Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: MQsOa3zL2npidNx93zb49T9RNu4ffaEHzD7QsK7jhrc=
Subject key identifier: 74:92:15:D6:96:1A:7D:54:0B:51:D1:D3:C3:9D:AC:D9:B3:FC:E5:DC
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 01A0CAB4B74F8D38AF3C2106D82C842177DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 20:00:35 +0000
Manifest this update: Tue 22 Sep 2026 20:00:35 +0000
Manifest next update: Wed 23 Sep 2026 20:00:35 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: Pa29/sTQx5pD2pvn6IDUqUJtWDi9nby9+LLlVqrq4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:b7:4f:8d:38:af:3c:21:06:d8:2c:84:21:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Sep 22 20:00:35 2026 GMT
Not After : Sep 23 20:00:35 2026 GMT
Subject: CN=749215d6961a7d540b51d1d3c39dacd9b3fce5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:ab:ee:fb:ab:f0:f4:ea:2a:55:c5:95:ae:
30:8c:ac:46:62:3d:a9:ab:9d:7b:8f:67:44:1f:a7:
6d:9c:76:a0:87:50:de:ff:ca:1b:2a:8a:f8:5b:fd:
ba:ef:ca:61:dc:d2:d6:f0:90:b2:f6:86:ce:aa:7d:
e2:9c:64:3f:61:b0:50:77:92:d2:78:f5:6e:40:d7:
fb:7c:79:bd:c0:63:8c:76:f1:83:db:23:3f:c3:b8:
c0:00:08:03:68:9f:89:b2:22:b7:93:4d:25:83:84:
c5:92:49:63:5b:c4:34:41:c3:60:90:dd:0b:d9:31:
97:bd:4b:5d:47:fd:4e:da:4f:81:24:a5:b5:5d:32:
0c:de:4c:52:d7:da:e5:b3:3b:56:05:af:a1:23:75:
ee:0d:9f:f2:b6:97:cc:af:7a:d1:0e:b8:28:22:93:
79:d5:da:87:eb:54:6a:27:d0:5a:4f:88:81:1a:2a:
c9:eb:8a:e2:9e:31:bf:3c:f4:e8:00:d4:40:e1:7d:
86:cf:a8:f1:6a:5e:01:a1:0c:3a:47:cf:e5:3c:2c:
b3:c5:6b:ab:8d:51:9f:1c:38:4d:d5:d9:31:ed:ca:
a5:e3:24:33:11:3a:0f:40:62:41:48:6f:78:42:7b:
ea:73:9c:78:bb:be:a6:a2:d6:9b:2b:b2:b9:83:f1:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:15:D6:96:1A:7D:54:0B:51:D1:D3:C3:9D:AC:D9:B3:FC:E5:DC
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b9:86:99:4b:a5:fc:c4:de:fd:fd:f9:23:29:50:5a:b6:50:
e1:59:7c:e5:4c:1c:40:9a:77:99:26:97:b4:5f:ea:94:f6:89:
14:8a:16:4b:44:40:db:bd:83:56:8f:a1:43:31:a4:73:83:93:
a2:a3:48:77:b7:72:c3:34:a0:ac:62:eb:c3:91:51:15:5e:15:
f7:22:3e:7b:9f:a8:7b:8f:4f:88:ab:48:ca:57:4b:70:11:59:
19:c5:25:d6:d7:82:de:f8:b0:aa:5c:52:3f:53:02:74:46:fb:
68:8a:db:5e:90:76:22:a5:96:0a:1b:5f:30:22:72:9a:fd:20:
34:53:14:e6:b8:d7:21:db:88:82:35:b3:d6:4b:3a:0c:19:be:
f1:56:43:9d:72:0c:a9:8e:ed:95:3e:1a:37:41:31:a4:ed:11:
bc:8c:f9:87:93:7e:85:b9:03:ff:88:fa:f4:d7:ce:11:b1:ad:
35:1d:35:1c:13:66:91:2c:4e:dc:4b:fc:3d:93:7e:9c:0e:99:
49:02:af:2a:81:f7:2f:59:ca:07:e3:ae:aa:4c:84:23:f9:ef:
0c:e1:30:8c:ab:69:13:f5:b1:b2:8d:5f:56:ee:7f:66:62:58:
d4:67:42:00:4e:c3:69:f7:9b:af:7a:e3:92:91:57:05:a8:5a:
cb:22:1c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtLdPjTivPCEG2CyEIXfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5
ZjRmNGMwHhcNMjYwOTIyMjAwMDM1WhcNMjYwOTIzMjAwMDM1WjAzMTEwLwYDVQQD
Eyg3NDkyMTVkNjk2MWE3ZDU0MGI1MWQxZDNjMzlkYWNkOWIzZmNlNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE2r7vur8PTqKlXFla4wjKxGYj2p
q517j2dEH6dtnHagh1De/8obKor4W/2678ph3NLW8JCy9obOqn3inGQ/YbBQd5LS
ePVuQNf7fHm9wGOMdvGD2yM/w7jAAAgDaJ+JsiK3k00lg4TFkkljW8Q0QcNgkN0L
2TGXvUtdR/1O2k+BJKW1XTIM3kxS19rlsztWBa+hI3XuDZ/ytpfMr3rRDrgoIpN5
1dqH61RqJ9BaT4iBGirJ64rinjG/PPToANRA4X2Gz6jxal4BoQw6R8/lPCyzxWur
jVGfHDhN1dkx7cql4yQzEToPQGJBSG94Qnvqc5x4u76motabK7K5g/EMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSSFdaWGn1UC1HR08OdrNmz/OXcMB8GA1UdIwQY
MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt
MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh
LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07mGmUul
/MTe/f35IylQWrZQ4Vl85UwcQJp3mSaXtF/qlPaJFIoWS0RA272DVo+hQzGkc4OT
oqNId7dywzSgrGLrw5FRFV4V9yI+e5+oe49PiKtIyldLcBFZGcUl1teC3viwqlxS
P1MCdEb7aIrbXpB2IqWWChtfMCJymv0gNFMU5rjXIduIgjWz1ks6DBm+8VZDnXIM
qY7tlT4aN0ExpO0RvIz5h5N+hbkD/4j69NfOEbGtNR01HBNmkSxO3Ev8PZN+nA6Z
SQKvKoH3L1nKB+OuqkyEI/nvDOEwjKtpE/Wxso1fVu5/ZmJY1GdCAE7Dafebr3rj
kpFXBahayyIcPA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:47 2026 by rpki-client