Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: oacuNIdXdO1kvgwdC8r+TLlTqtsEzk6/N/IRKUPDKEQ=
Subject key identifier: 23:05:88:1B:38:4F:54:E0:A6:9E:96:A3:E0:28:52:AB:60:57:62:5E
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019CAD90A50E122AE6638657D101E0A3F340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 168F
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: AXkkoNjYibg1XBCETo614yfviyCS48oXtnmpzT6JWGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a5:0e:12:2a:e6:63:86:57:d1:01:e0:a3:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=2305881b384f54e0a69e96a3e02852ab6057625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:02:a1:cf:c7:fe:04:06:f5:ce:50:40:70:
3c:a8:c7:14:cb:77:17:88:1b:ac:ca:50:4c:99:4c:
16:50:15:87:7b:ad:07:10:3a:50:53:9c:6a:9d:f0:
90:59:4f:09:5b:78:8c:43:35:d4:52:27:2b:6b:77:
f8:d5:76:d2:49:8e:bf:d0:2a:32:a5:94:ca:58:54:
9d:20:0e:f7:bb:34:d5:2e:5a:46:e0:a7:72:41:6d:
76:fb:8b:b1:7a:cf:c3:8d:1b:4f:7b:9d:93:88:b7:
b8:89:6c:83:b5:e9:60:08:bc:28:fb:8f:c1:1e:9e:
08:1e:97:d2:5c:6c:d7:ae:8d:b4:cf:b0:89:ca:8f:
4c:6a:3d:0f:66:2b:59:f8:b4:39:89:60:51:87:f9:
4c:fa:ce:d3:66:47:31:8c:1f:81:63:a6:96:67:59:
b3:08:d9:97:0f:e6:11:c0:ef:d2:c9:84:cb:7c:78:
8c:5a:4d:e5:60:30:ff:71:24:e0:ba:2c:79:19:16:
3b:be:cf:c3:1d:ec:9c:06:56:5d:c4:a8:f7:e4:c2:
e9:41:8f:65:fb:26:1b:07:9a:9d:66:4f:eb:d3:d0:
a7:5b:30:60:d0:64:68:8a:0d:24:b0:73:61:88:16:
ae:2f:09:6e:b0:ad:e3:ab:b4:a3:ba:91:6e:31:a8:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:88:1B:38:4F:54:E0:A6:9E:96:A3:E0:28:52:AB:60:57:62:5E
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:4b:c2:75:0f:10:45:23:f7:0a:eb:86:d2:c8:5b:26:5e:
18:ca:95:b5:1a:87:38:bb:26:f5:50:e9:97:cd:bc:6a:5e:35:
f4:f7:8c:fd:0b:04:03:ee:9e:cf:c8:73:26:eb:24:e8:d8:0d:
ee:84:18:ff:e5:da:b1:e6:5c:4a:33:4a:4a:e7:97:e7:91:f9:
c1:9c:df:50:4e:28:59:47:25:0b:19:64:ce:c9:9e:8d:63:fc:
e8:11:4c:ce:57:2b:10:5f:77:86:38:e0:dc:f6:5b:7b:e0:da:
7e:8c:1b:d8:f4:43:e7:60:bf:44:26:03:41:d9:00:eb:41:8c:
ac:6b:88:b2:51:71:76:76:4a:f3:a5:47:81:c9:85:bc:62:45:
13:02:fd:2a:b9:aa:54:a2:b0:25:b5:23:8a:f2:f8:83:db:bf:
9f:0b:dc:49:0f:45:0c:08:35:57:fb:58:be:fa:c1:6b:0c:3e:
06:88:6d:c7:ea:f1:4c:27:3a:47:d7:bf:17:85:48:96:17:95:
cc:3c:b4:91:13:00:ba:a8:03:b1:9d:09:e1:f9:12:4a:b4:f5:
a9:4f:b5:41:2e:bb:fd:7a:0e:2b:d4:45:95:b9:9a:45:90:88:
f1:72:25:4c:53:85:03:ee:9a:9b:a6:2c:ea:f5:d1:fe:fe:2e:
25:6b:e5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKUOEirmY4ZX0QHgo/NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjYwMzAyMDgwMTAzWhcNMjYwMzAzMDgwMTAzWjAzMTEwLwYDVQQD
EygyMzA1ODgxYjM4NGY1NGUwYTY5ZTk2YTNlMDI4NTJhYjYwNTc2MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCwCoc/H/gQG9c5QQHA8qMcUy3cX
iBusylBMmUwWUBWHe60HEDpQU5xqnfCQWU8JW3iMQzXUUicra3f41XbSSY6/0Coy
pZTKWFSdIA73uzTVLlpG4KdyQW12+4uxes/DjRtPe52TiLe4iWyDtelgCLwo+4/B
Hp4IHpfSXGzXro20z7CJyo9Maj0PZitZ+LQ5iWBRh/lM+s7TZkcxjB+BY6aWZ1mz
CNmXD+YRwO/SyYTLfHiMWk3lYDD/cSTguix5GRY7vs/DHeycBlZdxKj35MLpQY9l
+yYbB5qdZk/r09CnWzBg0GRoig0ksHNhiBauLwlusK3jq7SjupFuMajzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMFiBs4T1Tgpp6Wo+AoUqtgV2JeMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6dLwnUP
EEUj9wrrhtLIWyZeGMqVtRqHOLsm9VDpl828al419PeM/QsEA+6ez8hzJusk6NgN
7oQY/+XaseZcSjNKSueX55H5wZzfUE4oWUclCxlkzsmejWP86BFMzlcrEF93hjjg
3PZbe+Dafowb2PRD52C/RCYDQdkA60GMrGuIslFxdnZK86VHgcmFvGJFEwL9Krmq
VKKwJbUjivL4g9u/nwvcSQ9FDAg1V/tYvvrBaww+Bohtx+rxTCc6R9e/F4VIlheV
zDy0kRMAuqgDsZ0J4fkSSrT1qU+1QS67/XoOK9RFlbmaRZCI8XIlTFOFA+6am6Ys
6vXR/v4uJWvl/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:59 2026 by rpki-client