Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: 4T/Y3tCdjT06sRVY0LhdcnS7zPiUjepvX8bXopdQxkE=
Subject key identifier: 91:B5:8C:46:2C:8E:4D:14:D5:82:2A:99:BA:E2:D7:CB:19:A6:D7:0C
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 019D9A3EDE30C462BCFFE6822AD3B32DDDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 0602
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: GP7tdCBfrs0HZkobzjq96paF08GH34fLgB9JAC7tAxk=)
2: nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa (hash: BSCbUo+BwOOhYIZHjykMAuVC2rv0/uSGrGXGa+iP2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:de:30:c4:62:bc:ff:e6:82:2a:d3:b3:2d:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=91b58c462c8e4d14d5822a99bae2d7cb19a6d70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:7e:7c:79:41:e1:7c:4a:a2:b9:ce:9f:03:
ec:45:1d:ce:30:f0:fa:ca:0a:f6:84:87:92:72:dc:
bb:4a:7b:29:24:78:15:35:da:a8:19:8d:3b:94:37:
52:82:f2:44:c6:01:0c:fa:b6:ae:f7:2b:71:c8:6b:
ee:82:36:0b:d0:bd:e2:35:53:06:e9:3d:59:bc:33:
f7:3d:2c:0c:75:08:1c:32:94:c7:06:89:7d:f4:e8:
6c:cb:3d:81:88:a5:d6:3d:13:d8:e4:0a:77:ae:0b:
4e:66:17:52:9f:da:31:36:3e:86:25:52:ed:2c:fd:
3c:04:d3:d0:76:79:3d:d1:21:ff:c5:40:29:40:6b:
74:a0:95:4e:a1:2c:5e:b0:65:5b:f5:3c:48:58:01:
53:89:d8:02:c8:f3:28:5b:8f:68:d7:cb:5a:3f:7d:
88:d9:42:72:fc:a6:8a:85:9c:12:f0:69:f1:cc:f9:
e6:44:81:e8:9e:43:22:8e:8d:6e:f7:90:9b:09:79:
2c:b1:e4:14:34:db:e0:da:98:96:3d:09:51:df:90:
e1:ac:8c:2b:e0:04:7c:31:da:0e:73:ed:f8:ea:21:
3b:8a:af:63:d2:45:d1:24:67:25:f6:80:cf:20:45:
6d:59:d1:46:16:97:1a:22:20:01:2b:79:33:89:ed:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:8C:46:2C:8E:4D:14:D5:82:2A:99:BA:E2:D7:CB:19:A6:D7:0C
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:77:17:36:1c:c8:43:c7:18:25:35:0b:6a:1e:f1:b2:28:b1:
78:37:2c:f5:31:96:03:e8:d8:a3:33:2f:52:58:32:81:b1:21:
92:c8:58:30:b4:39:5e:e1:45:98:47:e1:51:2b:fd:de:fc:76:
81:4d:ec:29:be:bb:d9:3a:50:7f:05:82:50:95:4b:fa:f3:90:
6e:1f:f8:df:09:d3:29:81:2f:64:6e:24:b7:75:a4:75:0d:3f:
1a:f7:d2:d5:ae:82:cd:c2:6d:2d:0f:40:0d:c2:95:e7:5f:c3:
ef:7d:5b:fe:2d:91:fc:6a:58:b0:74:ca:45:09:e3:c4:a3:78:
f5:d8:62:d3:98:e0:07:77:c8:35:01:e8:e9:fe:91:6d:28:f1:
7c:9e:51:bc:68:11:99:c1:cd:3a:71:fa:91:da:c3:52:fc:37:
2a:08:cd:ef:1f:a3:88:8d:59:3d:b7:b0:50:c0:5f:47:8d:31:
98:e1:25:59:2c:33:00:4d:56:9a:af:69:bf:04:5b:f3:ea:97:
8e:8c:70:62:a9:b8:db:2d:37:41:ba:58:49:d2:c6:89:19:68:
28:af:81:b0:fb:20:27:38:1a:31:81:7f:a0:05:c3:5a:6b:52:
09:0d:cb:68:ab:d5:0b:71:50:92:1f:be:a5:c1:21:4f:92:e6:
aa:f3:99:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPt4wxGK8/+aCKtOzLd3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzZkYmI3Njk5NWI0OTUwYTg2YzVmMDdjYThkYjNlYjQ5
Njc4ZjYwHhcNMjYwNDE3MDcwMTQ0WhcNMjYwNDE4MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg5MWI1OGM0NjJjOGU0ZDE0ZDU4MjJhOTliYWUyZDdjYjE5YTZkNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuB+fHlB4XxKornOnwPsRR3OMPD6
ygr2hIeScty7SnspJHgVNdqoGY07lDdSgvJExgEM+rau9ytxyGvugjYL0L3iNVMG
6T1ZvDP3PSwMdQgcMpTHBol99Ohsyz2BiKXWPRPY5Ap3rgtOZhdSn9oxNj6GJVLt
LP08BNPQdnk90SH/xUApQGt0oJVOoSxesGVb9TxIWAFTidgCyPMoW49o18taP32I
2UJy/KaKhZwS8GnxzPnmRIHonkMijo1u95CbCXksseQUNNvg2piWPQlR35DhrIwr
4AR8MdoOc+346iE7iq9j0kXRJGcl9oDPIEVtWdFGFpcaIiABK3kzie0GFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG1jEYsjk0U1YIqmbri18sZptcMMB8GA1UdIwQY
MBaAFJV227dplbSVCobF8Hyo2z60lnj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQt
NjE4MDJkOWM5MzQ0LzEvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQtNjE4MDJkOWM5MzQ0
LzEvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3cXNhzI
Q8cYJTULah7xsiixeDcs9TGWA+jYozMvUlgygbEhkshYMLQ5XuFFmEfhUSv93vx2
gU3sKb672TpQfwWCUJVL+vOQbh/43wnTKYEvZG4kt3WkdQ0/GvfS1a6CzcJtLQ9A
DcKV51/D731b/i2R/GpYsHTKRQnjxKN49dhi05jgB3fINQHo6f6RbSjxfJ5RvGgR
mcHNOnH6kdrDUvw3KgjN7x+jiI1ZPbewUMBfR40xmOElWSwzAE1Wmq9pvwRb8+qX
joxwYqm42y03QbpYSdLGiRloKK+BsPsgJzgaMYF/oAXDWmtSCQ3LaKvVC3FQkh++
pcEhT5LmqvOZ3A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:37 2026 by rpki-client