B9
ptzUZbeUdNe2jKKM2cOK7wNJpuGBKcO+UkKZqt6ZPtO+th3GdPhQgeTswvDzE0Go
ao0JqHs5D/6AK5GC4tlZ5XWRn8/FhMZ2Z6UJ606v8QMUzBlsFfk+ltn9NxgIPSUv
laStMvISR4uW7gYuFHg+eTXAAFNXDO9OF0E3t3g02aG5QHd9kz0U8Y6b+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNiKLHy/OfwB/7itIftPmunBJtcMB8GA1UdIwQY
MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt
NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz
LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkl2K2T8b
KugJa3uWqAGrXSQQXDZS8uxO27jGEUn1qGNhQCK7GypHPwsjkPrQLGiWBwtgU9J+
//K2p3n2gld//mLOg+eBqhSF4iW6Jlxm4Nn60C+GEaINGTodn8T8vHImYF7Osz9j
VhhktMcWuUowtLSSEUqyRNN2GRz88RNRzfyswLqS7eO9mrSl6QpKjF0DMb07ammo
pf8NR6o/3Dag4QWIkSm1DR7qG8/2e9N9JFtQ71rsNhhp7X/nm4v2blzjLDfu3Cc+
i/yTSaW7aqRW9thgYb3/dF99dlGX6JXePSCFlyAIWoUI+E1YmgbDTQ5/E1cYes6c
Hwc+7eTxBt737Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:35 2026 by rpki-client