Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: 9IkUNvwH2RPIA5cqQ8IKk3vpkbVILAnF/4/zq1UyYJM=
Subject key identifier: 5A:C2:00:A1:B4:51:01:C4:1A:04:F6:10:AC:CC:45:46:43:B8:1F:C0
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 019D996236247BFCBA48420A93F51034BEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 187C
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: konyG3wRd-9i2JxpDmlDMCcy52k.roa (hash: 86FDIPp0O4UJXQA6vPE/wehrfqe3i/KwXCUD7kRjVEo=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: Z8oDsV0I1Tgq28zOkSxWjcdYvSqRgYviUGvsLXphip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:36:24:7b:fc:ba:48:42:0a:93:f5:10:34:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=5ac200a1b45101c41a04f610accc454643b81fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:de:59:98:95:47:86:75:37:5b:ec:9a:4d:
48:87:45:05:58:8e:01:3a:09:fa:bd:cc:b2:b1:a9:
76:9c:32:63:7a:7d:d6:15:b5:e8:a5:46:5e:25:7f:
21:11:fb:03:37:a6:b8:2e:75:99:32:f0:9c:be:d5:
3f:f5:d6:fc:cf:aa:fb:ee:a6:71:c9:61:8a:02:e5:
41:7f:17:c8:22:01:82:26:72:fa:bd:3e:4b:2e:eb:
ed:cb:9e:cd:8c:2e:be:0e:b3:21:ab:12:82:8d:32:
fa:9a:90:4f:ac:29:f6:d4:2f:75:8a:33:81:cf:32:
14:f1:78:05:f2:3b:20:8c:17:07:82:5a:97:ca:a2:
db:cf:06:a9:ad:9a:85:a9:e5:26:be:6d:70:53:dc:
c9:ba:3b:47:04:49:17:ac:54:99:8a:ba:2d:d3:ed:
f9:2d:7f:8e:95:53:fe:80:2a:83:d1:fa:68:2e:8c:
d2:3a:74:bb:1b:d2:34:36:17:05:a6:32:e0:0e:de:
b7:57:66:4b:31:7d:1e:b0:44:63:5c:4a:ff:b3:c0:
a9:6b:aa:e3:bc:f0:9a:16:3a:85:f9:21:98:e1:37:
ac:cc:89:c6:07:fd:b3:d5:3a:82:99:ec:02:72:68:
6f:03:28:23:c4:97:ac:ba:da:46:90:f8:0c:0a:9e:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:00:A1:B4:51:01:C4:1A:04:F6:10:AC:CC:45:46:43:B8:1F:C0
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:1c:c2:32:50:8c:92:b8:47:a0:4c:40:96:96:69:e0:6f:
e9:44:7e:2d:67:f4:1b:01:e7:ee:22:e4:96:a1:07:3a:40:ea:
3c:61:80:48:61:32:79:9e:0f:06:56:c9:74:71:5f:47:4c:cf:
f9:39:6b:ec:03:97:3b:7b:f8:77:96:6e:dc:70:a5:e6:9f:cd:
bc:c5:1a:fa:0d:98:ff:51:04:4a:89:ed:e6:a3:59:ed:70:b2:
86:7f:6b:e7:a5:94:79:7a:a6:66:72:d3:35:06:c1:69:e0:ce:
f9:ec:6f:1a:db:29:95:74:4b:a5:29:60:70:1b:8d:88:27:46:
73:97:01:20:f1:dd:07:39:4e:60:78:01:52:68:7c:1b:bc:f7:
76:f1:18:32:bf:e3:92:a2:6f:e3:6f:1c:69:e8:c3:39:25:a4:
4b:ab:b6:59:bf:3b:4d:f6:ad:7b:16:d6:af:db:6f:0d:6b:a3:
a5:66:be:b3:7c:08:a6:86:bf:4f:9a:da:61:13:de:95:3b:b1:
b0:3f:fe:d9:9f:fd:6a:be:87:9f:4f:10:44:1c:7b:a5:7c:4c:
a1:9c:31:84:c8:06:e5:5a:c3:f8:ce:ff:c3:b3:08:42:ec:8b:
5f:eb:b2:fc:04:14:3a:fc:84:73:1b:2c:a2:3d:8d:d8:ec:f1:
05:aa:98:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjYke/y6SEIKk/UQNL6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh
NjM0NDIwHhcNMjYwNDE3MDMwMDQzWhcNMjYwNDE4MDMwMDQzWjAzMTEwLwYDVQQD
Eyg1YWMyMDBhMWI0NTEwMWM0MWEwNGY2MTBhY2NjNDU0NjQzYjgxZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3izeWZiVR4Z1N1vsmk1Ih0UFWI4B
Ogn6vcyysal2nDJjen3WFbXopUZeJX8hEfsDN6a4LnWZMvCcvtU/9db8z6r77qZx
yWGKAuVBfxfIIgGCJnL6vT5LLuvty57NjC6+DrMhqxKCjTL6mpBPrCn21C91ijOB
zzIU8XgF8jsgjBcHglqXyqLbzwaprZqFqeUmvm1wU9zJujtHBEkXrFSZirot0+35
LX+OlVP+gCqD0fpoLozSOnS7G9I0NhcFpjLgDt63V2ZLMX0esERjXEr/s8Cpa6rj
vPCaFjqF+SGY4TeszInGB/2z1TqCmewCcmhvAygjxJesutpGkPgMCp524wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrCAKG0UQHEGgT2EKzMRUZDuB/AMB8GA1UdIwQY
MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt
ZDgxOTc5NGEzMmEzLzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz
LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVkcwjJQ
jJK4R6BMQJaWaeBv6UR+LWf0GwHn7iLklqEHOkDqPGGASGEyeZ4PBlbJdHFfR0zP
+Tlr7AOXO3v4d5Zu3HCl5p/NvMUa+g2Y/1EESont5qNZ7XCyhn9r56WUeXqmZnLT
NQbBaeDO+exvGtsplXRLpSlgcBuNiCdGc5cBIPHdBzlOYHgBUmh8G7z3dvEYMr/j
kqJv428caejDOSWkS6u2Wb87TfatexbWr9tvDWujpWa+s3wIpoa/T5raYRPelTux
sD/+2Z/9ar6Hn08QRBx7pXxMoZwxhMgG5VrD+M7/w7MIQuyLX+uy/AQUOvyEcxss
oj2N2OzxBaqYcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:12 2026 by rpki-client