Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: b70QS3twGh1ntP/v1+0uZ6h/MYeD5aolhcrrkf0PUUY=
Subject key identifier: FC:8F:36:16:5F:E8:A6:52:08:15:9B:21:9E:0F:41:63:E1:9C:03:7E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A0C28D759DA3BE711B3E2BD6F33139836F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 1B3A
Signing time: Mon 21 Sep 2026 06:00:45 +0000
Manifest this update: Mon 21 Sep 2026 06:00:45 +0000
Manifest next update: Tue 22 Sep 2026 06:00:45 +0000
Files and hashes: 1: Oo01x8pERgWGLUwO9m5xfExXg9g.roa (hash: iSqQFbuWHpKMVbwARx0x5sxvGhMHq7DllvKbl8K+zMo=)
2: VlYJfL62zXlK9zhHkeRcXKHwzJw.roa (hash: pyF74z/76/0FbrDm7tHeWDaoslBZYA7e5eho0bYw5/4=)
3: W65vFxXKbxmq7dK_TAJxVeUdWHA.roa (hash: yqxtHV/CslpZBPyeOdQKLmW4Iyq5xnMKwuGrDGPLQyQ=)
4: bgVdDIP4FIow1zAwSao7be6KrC8.roa (hash: 8F5clBuL/Te3i0D4X6PaEO16p9rv+ETHYqT2HNqrKbQ=)
5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: KTCjYHSrMJaz4rsL43I7g3xLAu0EKAdMYqNF1lECf/E=)
6: q2983OPzklakgSCjeiVFDoK69Xs.roa (hash: sQVFXTJ4NvpmpUw5zr/gtuq6d3FLh30FaP1gqDZKaWI=)
7: r0mR3JdsSHjQijRrm4Pcq7lgM58.roa (hash: s1x3KCynDraX05aiffgCwXTC5LKE3qCWa29JhXg/r4M=)
8: xkh-HA8JIqHvPIH5H2s9TrhN9FM.roa (hash: yD4AUqZznGBBTnerrmGNIhz4MlxBSwQeUlD2elXSFEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:75:9d:a3:be:71:1b:3e:2b:d6:f3:31:39:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 21 06:00:45 2026 GMT
Not After : Sep 22 06:00:45 2026 GMT
Subject: CN=fc8f36165fe8a65208159b219e0f4163e19c037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:2c:83:30:4b:c4:00:1a:9e:6a:69:ae:1c:
a8:69:c3:6e:ce:5e:70:7f:72:65:4c:c3:f1:ad:38:
b2:57:3a:52:be:6b:14:c2:94:c8:2f:8c:0a:19:c1:
c2:1f:52:64:a9:96:b5:5f:a3:35:03:23:dc:a6:1f:
7d:72:62:7a:8f:d2:1b:6d:2b:67:17:70:45:fa:19:
71:0a:cf:83:d5:e2:e6:ea:ff:a6:90:b4:cd:78:0c:
fe:89:d5:aa:51:ca:c7:0b:3b:a7:b4:ce:39:d5:f9:
8b:8e:2c:91:b6:e6:2b:a3:1c:e1:05:59:d5:c6:cb:
1a:fa:30:6a:06:31:33:68:d9:98:a5:cc:c6:c6:52:
46:3f:d8:5c:49:a0:cd:6f:3c:ae:aa:ee:a4:24:9b:
d2:07:30:af:2c:59:a2:10:85:69:b9:30:68:67:d2:
87:25:63:6e:2d:e2:55:db:50:56:1b:eb:f7:65:de:
68:27:e6:ac:24:3a:c8:94:71:53:6a:6b:a1:18:76:
21:a2:06:ac:5c:0f:67:29:83:d3:8b:72:a6:e1:22:
40:0a:04:88:e8:a6:18:9e:d4:f5:96:c6:8e:e3:d7:
0c:b9:a9:80:f0:5f:a2:5e:d5:ee:df:a5:67:1b:4e:
86:30:95:ce:e7:fb:bb:b7:40:b4:a7:cb:fb:15:64:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:36:16:5F:E8:A6:52:08:15:9B:21:9E:0F:41:63:E1:9C:03:7E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:68:0d:60:89:5c:e2:b2:62:5e:00:94:c2:09:f4:90:03:9c:
e8:1c:3f:59:92:68:a0:f0:fb:b5:b5:f7:32:e1:a6:cd:1c:0b:
da:1d:09:b3:64:82:b5:75:2e:4e:91:52:c7:68:1b:04:40:61:
f2:ff:5d:7c:9c:60:df:61:06:a4:ec:00:3c:63:14:cd:a4:8f:
1f:ca:ea:9a:8c:0f:6a:72:58:ba:b2:ac:7a:47:31:b9:50:e4:
35:c6:37:00:64:19:04:32:46:11:b3:a4:29:2c:cb:8d:8a:df:
70:66:a5:5d:bd:44:28:2f:be:a6:7e:75:aa:22:53:6c:c2:67:
68:7e:e2:85:f5:48:96:bb:6b:24:41:af:e6:f7:8d:fc:8b:52:
20:a8:ad:e7:f3:cd:db:b2:c0:ad:e5:42:5a:7c:68:a3:28:e3:
5e:ab:cd:23:75:91:dd:26:33:bd:25:3c:09:90:1d:a6:b3:2f:
65:b9:49:34:27:60:0e:66:31:b5:3c:11:c6:f1:1f:d8:3c:7d:
67:b7:8e:f1:8b:92:17:6a:5c:d4:a3:cc:4e:b3:f5:9a:cc:8f:
b3:d9:bb:26:1e:54:25:89:e5:f7:f2:2c:5b:6c:75:10:1d:0b:
a5:ec:e7:cf:85:ba:9c:e0:9e:67:2c:28:ba:14:87:6d:83:df:
04:37:57:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjXWdo75xGz4r1vMxOYNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwOTIxMDYwMDQ1WhcNMjYwOTIyMDYwMDQ1WjAzMTEwLwYDVQQD
EyhmYzhmMzYxNjVmZThhNjUyMDgxNTliMjE5ZTBmNDE2M2UxOWMwMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRUsgzBLxAAanmpprhyoacNuzl5w
f3JlTMPxrTiyVzpSvmsUwpTIL4wKGcHCH1JkqZa1X6M1AyPcph99cmJ6j9IbbStn
F3BF+hlxCs+D1eLm6v+mkLTNeAz+idWqUcrHCzuntM451fmLjiyRtuYroxzhBVnV
xssa+jBqBjEzaNmYpczGxlJGP9hcSaDNbzyuqu6kJJvSBzCvLFmiEIVpuTBoZ9KH
JWNuLeJV21BWG+v3Zd5oJ+asJDrIlHFTamuhGHYhogasXA9nKYPTi3Km4SJACgSI
6KYYntT1lsaO49cMuamA8F+iXtXu36VnG06GMJXO5/u7t0C0p8v7FWSwIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyPNhZf6KZSCBWbIZ4PQWPhnAN+MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2gNYIlc
4rJiXgCUwgn0kAOc6Bw/WZJooPD7tbX3MuGmzRwL2h0Js2SCtXUuTpFSx2gbBEBh
8v9dfJxg32EGpOwAPGMUzaSPH8rqmowPanJYurKsekcxuVDkNcY3AGQZBDJGEbOk
KSzLjYrfcGalXb1EKC++pn51qiJTbMJnaH7ihfVIlrtrJEGv5veN/ItSIKit5/PN
27LAreVCWnxooyjjXqvNI3WR3SYzvSU8CZAdprMvZblJNCdgDmYxtTwRxvEf2Dx9
Z7eO8YuSF2pc1KPMTrP1msyPs9m7Jh5UJYnl9/IsW2x1EB0Lpeznz4W6nOCeZywo
uhSHbYPfBDdXDA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:04:53 2026 by rpki-client