Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: fHloKosi3rwK7Gb0Fqw06CqiDcmPeC33SLsoO3J3tRA=
Subject key identifier: CF:BD:78:C4:91:2B:74:89:E1:72:0C:B2:92:63:5A:C3:81:48:BF:A9
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019D9A3E531C1973DA2F7B83BF40CB6EBFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 07B9
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: 5/16b5PmblpRaoZj23ebxG/fGQAAXmfmVrA5n57ngAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:53:1c:19:73:da:2f:7b:83:bf:40:cb:6e:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=cfbd78c4912b7489e1720cb292635ac38148bfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:82:ad:df:f4:33:47:57:85:30:40:36:62:
99:c2:6a:a3:ed:95:0a:85:52:29:f0:09:af:b0:ac:
14:c1:92:c4:ae:60:9c:e4:e7:db:18:5b:01:60:a5:
6e:47:73:59:3e:ca:dd:d4:b3:aa:53:22:66:83:9d:
79:63:57:ed:32:2c:06:94:41:31:68:76:00:90:29:
a5:28:ea:49:be:0d:af:d3:b3:36:0f:2c:81:4e:44:
91:91:ad:1e:db:4f:f4:00:5d:7c:29:a0:81:b0:2e:
7b:dd:80:db:0d:57:11:50:3b:f7:e1:43:65:c3:9e:
59:86:05:ee:4e:9b:f0:8d:f7:c6:b8:f4:f2:44:47:
9b:68:9a:76:02:93:51:5c:62:1e:26:9d:fc:3d:6a:
40:ed:25:4e:f0:5f:4b:c3:48:3a:7c:7d:09:52:0a:
0c:fb:99:97:ef:a8:b7:bf:e1:1b:4d:83:df:a2:9b:
7a:86:46:ce:32:69:e0:2a:52:ff:bd:fc:4e:98:f5:
9f:f9:11:83:1b:ed:3d:82:ba:9a:eb:aa:c7:a0:9e:
40:a3:ac:20:cc:91:b3:27:69:d1:ae:6d:62:e0:f1:
c7:21:76:5a:1e:a8:8e:c9:65:54:02:d0:6d:93:05:
19:32:10:2c:13:2c:e0:0b:f4:73:78:87:c6:80:94:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:78:C4:91:2B:74:89:E1:72:0C:B2:92:63:5A:C3:81:48:BF:A9
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:5f:ef:5b:b6:e1:69:c8:3b:6a:c0:87:0a:f4:29:69:81:
7f:70:af:49:12:69:09:87:76:0b:54:92:3b:ea:e1:f1:37:58:
a1:a6:b7:40:58:50:6c:cd:9d:13:4b:f6:e8:08:3e:2f:c4:5e:
18:19:07:4a:f5:3e:18:52:41:0b:aa:c5:e7:07:29:1f:a1:af:
15:0a:99:05:0f:34:f4:3a:44:8c:78:33:6b:a0:98:16:be:03:
33:37:cf:c3:7b:ae:3d:34:a2:9a:43:5c:ec:0b:a0:29:40:4e:
72:aa:94:0c:84:2e:a4:5d:7f:f8:77:06:d2:fb:04:71:f2:94:
eb:25:71:f7:e6:a7:ad:86:a9:c7:00:fb:92:35:ba:50:77:f3:
18:86:8c:34:4d:27:6f:f5:35:e9:1c:10:39:3c:c7:a5:c4:9e:
78:e5:ce:f0:48:bd:52:3a:ef:82:b2:00:c7:9f:cf:50:01:ce:
c3:73:34:6b:12:76:be:01:21:16:31:d8:6c:26:d6:8b:cb:75:
ff:62:e9:d3:05:c2:ac:fa:05:94:53:0c:cb:5b:e4:c2:7e:3e:
64:cf:1a:84:29:8d:65:6a:ff:c1:8c:d8:f4:69:04:45:0f:6e:
39:c7:5e:6a:d1:94:e8:d8:bc:94:89:72:57:31:93:ba:73:b4:
6e:ca:a3:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPlMcGXPaL3uDv0DLbr/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjYwNDE3MDcwMTA4WhcNMjYwNDE4MDcwMTA4WjAzMTEwLwYDVQQD
EyhjZmJkNzhjNDkxMmI3NDg5ZTE3MjBjYjI5MjYzNWFjMzgxNDhiZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIKCrd/0M0dXhTBANmKZwmqj7ZUK
hVIp8AmvsKwUwZLErmCc5OfbGFsBYKVuR3NZPsrd1LOqUyJmg515Y1ftMiwGlEEx
aHYAkCmlKOpJvg2v07M2DyyBTkSRka0e20/0AF18KaCBsC573YDbDVcRUDv34UNl
w55ZhgXuTpvwjffGuPTyREebaJp2ApNRXGIeJp38PWpA7SVO8F9Lw0g6fH0JUgoM
+5mX76i3v+EbTYPfopt6hkbOMmngKlL/vfxOmPWf+RGDG+09grqa66rHoJ5Ao6wg
zJGzJ2nRrm1i4PHHIXZaHqiOyWVUAtBtkwUZMhAsEyzgC/RzeIfGgJREFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+9eMSRK3SJ4XIMspJjWsOBSL+pMB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+Zf71u2
4WnIO2rAhwr0KWmBf3CvSRJpCYd2C1SSO+rh8TdYoaa3QFhQbM2dE0v26Ag+L8Re
GBkHSvU+GFJBC6rF5wcpH6GvFQqZBQ809DpEjHgza6CYFr4DMzfPw3uuPTSimkNc
7AugKUBOcqqUDIQupF1/+HcG0vsEcfKU6yVx9+anrYapxwD7kjW6UHfzGIaMNE0n
b/U16RwQOTzHpcSeeOXO8Ei9UjrvgrIAx5/PUAHOw3M0axJ2vgEhFjHYbCbWi8t1
/2Lp0wXCrPoFlFMMy1vkwn4+ZM8ahCmNZWr/wYzY9GkERQ9uOcdeatGU6Ni8lIly
VzGTunO0bsqjpA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:39 2026 by rpki-client