Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: sFmHUYZm+9T6FVfS21GvG3R1eV3PcrEQhN56b2Gx6D8=
Subject key identifier: 3E:A1:21:75:E0:37:2D:C3:BA:BB:83:67:1A:EC:99:C9:09:4A:6D:1A
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019D9BBE350466B459E8EBD05C69FD58C01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0BA5
Signing time: Fri 17 Apr 2026 14:00:27 +0000
Manifest this update: Fri 17 Apr 2026 14:00:27 +0000
Manifest next update: Sat 18 Apr 2026 14:00:27 +0000
Files and hashes: 1: 1EZE1VFle3pJk-oWHPrHHxhMMXA.roa (hash: zAz64MVhsrxCuG6UwDUxcbTbEY8PQpGcwky1pjaIQ3o=)
2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: pG54oXRnaeCmyLxLdOZiFPZHkZfYV0+59vfEw1drqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:35:04:66:b4:59:e8:eb:d0:5c:69:fd:58:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Apr 17 14:00:27 2026 GMT
Not After : Apr 18 14:00:27 2026 GMT
Subject: CN=3ea12175e0372dc3babb83671aec99c9094a6d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:ec:18:5a:d5:85:58:16:7f:5f:12:5a:12:
b9:bf:63:76:3e:ee:bf:92:5a:54:6b:ec:75:9d:0f:
0e:9a:f5:7a:7d:01:c0:c2:ec:d3:7c:58:9c:ae:f6:
13:e8:4b:d4:b5:d2:fa:94:ea:84:de:ec:61:bc:9b:
57:bf:7d:d8:c0:e3:df:ab:f6:cd:f0:22:fc:26:f1:
34:a0:dd:00:de:5a:b4:f8:a0:62:d4:64:05:13:db:
4e:62:78:90:a1:ad:b3:5e:ba:8c:8e:7d:2e:23:eb:
5e:d8:31:6b:fe:8f:82:26:50:e6:db:7c:a2:28:79:
ed:25:d4:47:15:e5:42:9e:65:36:66:d1:45:ab:f0:
fd:3d:2c:f9:23:ba:99:64:93:26:e5:00:e9:e6:2c:
25:b2:94:7e:21:05:ca:ae:a6:f7:2b:03:33:1a:51:
98:83:f0:3a:09:44:7c:58:f6:ef:c7:03:5e:33:2a:
da:dd:ac:a6:14:44:0e:cb:09:4d:dd:32:c3:39:ba:
36:6b:eb:7c:02:17:68:0f:63:84:7d:67:91:a1:43:
4e:76:64:ca:e5:d2:36:22:1b:c4:cf:b5:f0:e1:bc:
d0:4c:4d:3a:11:a8:01:a0:f4:09:23:e5:87:28:09:
11:e4:67:18:7d:d0:fa:f8:d7:4f:ba:b2:c4:0d:55:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:21:75:E0:37:2D:C3:BA:BB:83:67:1A:EC:99:C9:09:4A:6D:1A
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:68:35:e4:1d:13:e6:ef:0b:c7:25:37:71:d6:58:7a:a4:24:
b2:13:49:03:b4:99:11:9a:21:6e:95:8f:db:a7:34:72:29:df:
97:8a:04:f6:02:79:4b:3b:af:31:c7:8e:9d:4c:1c:76:9b:26:
dc:3c:6c:d3:1f:00:9b:94:3f:50:c6:08:d8:ce:f7:aa:6e:3c:
78:23:fb:c8:5d:f9:4e:e8:0b:48:e3:29:e3:df:e0:3d:2c:bf:
f9:8b:89:e7:02:47:2f:9a:6f:82:88:b0:5f:62:83:cf:86:b0:
bc:fb:2f:a3:86:03:f0:77:bb:d3:f9:0c:86:a3:80:de:77:2a:
43:d7:bf:41:80:aa:6d:dd:e0:57:fb:21:d5:9c:09:12:2c:8f:
44:b8:69:88:67:8b:35:5f:0f:b8:5b:83:80:f1:2c:96:6b:04:
aa:21:bb:04:9c:83:a6:1c:fd:22:22:b2:38:41:43:d2:6b:7c:
e0:e9:01:cf:45:24:fd:1c:ec:b6:7d:fc:3f:48:9d:53:c0:43:
b6:7a:45:b1:f4:46:86:8e:20:d4:1d:68:a2:b7:28:b6:7e:b8:
60:13:1a:7e:5f:52:8f:e9:13:25:5e:6b:7d:7c:69:c4:91:a1:
d7:13:fa:79:a5:90:d1:df:ac:ba:b9:77:b0:16:40:91:dc:02:
45:06:f2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvjUEZrRZ6OvQXGn9WMAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjYwNDE3MTQwMDI3WhcNMjYwNDE4MTQwMDI3WjAzMTEwLwYDVQQD
EygzZWExMjE3NWUwMzcyZGMzYmFiYjgzNjcxYWVjOTljOTA5NGE2ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KDsGFrVhVgWf18SWhK5v2N2Pu6/
klpUa+x1nQ8OmvV6fQHAwuzTfFicrvYT6EvUtdL6lOqE3uxhvJtXv33YwOPfq/bN
8CL8JvE0oN0A3lq0+KBi1GQFE9tOYniQoa2zXrqMjn0uI+te2DFr/o+CJlDm23yi
KHntJdRHFeVCnmU2ZtFFq/D9PSz5I7qZZJMm5QDp5iwlspR+IQXKrqb3KwMzGlGY
g/A6CUR8WPbvxwNeMyra3aymFEQOywlN3TLDObo2a+t8AhdoD2OEfWeRoUNOdmTK
5dI2IhvEz7Xw4bzQTE06EagBoPQJI+WHKAkR5GcYfdD6+NdPurLEDVXfqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6hIXXgNy3DuruDZxrsmckJSm0aMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6mg15B0T
5u8LxyU3cdZYeqQkshNJA7SZEZohbpWP26c0cinfl4oE9gJ5SzuvMceOnUwcdpsm
3Dxs0x8Am5Q/UMYI2M73qm48eCP7yF35TugLSOMp49/gPSy/+YuJ5wJHL5pvgoiw
X2KDz4awvPsvo4YD8He70/kMhqOA3ncqQ9e/QYCqbd3gV/sh1ZwJEiyPRLhpiGeL
NV8PuFuDgPEslmsEqiG7BJyDphz9IiKyOEFD0mt84OkBz0Uk/Rzstn38P0idU8BD
tnpFsfRGho4g1B1oorcotn64YBMafl9Sj+kTJV5rfXxpxJGh1xP6eaWQ0d+surl3
sBZAkdwCRQbyvw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:24 2026 by rpki-client