Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier: miqTqa/CY2iq1m0SmuN1dREUzXe0Ia5mspMzMCdhdoU=
Subject key identifier: 6A:B6:34:A2:30:83:47:21:52:E7:B6:80:95:53:15:4F:48:3C:4C:09
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer: /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial: 019CAD59963DEF2A32D5A6BE254EF0A66045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number: 1817
Signing time: Mon 02 Mar 2026 07:00:55 +0000
Manifest this update: Mon 02 Mar 2026 07:00:55 +0000
Manifest next update: Tue 03 Mar 2026 07:00:55 +0000
Files and hashes: 1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: C3yUT0J9WWwgJOwt1CZDdFLv4SOAPboHpPyKZReptdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:96:3d:ef:2a:32:d5:a6:be:25:4e:f0:a6:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
Validity
Not Before: Mar 2 07:00:55 2026 GMT
Not After : Mar 3 07:00:55 2026 GMT
Subject: CN=6ab634a23083472152e7b6809553154f483c4c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:36:f9:14:eb:18:bb:76:76:dc:b3:e5:10:
90:59:80:21:c9:99:10:9d:d0:a0:14:cf:e6:36:9d:
96:bf:d4:df:de:3b:5f:46:29:0c:d5:d8:ae:2a:87:
e3:df:af:27:d5:41:37:33:4c:9b:bf:a8:7d:86:10:
9f:44:6b:01:81:21:9c:84:ae:7e:dd:6e:78:a1:bf:
93:95:77:b9:44:ef:ab:3b:d8:c9:fd:9a:41:c9:cd:
59:96:44:08:0c:3d:0e:54:f4:f0:03:a6:7d:01:1e:
1f:a0:8e:c3:5b:2f:a6:6d:92:c5:2b:74:8b:1a:b3:
8e:95:97:1a:c4:e9:0e:4a:a7:a6:a9:16:e6:ad:62:
1b:5f:50:11:de:ed:05:25:aa:0d:c3:b7:b5:59:78:
4d:d7:70:7b:c3:ed:82:91:b7:64:07:77:58:56:5d:
94:f2:b7:f4:dd:a2:7c:03:cf:f5:fd:15:dd:4c:eb:
19:d7:1a:d5:c4:03:3e:50:01:69:a4:fd:df:00:a6:
66:bb:82:c4:88:c5:67:40:1b:a5:6f:38:49:8b:ac:
af:9c:27:f2:c6:fb:3c:0f:84:0b:40:5b:4a:87:3a:
1d:99:f3:0d:51:01:8b:22:51:08:c7:ad:53:4d:f2:
78:f4:4b:fb:6c:d2:21:b4:3e:4d:67:11:0a:52:15:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B6:34:A2:30:83:47:21:52:E7:B6:80:95:53:15:4F:48:3C:4C:09
X509v3 Authority Key Identifier:
keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:40:6f:b6:5c:ee:44:90:c8:c6:c7:1c:32:38:66:1d:ea:
46:45:ac:d8:05:51:26:6b:fe:5c:55:8a:74:a2:ef:fe:08:6e:
e4:09:8b:2d:bd:c5:ea:d1:59:e1:0a:11:67:42:4d:d8:0b:be:
a8:05:44:7c:41:62:69:b7:fd:2a:9d:09:b2:1b:7c:70:29:45:
da:53:4d:92:78:3e:8c:9f:62:88:c8:dd:65:17:e5:a5:11:ea:
5e:4f:f5:32:49:f8:2e:fd:21:7d:6b:6a:45:cd:a2:e8:a8:7c:
79:36:10:7b:f9:9f:69:f7:b5:e3:db:a6:c6:2a:5c:94:07:c9:
5c:0b:9c:2d:5a:81:4e:ec:48:a8:a0:fa:12:b2:15:20:8f:32:
8c:9f:4e:d4:14:53:0d:ed:98:53:64:ce:2c:ff:9e:73:70:16:
de:dc:3e:c5:75:ae:3d:6d:26:d4:73:a8:7a:46:10:92:d4:11:
fc:bc:96:a2:4a:47:26:84:eb:98:6d:cf:15:9c:2b:3a:42:ae:
0e:e1:dd:99:df:59:9e:c6:2f:36:76:d6:ca:2e:2f:7a:5a:a0:
46:ab:4b:38:3b:ac:d2:d5:66:f1:a1:f6:11:6b:92:d2:27:c2:
29:ca:a9:e0:35:6a:d1:7c:3d:bc:fd:da:4c:65:fc:79:62:11:
80:b9:02:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZY97yoy1aa+JU7wpmBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmUzMTZjOTgzODA0YzI1MDFlY2M1YWJlYTUzYTJhODNi
NTczMjQwHhcNMjYwMzAyMDcwMDU1WhcNMjYwMzAzMDcwMDU1WjAzMTEwLwYDVQQD
Eyg2YWI2MzRhMjMwODM0NzIxNTJlN2I2ODA5NTUzMTU0ZjQ4M2M0YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l02+RTrGLt2dtyz5RCQWYAhyZkQ
ndCgFM/mNp2Wv9Tf3jtfRikM1diuKofj368n1UE3M0ybv6h9hhCfRGsBgSGchK5+
3W54ob+TlXe5RO+rO9jJ/ZpByc1ZlkQIDD0OVPTwA6Z9AR4foI7DWy+mbZLFK3SL
GrOOlZcaxOkOSqemqRbmrWIbX1AR3u0FJaoNw7e1WXhN13B7w+2CkbdkB3dYVl2U
8rf03aJ8A8/1/RXdTOsZ1xrVxAM+UAFppP3fAKZmu4LEiMVnQBulbzhJi6yvnCfy
xvs8D4QLQFtKhzodmfMNUQGLIlEIx61TTfJ49Ev7bNIhtD5NZxEKUhV5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq2NKIwg0chUue2gJVTFU9IPEwJMB8GA1UdIwQY
MBaAFJVuMWyYOATCUB7MWr6lOiqDtXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQt
Mzk2ZmNkYTY0OTBjLzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQtMzk2ZmNkYTY0OTBj
LzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEJAb7Zc
7kSQyMbHHDI4Zh3qRkWs2AVRJmv+XFWKdKLv/ghu5AmLLb3F6tFZ4QoRZ0JN2Au+
qAVEfEFiabf9Kp0Jsht8cClF2lNNkng+jJ9iiMjdZRflpRHqXk/1Mkn4Lv0hfWtq
Rc2i6Kh8eTYQe/mfafe149umxipclAfJXAucLVqBTuxIqKD6ErIVII8yjJ9O1BRT
De2YU2TOLP+ec3AW3tw+xXWuPW0m1HOoekYQktQR/LyWokpHJoTrmG3PFZwrOkKu
DuHdmd9ZnsYvNnbWyi4velqgRqtLODus0tVm8aH2EWuS0ifCKcqp4DVq0Xw9vP3a
TGX8eWIRgLkCng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:49 2026 by rpki-client