Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: 2j2Y0GnAB55GjrwsF4VkXkfgI3hITNbxFKfWI4Ijcwk=
Subject key identifier: 9A:E4:99:2A:45:10:65:FB:38:78:19:CE:C8:66:73:F5:A9:F5:2E:4F
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019ED31875FBF159740024DA675A6DA3F7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 10A9
Signing time: Wed 17 Jun 2026 01:00:55 +0000
Manifest this update: Wed 17 Jun 2026 01:00:55 +0000
Manifest next update: Thu 18 Jun 2026 01:00:55 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: JsMhQAWNsXOq+73PW6EWvijGu4yze28j609dP4oWgcA=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:75:fb:f1:59:74:00:24:da:67:5a:6d:a3:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jun 17 01:00:55 2026 GMT
Not After : Jun 18 01:00:55 2026 GMT
Subject: CN=9ae4992a451065fb387819cec86673f5a9f52e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:6a:2e:cb:ba:f2:e8:88:f5:bf:d3:0a:d0:
3a:bc:bf:02:19:31:7f:e5:21:77:f6:61:52:91:56:
cd:f6:73:89:c7:2c:8a:32:a6:29:c7:62:44:16:fe:
65:78:af:76:9c:38:36:96:05:9d:1e:06:3f:73:8c:
36:ba:28:42:cf:00:cf:61:82:49:c4:7f:ec:b9:6e:
41:05:a2:8e:58:06:1d:26:4a:71:91:15:5a:c4:c6:
88:06:c5:1b:3b:f9:cc:b5:12:8e:83:14:a7:17:3f:
06:72:d3:f5:33:d7:63:73:a6:97:39:0e:82:5c:b4:
61:09:cc:24:46:ad:b0:37:e3:34:06:97:fb:33:50:
43:22:74:2e:6e:71:4f:e3:02:7e:83:e3:69:62:5a:
02:4e:28:13:5e:36:a8:2e:79:b2:c6:f0:33:b8:0e:
4c:3e:ed:12:2a:f9:92:6b:62:63:4c:b2:87:36:a2:
ad:69:22:c1:dc:16:66:1f:07:c1:7b:4f:e9:29:82:
ae:9b:5a:85:4f:01:87:8e:63:a6:88:95:bd:e5:26:
88:03:2d:38:4b:ce:a2:88:62:e0:04:f1:d4:4f:d4:
b3:0d:d9:d0:82:cf:46:ff:43:b0:3f:63:b8:e5:1f:
62:a3:c5:ad:e7:90:e1:d3:f8:63:6e:e7:91:81:11:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:99:2A:45:10:65:FB:38:78:19:CE:C8:66:73:F5:A9:F5:2E:4F
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9c:f6:2f:3e:07:6b:19:d6:72:9d:fd:9d:08:a5:d0:de:9c:
37:d6:11:98:30:47:04:5f:9e:e0:da:a0:ef:b9:74:31:18:aa:
b7:fe:03:a4:21:b8:da:84:99:9d:a8:6d:74:8b:b4:ad:0b:87:
22:e9:50:67:e1:2b:d6:fa:12:0c:13:bb:96:9e:7b:74:64:a1:
ac:50:d3:b3:aa:b2:eb:39:6a:d0:7b:6c:53:72:bd:a4:9d:8c:
f4:aa:a0:44:95:07:c6:27:ee:6c:aa:dc:a7:6c:8f:20:48:30:
a0:df:c9:cf:cf:a1:8a:b2:59:67:c0:95:88:bf:25:7f:c0:7d:
ae:6b:3b:5c:8c:ac:8f:6a:ef:ff:56:fb:27:c9:2b:1e:14:e6:
f5:06:97:61:a9:0f:d4:db:2c:91:5a:9b:e1:93:4f:bd:0b:84:
f0:43:6a:99:58:2e:9f:26:ac:41:5e:32:05:72:f2:cd:1e:2b:
cb:a8:ae:6b:55:a3:dd:5d:5f:21:6d:25:fd:b2:4a:f4:2c:91:
61:2a:4e:b4:a0:d7:88:f9:59:e5:49:3c:02:35:b9:9e:e3:ae:
ee:44:79:a8:56:eb:83:35:ee:c4:35:21:f8:fa:74:cb:d7:6d:
fe:97:43:da:6d:dd:29:a2:71:90:df:98:da:c8:8e:2a:98:ce:
13:5a:c7:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGHX78Vl0ACTaZ1pto/fYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjYwNjE3MDEwMDU1WhcNMjYwNjE4MDEwMDU1WjAzMTEwLwYDVQQD
Eyg5YWU0OTkyYTQ1MTA2NWZiMzg3ODE5Y2VjODY2NzNmNWE5ZjUyZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eJqLsu68uiI9b/TCtA6vL8CGTF/
5SF39mFSkVbN9nOJxyyKMqYpx2JEFv5leK92nDg2lgWdHgY/c4w2uihCzwDPYYJJ
xH/suW5BBaKOWAYdJkpxkRVaxMaIBsUbO/nMtRKOgxSnFz8GctP1M9djc6aXOQ6C
XLRhCcwkRq2wN+M0Bpf7M1BDInQubnFP4wJ+g+NpYloCTigTXjaoLnmyxvAzuA5M
Pu0SKvmSa2JjTLKHNqKtaSLB3BZmHwfBe0/pKYKum1qFTwGHjmOmiJW95SaIAy04
S86iiGLgBPHUT9SzDdnQgs9G/0OwP2O45R9io8Wt55Dh0/hjbueRgREeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrkmSpFEGX7OHgZzshmc/Wp9S5PMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5z2Lz4H
axnWcp39nQil0N6cN9YRmDBHBF+e4Nqg77l0MRiqt/4DpCG42oSZnahtdIu0rQuH
IulQZ+Er1voSDBO7lp57dGShrFDTs6qy6zlq0HtsU3K9pJ2M9KqgRJUHxifubKrc
p2yPIEgwoN/Jz8+hirJZZ8CViL8lf8B9rms7XIysj2rv/1b7J8krHhTm9QaXYakP
1NsskVqb4ZNPvQuE8ENqmVgunyasQV4yBXLyzR4ry6iua1Wj3V1fIW0l/bJK9CyR
YSpOtKDXiPlZ5Uk8AjW5nuOu7kR5qFbrgzXuxDUh+Pp0y9dt/pdD2m3dKaJxkN+Y
2siOKpjOE1rHYg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:50 2026 by rpki-client