Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: l3/T9gb3sr7x23NeRkQH7STjueyvTHrR8ebOACROKRI=
Subject key identifier: 16:FA:6D:55:AB:B8:7E:BC:E6:DD:65:40:31:3E:7E:26:3A:15:AE:9A
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019D9DACEA85E650A095BD525C1378F5AA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 0277
Signing time: Fri 17 Apr 2026 23:00:48 +0000
Manifest this update: Fri 17 Apr 2026 23:00:48 +0000
Manifest next update: Sat 18 Apr 2026 23:00:48 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: +mK+ikGIrKcbqib7b3wiURLBx6GnmEaH8Xa48kOuxW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:ea:85:e6:50:a0:95:bd:52:5c:13:78:f5:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Apr 17 23:00:48 2026 GMT
Not After : Apr 18 23:00:48 2026 GMT
Subject: CN=16fa6d55abb87ebce6dd6540313e7e263a15ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:e6:b1:da:46:0d:6b:4d:13:36:3c:79:ed:
e6:ef:ae:2e:6c:9b:93:77:49:8b:b8:6e:c9:0d:c2:
8d:3b:1f:83:2e:a2:68:c1:9a:93:7c:71:ed:7e:41:
d4:1e:85:8e:af:f1:6f:23:83:ed:9b:e5:39:8c:55:
58:0c:95:17:a1:d7:d5:ea:62:33:c6:c4:c0:6b:d0:
ac:99:ec:6d:34:57:5a:ee:7d:63:cf:f1:a8:7f:9a:
47:ac:a0:4b:52:5e:b8:7c:64:86:a3:78:2b:58:cf:
13:52:83:8e:e4:e3:bc:56:1e:4e:4d:cc:28:a7:c7:
9a:f9:b1:27:d8:17:c8:37:83:de:29:d4:a0:bd:32:
97:5d:c2:31:d5:09:7f:e4:49:6f:87:38:0d:f1:7a:
a9:d8:17:d6:9d:9b:43:d9:14:e5:26:0e:92:19:4d:
16:fc:f8:75:6c:a1:00:ba:3b:91:8d:6a:28:70:6d:
0d:9b:6a:a2:ff:da:e2:62:b1:53:98:92:2f:20:c3:
95:d5:19:ec:64:b9:f2:8a:33:fb:08:c7:17:81:be:
49:c4:e9:8e:27:88:10:89:16:3d:29:d3:fe:c7:cc:
2a:49:01:a7:2e:cf:1a:21:5d:88:85:ad:01:cf:91:
b7:85:34:82:d5:f5:1f:38:d7:7b:ce:9d:f1:34:1a:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FA:6D:55:AB:B8:7E:BC:E6:DD:65:40:31:3E:7E:26:3A:15:AE:9A
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:99:09:b1:83:da:73:8e:12:c1:5b:8c:54:35:82:82:3f:27:
89:aa:83:f5:11:9f:8c:ef:2b:43:01:96:a5:35:cc:e9:c1:11:
a7:b1:4d:24:f9:c0:c8:78:22:a3:9f:42:0b:d1:f7:13:57:c1:
63:f0:07:09:8b:95:4a:9d:6e:fb:68:6e:22:cd:76:96:9b:3b:
1e:46:66:51:91:a8:43:c1:70:38:fe:5f:cf:56:82:c7:f7:12:
7c:be:56:65:99:db:ff:41:df:fc:4e:54:82:6e:e2:c6:58:84:
78:f2:eb:a5:e3:73:b9:7a:34:13:e2:1d:64:dd:85:0d:5a:7a:
69:66:56:80:bf:41:e6:96:44:48:f9:84:6c:51:80:9c:c6:d2:
3c:fb:07:db:ae:b4:af:27:63:9b:bb:2e:85:1a:6c:fc:f0:83:
09:d7:a5:ce:e8:dd:61:39:78:ef:08:68:75:fa:52:4a:21:1c:
17:7a:61:ee:b8:cc:ca:25:00:5d:a1:cf:d1:ca:81:46:81:f9:
c8:0a:c0:e2:53:d2:fe:81:45:43:80:d2:d6:15:76:54:2a:b9:
1f:37:32:a1:a7:94:01:c7:d8:5b:a5:39:09:d4:e1:ca:2e:cb:
74:cf:22:24:f7:59:40:07:40:ea:af:d0:0c:bf:8b:9f:b4:d2:
8d:69:5c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drOqF5lCglb1SXBN49aqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YmRiODViN2VhOGYxZmFhZjc1MWU3NmM0MTQ3YzgxYjYw
ZTk5NGQwHhcNMjYwNDE3MjMwMDQ4WhcNMjYwNDE4MjMwMDQ4WjAzMTEwLwYDVQQD
EygxNmZhNmQ1NWFiYjg3ZWJjZTZkZDY1NDAzMTNlN2UyNjNhMTVhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i7msdpGDWtNEzY8ee3m764ubJuT
d0mLuG7JDcKNOx+DLqJowZqTfHHtfkHUHoWOr/FvI4Ptm+U5jFVYDJUXodfV6mIz
xsTAa9CsmextNFda7n1jz/Gof5pHrKBLUl64fGSGo3grWM8TUoOO5OO8Vh5OTcwo
p8ea+bEn2BfIN4PeKdSgvTKXXcIx1Ql/5ElvhzgN8Xqp2BfWnZtD2RTlJg6SGU0W
/Ph1bKEAujuRjWoocG0Nm2qi/9riYrFTmJIvIMOV1RnsZLnyijP7CMcXgb5JxOmO
J4gQiRY9KdP+x8wqSQGnLs8aIV2Iha0Bz5G3hTSC1fUfONd7zp3xNBrKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb6bVWruH685t1lQDE+fiY6Fa6aMB8GA1UdIwQY
MBaAFJW9uFt+qPH6r3UedsQUfIG2DplNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wMzM3MDAtZjkwNC00MjJmLWE0YWMt
MTAyNDBjYTBiMTgyLzEvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wMzM3MDAtZjkwNC00MjJmLWE0YWMtMTAyNDBjYTBiMTgy
LzEvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZkJsYPa
c44SwVuMVDWCgj8niaqD9RGfjO8rQwGWpTXM6cERp7FNJPnAyHgio59CC9H3E1fB
Y/AHCYuVSp1u+2huIs12lps7HkZmUZGoQ8FwOP5fz1aCx/cSfL5WZZnb/0Hf/E5U
gm7ixliEePLrpeNzuXo0E+IdZN2FDVp6aWZWgL9B5pZESPmEbFGAnMbSPPsH2660
rydjm7suhRps/PCDCdelzujdYTl47whodfpSSiEcF3ph7rjMyiUAXaHP0cqBRoH5
yArA4lPS/oFFQ4DS1hV2VCq5HzcyoaeUAcfYW6U5CdThyi7LdM8iJPdZQAdA6q/Q
DL+Ln7TSjWlc3g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:10:01 2026 by rpki-client