Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: wN+avLIyqa73UJtG2cBtCVEoq4b5PCsfm05RhpCvvuA=
Subject key identifier: F1:BC:17:D1:FE:82:6C:57:18:2D:47:5C:51:16:CD:3E:47:59:95:F4
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019D9AABE41CA3B3D9DE90308E433901C533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 147D
Signing time: Fri 17 Apr 2026 09:00:49 +0000
Manifest this update: Fri 17 Apr 2026 09:00:49 +0000
Manifest next update: Sat 18 Apr 2026 09:00:49 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: bJ/Wmth35TlJItI1TRds8QGC/8Xrv/RtPSOsfOuSxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e4:1c:a3:b3:d9:de:90:30:8e:43:39:01:c5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Apr 17 09:00:49 2026 GMT
Not After : Apr 18 09:00:49 2026 GMT
Subject: CN=f1bc17d1fe826c57182d475c5116cd3e475995f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:45:42:b2:40:e9:45:ba:ef:6e:8b:f9:fa:
1c:fb:07:a0:5e:0b:f6:8b:12:01:03:99:17:bb:47:
bb:72:9c:44:47:73:e1:4b:89:cf:aa:c1:4f:a1:c3:
75:3c:02:ab:69:ed:9c:01:47:0d:a1:26:95:24:be:
d8:d9:ca:3e:eb:86:3c:29:46:3d:8d:a5:e1:cf:aa:
d6:4e:8b:9e:95:70:ee:d1:2b:aa:52:d2:62:82:ba:
ee:09:19:3b:70:e1:a9:8e:53:98:d4:c8:09:1a:86:
a5:dc:cc:06:92:93:6c:e6:b3:de:94:d2:ec:93:55:
2c:4e:a6:1f:ab:f9:3f:f5:32:ed:f7:12:ab:d9:8a:
86:bb:b9:26:d0:4f:fa:a7:70:46:f1:b0:ad:59:93:
42:ac:fe:db:13:bf:1e:3a:d2:e4:22:9e:97:62:15:
3c:67:46:0c:30:f6:ad:a8:81:1c:31:c0:19:21:5d:
7f:db:86:73:99:26:7b:0c:e2:8b:54:a4:12:62:71:
84:7d:ee:77:29:40:bc:67:c9:1a:56:86:52:d3:0e:
2e:d8:1d:dc:c8:f9:3d:71:61:ef:40:0b:95:f2:ba:
b4:58:7f:12:6e:df:d7:00:70:13:04:ed:76:dd:02:
89:4c:9a:fb:01:07:f2:ed:10:f4:68:bf:51:93:c7:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:17:D1:FE:82:6C:57:18:2D:47:5C:51:16:CD:3E:47:59:95:F4
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:37:9d:b5:a4:cb:d8:39:c6:31:de:b7:f0:dd:cc:7c:0e:b5:
30:bb:e8:c7:29:4b:d7:05:37:00:71:dc:42:6a:09:b0:35:b3:
cc:22:cd:f4:b7:bd:7f:69:7d:c2:8f:aa:12:f5:8e:97:f5:89:
ba:75:7d:d4:a3:d2:30:d0:44:54:8a:8b:f5:20:b6:c1:d7:3c:
79:78:ae:e3:06:b1:2c:43:85:c6:39:41:4a:a3:a0:d9:1f:58:
fb:a4:e1:17:f0:2a:9e:86:a6:bd:fd:b4:aa:fa:8f:d9:85:5c:
5f:00:ba:f1:4a:bd:8d:94:aa:a4:fc:9d:c2:ad:46:aa:80:5f:
00:22:60:90:0b:99:ce:7a:4b:73:d2:c8:e2:c8:8a:64:31:7c:
d3:35:cf:92:71:2a:9e:81:67:67:bf:84:89:af:08:1e:b6:a6:
a5:ec:82:f7:1f:b1:ea:0e:45:30:69:d3:65:76:8b:e7:e3:52:
b5:15:fa:86:ef:db:e3:aa:09:e2:e2:2f:28:f9:31:b5:5e:44:
20:42:39:fb:f9:0a:ae:e7:74:24:20:6c:c9:cc:1c:84:1a:82:
12:d1:dd:46:c1:76:df:31:ff:98:9c:df:79:28:6a:e1:81:d2:
6b:96:14:ca:d0:b6:a7:4a:16:35:c9:ab:81:69:19:74:61:4b:
f9:7a:bb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq+Qco7PZ3pAwjkM5AcUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjYwNDE3MDkwMDQ5WhcNMjYwNDE4MDkwMDQ5WjAzMTEwLwYDVQQD
EyhmMWJjMTdkMWZlODI2YzU3MTgyZDQ3NWM1MTE2Y2QzZTQ3NTk5NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+lFQrJA6UW6726L+foc+wegXgv2
ixIBA5kXu0e7cpxER3PhS4nPqsFPocN1PAKrae2cAUcNoSaVJL7Y2co+64Y8KUY9
jaXhz6rWTouelXDu0SuqUtJigrruCRk7cOGpjlOY1MgJGoal3MwGkpNs5rPelNLs
k1UsTqYfq/k/9TLt9xKr2YqGu7km0E/6p3BG8bCtWZNCrP7bE78eOtLkIp6XYhU8
Z0YMMPatqIEcMcAZIV1/24ZzmSZ7DOKLVKQSYnGEfe53KUC8Z8kaVoZS0w4u2B3c
yPk9cWHvQAuV8rq0WH8Sbt/XAHATBO123QKJTJr7AQfy7RD0aL9Rk8d1aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG8F9H+gmxXGC1HXFEWzT5HWZX0MB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDedtaTL
2DnGMd638N3MfA61MLvoxylL1wU3AHHcQmoJsDWzzCLN9Le9f2l9wo+qEvWOl/WJ
unV91KPSMNBEVIqL9SC2wdc8eXiu4waxLEOFxjlBSqOg2R9Y+6ThF/Aqnoamvf20
qvqP2YVcXwC68Uq9jZSqpPydwq1GqoBfACJgkAuZznpLc9LI4siKZDF80zXPknEq
noFnZ7+Eia8IHrampeyC9x+x6g5FMGnTZXaL5+NStRX6hu/b46oJ4uIvKPkxtV5E
IEI5+/kKrud0JCBsycwchBqCEtHdRsF23zH/mJzfeShq4YHSa5YUytC2p0oWNcmr
gWkZdGFL+Xq7AA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:27 2026 by rpki-client