Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: vGYApg4t3GKvNXk74lqjMglyofW9P7ISQqQ2VLd9Xnc=
Subject key identifier: F0:FF:EB:A9:67:19:D2:4B:CC:F7:9A:41:9E:1C:C7:D8:EF:FB:4A:43
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 019CAC471B4DF4AF1319B3DA666DF72FD725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:07 +0000
Manifest this update: Mon 02 Mar 2026 02:01:07 +0000
Manifest next update: Tue 03 Mar 2026 02:01:07 +0000
Files and hashes: 1: NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa (hash: l2Db7QyGTQEhegInLfDc9J67ROlsj8aNjEngOYZ1S48=)
2: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: FPjSxPo22PDkZKCOGcfGS0EsiAVzcnCQ8BRXO8f509Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1b:4d:f4:af:13:19:b3:da:66:6d:f7:2f:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Mar 2 02:01:07 2026 GMT
Not After : Mar 3 02:01:07 2026 GMT
Subject: CN=f0ffeba96719d24bccf79a419e1cc7d8effb4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:75:67:3d:dc:89:be:94:bf:05:9b:bc:39:
aa:0e:4a:a7:3e:0d:c4:8e:96:3d:cc:ec:9c:a4:37:
fb:d9:86:61:06:64:8f:a6:91:69:53:82:a8:01:a8:
0b:da:ee:4b:95:d0:61:1b:82:1b:84:72:6a:97:94:
95:77:43:7a:37:53:eb:28:cd:f8:b1:9b:02:b7:b3:
f8:0e:f5:ff:ce:3e:42:d6:59:12:18:40:a5:68:21:
aa:35:75:cd:d3:0b:94:ea:d1:07:14:f9:ca:7b:d0:
65:11:69:56:10:d3:7c:1f:7d:ba:27:15:e0:cf:61:
3e:32:e6:6d:7b:3a:da:81:70:16:83:f3:09:34:21:
dd:3d:f3:e6:11:b6:97:6d:2e:02:60:fd:eb:7b:74:
00:45:5b:63:39:6c:a8:5b:f8:4c:3d:d7:ed:5f:99:
01:73:07:1c:2c:12:dc:f6:29:94:9e:1f:07:13:f0:
75:09:e5:8b:71:d2:e8:42:be:24:e7:ec:d5:6b:2a:
e5:9e:1d:0a:b5:8a:0e:2f:e6:dc:9e:a2:cd:c4:4a:
29:a1:52:85:07:a1:9e:9c:8b:e5:a8:e9:e7:f7:de:
39:18:b6:c3:07:95:0f:08:d7:8a:ad:1a:cb:a6:43:
d6:af:73:09:2d:92:ea:3d:47:2c:e2:e9:1c:b3:00:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:EB:A9:67:19:D2:4B:CC:F7:9A:41:9E:1C:C7:D8:EF:FB:4A:43
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5e:7a:96:d1:ff:c8:e6:03:a8:a9:8a:e4:f8:11:16:ff:b6:
bd:4c:06:99:35:f9:88:23:5a:05:51:65:08:61:5d:36:94:69:
ed:93:19:cc:a8:7b:31:72:de:a3:df:ea:ff:60:aa:b1:60:a8:
2b:37:8d:04:0d:c6:af:f2:50:de:5d:2c:90:3d:34:f7:7a:97:
33:8e:9d:e4:17:c4:b9:60:e1:fb:37:f7:49:6e:e1:95:07:6a:
0e:8a:c5:3c:18:8c:a6:06:36:3c:fc:10:74:db:0e:21:ab:ae:
af:75:d0:60:97:94:d7:77:11:f6:dd:d5:cd:bf:70:30:73:00:
c8:e8:28:d1:17:73:cf:9d:70:db:dc:9b:d9:c0:5f:ca:4f:b5:
d1:69:60:a5:47:b7:e2:d8:7e:e2:c1:7d:af:9c:c8:44:97:c5:
77:48:2f:52:d7:b7:68:92:6b:d4:bf:23:22:b1:a3:f3:be:b0:
5b:e8:a5:3d:6d:e6:39:26:5d:18:19:2c:17:6b:38:71:e7:6f:
61:cc:10:7c:9e:6c:ec:13:b0:75:f1:ee:2b:8f:91:ca:b8:fb:
d3:b2:04:da:68:df:36:76:57:21:27:75:d8:77:55:77:fd:98:
ad:56:aa:bd:ed:56:15:de:81:54:5f:e2:09:ed:e2:05:a8:3e:
c0:f9:03:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxtN9K8TGbPaZm33L9clMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWNhNGUyYTBhMTgwZWIyZjI5Y2M4ODc0MGFhNzA3Yjg4
MjFkN2MwHhcNMjYwMzAyMDIwMTA3WhcNMjYwMzAzMDIwMTA3WjAzMTEwLwYDVQQD
EyhmMGZmZWJhOTY3MTlkMjRiY2NmNzlhNDE5ZTFjYzdkOGVmZmI0YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gp1Zz3cib6UvwWbvDmqDkqnPg3E
jpY9zOycpDf72YZhBmSPppFpU4KoAagL2u5LldBhG4IbhHJql5SVd0N6N1PrKM34
sZsCt7P4DvX/zj5C1lkSGEClaCGqNXXN0wuU6tEHFPnKe9BlEWlWENN8H326JxXg
z2E+MuZtezragXAWg/MJNCHdPfPmEbaXbS4CYP3re3QARVtjOWyoW/hMPdftX5kB
cwccLBLc9imUnh8HE/B1CeWLcdLoQr4k5+zVayrlnh0KtYoOL+bcnqLNxEopoVKF
B6GenIvlqOnn9945GLbDB5UPCNeKrRrLpkPWr3MJLZLqPUcs4ukcswBVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD/66lnGdJLzPeaQZ4cx9jv+0pDMB8GA1UdIwQY
MBaAFP5cpOKgoYDrLynMiHQKpwe4gh18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEt
NjhjMTA1ZDJmMGRiLzEvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEtNjhjMTA1ZDJmMGRi
LzEvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKV56ltH/
yOYDqKmK5PgRFv+2vUwGmTX5iCNaBVFlCGFdNpRp7ZMZzKh7MXLeo9/q/2CqsWCo
KzeNBA3Gr/JQ3l0skD0093qXM46d5BfEuWDh+zf3SW7hlQdqDorFPBiMpgY2PPwQ
dNsOIauur3XQYJeU13cR9t3Vzb9wMHMAyOgo0Rdzz51w29yb2cBfyk+10WlgpUe3
4th+4sF9r5zIRJfFd0gvUte3aJJr1L8jIrGj876wW+ilPW3mOSZdGBksF2s4cedv
YcwQfJ5s7BOwdfHuK4+Ryrj707IE2mjfNnZXISd12HdVd/2YrVaqve1WFd6BVF/i
Ce3iBag+wPkDDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:09 2026 by rpki-client