Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: 4KrfsqylZXyUOx2aaOx4UW8Jl5rh42nHORwQtHDt+4M=
Subject key identifier: 5A:29:76:97:C1:28:EC:29:3F:D2:BA:95:8D:5F:AB:7D:8D:47:64:C1
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019D9B1A053D077547DFA8A183E8B94D44C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 170A
Signing time: Fri 17 Apr 2026 11:01:06 +0000
Manifest this update: Fri 17 Apr 2026 11:01:06 +0000
Manifest next update: Sat 18 Apr 2026 11:01:06 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: 2ZssaRzpuVDAdfW/DSnuWuffzhMLXiBZF0DYcWmE3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:05:3d:07:75:47:df:a8:a1:83:e8:b9:4d:44:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Apr 17 11:01:06 2026 GMT
Not After : Apr 18 11:01:06 2026 GMT
Subject: CN=5a297697c128ec293fd2ba958d5fab7d8d4764c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:4f:94:a0:e9:b2:e7:69:04:d4:dd:bf:ff:
3e:d4:2d:90:32:5a:51:c4:1a:70:6a:d8:e4:e7:81:
99:4b:fd:f6:a4:97:d4:1e:e9:7d:66:63:d4:5b:e6:
08:7f:39:82:d2:bf:24:1a:8f:8d:af:ef:e2:e1:ce:
3d:81:d9:d8:dd:02:fe:82:d3:c8:b9:03:8a:9f:43:
71:ca:f7:96:90:4e:7a:54:fc:ba:27:c2:ee:eb:5a:
61:9a:bb:bb:cc:90:a4:cb:ea:d6:d8:37:ba:53:e3:
22:10:56:3e:5e:e8:c8:d3:82:7a:be:a0:92:5a:8e:
7f:5a:f3:dd:48:2e:03:66:1a:d3:ad:3f:f9:3a:87:
29:9e:35:e9:37:62:68:01:f5:d9:0d:4a:a8:c5:08:
94:74:59:07:fd:6f:19:c5:28:b8:ef:48:f2:df:f1:
b5:50:65:73:15:19:ca:ec:8e:f9:1b:99:3d:5c:a7:
84:48:1a:4d:70:7c:7c:86:47:41:3a:f6:67:81:9d:
ce:f7:17:53:2c:f0:71:09:d3:5a:d9:e2:be:00:63:
66:35:82:19:d0:cf:87:35:11:21:de:4c:17:61:3e:
22:f9:ea:57:ef:9d:9e:d6:45:03:c3:9c:bd:9d:a6:
98:a0:eb:49:60:1d:4a:32:d1:1e:f4:1f:99:84:5b:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:76:97:C1:28:EC:29:3F:D2:BA:95:8D:5F:AB:7D:8D:47:64:C1
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:2a:08:56:d4:43:3a:6a:7e:c3:5c:e5:11:dd:f0:39:11:
61:f4:e6:0d:9a:33:1b:78:41:28:13:1d:b1:d4:39:7d:80:6b:
dc:7a:61:e8:ab:fe:c0:a4:38:e0:83:44:d9:64:7f:ca:47:5c:
54:b4:7f:e3:4b:93:e0:66:76:36:42:16:92:4f:03:34:ff:57:
5a:bf:84:85:9c:79:96:33:f8:28:cc:93:07:77:45:b1:6e:60:
49:c4:42:12:bc:12:9d:7d:33:b3:e3:cb:2c:0f:d0:7e:f6:31:
24:01:ac:d8:46:40:91:c5:43:19:b4:65:75:8d:61:a8:88:a3:
57:9a:67:bc:f8:74:72:74:85:63:85:78:ce:e0:32:2d:f0:62:
df:ee:e3:81:d8:bf:01:52:60:a3:3a:4a:1b:e0:96:a6:6a:2c:
18:cc:51:17:d3:31:45:2d:be:f2:5f:67:1b:f8:dc:5a:16:50:
c8:bc:9c:8f:1f:81:c4:ac:6d:21:25:33:3a:44:9b:05:ef:cb:
9a:a4:1e:bc:16:89:60:04:15:72:b8:b5:6c:c2:e4:ae:6c:b2:
c5:cc:de:32:b2:f5:d4:aa:44:50:6f:66:ed:e3:96:30:8d:fc:
86:b1:01:04:56:8e:38:da:32:9a:94:b6:94:36:ea:e4:02:1b:
2b:86:c3:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGgU9B3VH36ihg+i5TUTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjYwNDE3MTEwMTA2WhcNMjYwNDE4MTEwMTA2WjAzMTEwLwYDVQQD
Eyg1YTI5NzY5N2MxMjhlYzI5M2ZkMmJhOTU4ZDVmYWI3ZDhkNDc2NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohFPlKDpsudpBNTdv/8+1C2QMlpR
xBpwatjk54GZS/32pJfUHul9ZmPUW+YIfzmC0r8kGo+Nr+/i4c49gdnY3QL+gtPI
uQOKn0NxyveWkE56VPy6J8Lu61phmru7zJCky+rW2De6U+MiEFY+XujI04J6vqCS
Wo5/WvPdSC4DZhrTrT/5OocpnjXpN2JoAfXZDUqoxQiUdFkH/W8ZxSi470jy3/G1
UGVzFRnK7I75G5k9XKeESBpNcHx8hkdBOvZngZ3O9xdTLPBxCdNa2eK+AGNmNYIZ
0M+HNREh3kwXYT4i+epX752e1kUDw5y9naaYoOtJYB1KMtEe9B+ZhFsXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFopdpfBKOwpP9K6lY1fq32NR2TBMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyMqCFbU
QzpqfsNc5RHd8DkRYfTmDZozG3hBKBMdsdQ5fYBr3Hph6Kv+wKQ44INE2WR/ykdc
VLR/40uT4GZ2NkIWkk8DNP9XWr+EhZx5ljP4KMyTB3dFsW5gScRCErwSnX0zs+PL
LA/QfvYxJAGs2EZAkcVDGbRldY1hqIijV5pnvPh0cnSFY4V4zuAyLfBi3+7jgdi/
AVJgozpKG+CWpmosGMxRF9MxRS2+8l9nG/jcWhZQyLycjx+BxKxtISUzOkSbBe/L
mqQevBaJYAQVcri1bMLkrmyyxczeMrL11KpEUG9m7eOWMI38hrEBBFaOONoympS2
lDbq5AIbK4bDRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:00 2026 by rpki-client