Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: djVwUVOt6x8E06HFA7E8xuEarpHNsxjoaU4SnpV4WmI=
Subject key identifier: BB:13:58:72:DE:A7:D5:A2:49:C5:02:DE:F0:7B:2B:53:71:A6:53:2A
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019CB0240AAA0E822164082AA3DDF8ABFF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 01FC
Signing time: Mon 02 Mar 2026 20:01:17 +0000
Manifest this update: Mon 02 Mar 2026 20:01:17 +0000
Manifest next update: Tue 03 Mar 2026 20:01:17 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: Qp5udHKwTiXQ/3sh9PnxJteii9w6VDNBV5J9nXJtlTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:0a:aa:0e:82:21:64:08:2a:a3:dd:f8:ab:ff:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Mar 2 20:01:17 2026 GMT
Not After : Mar 3 20:01:17 2026 GMT
Subject: CN=bb135872dea7d5a249c502def07b2b5371a6532a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:b1:2a:a0:9c:1e:bd:d1:f9:91:8f:03:7f:
03:85:c9:36:f3:4c:69:fa:37:20:b8:56:b1:5e:46:
34:37:39:00:35:a9:92:d2:ea:7b:92:bd:68:11:cc:
03:60:fb:2f:16:6f:df:a7:c1:6e:dc:d3:c9:e4:f5:
5d:e6:7e:e2:f3:f0:e4:c8:ef:a4:29:1a:84:4d:e4:
77:63:02:0b:32:2c:b2:f6:b8:13:17:ae:3d:63:5f:
7b:92:61:2b:91:0a:d9:5c:25:90:4f:0f:aa:19:2c:
cd:fb:64:e5:5a:dd:48:53:95:9b:14:63:13:55:ad:
90:f9:63:e3:b8:41:56:b5:13:88:c1:a4:e8:91:80:
3d:03:3b:b1:ba:a7:c1:77:b4:1c:b0:c0:3e:2d:80:
51:2e:28:5e:b2:19:bf:b1:a8:55:98:a1:cf:58:b5:
d8:ec:f8:68:cc:15:cb:0e:8f:0a:5c:f2:ab:15:e9:
3d:93:fc:b5:cd:80:d7:c3:5c:13:b5:ff:0e:d8:00:
a9:d8:17:4c:08:d6:9f:6f:19:0d:74:97:b8:37:4f:
80:47:bd:92:08:f3:18:b8:cc:8d:e3:9d:73:51:b6:
10:ee:37:f0:13:bf:57:08:75:19:a4:03:9f:78:0d:
92:19:0b:41:35:b3:df:93:04:21:b9:d2:d3:2e:0d:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:58:72:DE:A7:D5:A2:49:C5:02:DE:F0:7B:2B:53:71:A6:53:2A
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:72:d7:fa:51:dd:31:00:7b:cd:c3:eb:e6:b3:84:9c:b0:06:
12:5d:e7:ed:fe:d9:3f:c5:d4:0a:96:8c:26:e8:31:d5:31:1d:
ff:5e:9a:83:4d:ff:4c:1b:ec:a3:4f:fa:2a:d9:20:2b:d5:bb:
00:7a:65:9e:a4:58:53:43:6a:51:38:99:50:20:b7:10:19:f6:
cf:03:c2:9f:d6:98:42:19:6f:8e:d9:db:37:38:b1:4d:05:85:
da:62:16:40:cc:29:ae:b8:8c:5c:7f:6a:3f:ac:ba:a3:9d:dc:
09:6b:f7:49:17:d0:c7:eb:92:9d:1f:ad:7a:ad:1f:e1:cb:31:
7f:a6:bc:19:0f:15:88:2c:f1:76:dd:50:84:0e:3c:68:c2:d9:
7f:b4:45:00:1e:fc:08:ec:8a:c2:df:ef:05:9a:b5:21:c7:51:
36:b0:9c:16:04:b4:c8:28:75:5b:ca:7c:27:69:d2:64:61:a2:
15:79:d0:f5:46:70:9b:1e:12:50:0b:06:95:e2:c6:a2:82:aa:
f2:96:41:1d:bd:a4:5c:81:c2:a6:9f:2d:6e:d8:39:a6:6f:8e:
7f:f7:80:16:11:71:8c:90:70:3d:8d:d1:4e:61:f3:c3:9d:fe:
24:3a:dc:ab:b8:17:ad:d4:15:f8:f8:87:7b:78:c0:31:d5:b5:
3a:69:20:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywJAqqDoIhZAgqo934q/8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YmRiODViN2VhOGYxZmFhZjc1MWU3NmM0MTQ3YzgxYjYw
ZTk5NGQwHhcNMjYwMzAyMjAwMTE3WhcNMjYwMzAzMjAwMTE3WjAzMTEwLwYDVQQD
EyhiYjEzNTg3MmRlYTdkNWEyNDljNTAyZGVmMDdiMmI1MzcxYTY1MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nSxKqCcHr3R+ZGPA38Dhck280xp
+jcguFaxXkY0NzkANamS0up7kr1oEcwDYPsvFm/fp8Fu3NPJ5PVd5n7i8/DkyO+k
KRqETeR3YwILMiyy9rgTF649Y197kmErkQrZXCWQTw+qGSzN+2TlWt1IU5WbFGMT
Va2Q+WPjuEFWtROIwaTokYA9AzuxuqfBd7QcsMA+LYBRLiheshm/sahVmKHPWLXY
7PhozBXLDo8KXPKrFek9k/y1zYDXw1wTtf8O2ACp2BdMCNafbxkNdJe4N0+AR72S
CPMYuMyN451zUbYQ7jfwE79XCHUZpAOfeA2SGQtBNbPfkwQhudLTLg397QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsTWHLep9WiScUC3vB7K1NxplMqMB8GA1UdIwQY
MBaAFJW9uFt+qPH6r3UedsQUfIG2DplNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wMzM3MDAtZjkwNC00MjJmLWE0YWMt
MTAyNDBjYTBiMTgyLzEvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wMzM3MDAtZjkwNC00MjJmLWE0YWMtMTAyNDBjYTBiMTgy
LzEvbGIyNFczNm84ZnF2ZFI1MnhCUjhnYllPbVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyHLX+lHd
MQB7zcPr5rOEnLAGEl3n7f7ZP8XUCpaMJugx1TEd/16ag03/TBvso0/6KtkgK9W7
AHplnqRYU0NqUTiZUCC3EBn2zwPCn9aYQhlvjtnbNzixTQWF2mIWQMwprriMXH9q
P6y6o53cCWv3SRfQx+uSnR+teq0f4csxf6a8GQ8ViCzxdt1QhA48aMLZf7RFAB78
COyKwt/vBZq1IcdRNrCcFgS0yCh1W8p8J2nSZGGiFXnQ9UZwmx4SUAsGleLGooKq
8pZBHb2kXIHCpp8tbtg5pm+Of/eAFhFxjJBwPY3RTmHzw53+JDrcq7gXrdQV+PiH
e3jAMdW1OmkgBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:56:49 2026 by rpki-client