Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: Wt63D8LgRFNtYkOyl1pknDuFFsnEUt6ulFoU0dFM/WE=
Subject key identifier: B7:88:67:F1:E5:D1:20:11:F2:EA:54:5C:5B:7C:A1:29:1C:63:02:69
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019D9A74BB556690627D521B67764FCCC87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1667
Signing time: Fri 17 Apr 2026 08:00:34 +0000
Manifest this update: Fri 17 Apr 2026 08:00:34 +0000
Manifest next update: Sat 18 Apr 2026 08:00:34 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: xFJe1h7zNL7ihSf59mMnOMd1xoG4+W4D6D355ReGHb8=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bb:55:66:90:62:7d:52:1b:67:76:4f:cc:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Apr 17 08:00:34 2026 GMT
Not After : Apr 18 08:00:34 2026 GMT
Subject: CN=b78867f1e5d12011f2ea545c5b7ca1291c630269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:50:39:d5:95:68:4b:3d:3f:74:89:ba:7d:
9d:bf:eb:d2:05:9c:32:1b:87:a2:44:f0:87:02:4d:
60:82:a0:b2:81:ef:24:34:91:7d:ed:d1:0a:b5:90:
3d:7a:b8:72:65:a3:dd:99:a7:a5:4c:a5:e7:fb:3c:
ef:a4:59:59:86:f3:0a:ae:60:96:27:6c:3e:58:b0:
c0:2f:c7:35:34:61:ad:6e:3b:6d:e8:01:a8:6f:5d:
12:36:11:db:19:b0:9b:2e:9e:cb:20:07:42:5b:83:
a1:78:2f:b4:fa:92:cd:c7:ca:ab:4d:73:47:1c:fb:
82:4b:c1:e1:96:33:d4:a1:44:6e:0c:55:6d:05:fe:
65:29:ec:40:77:b5:9a:4d:f0:7e:1b:36:9b:c5:07:
d6:8a:e8:fa:58:6f:45:ff:9a:ad:2c:ff:4f:fa:3c:
b3:fa:6e:40:8c:49:84:3c:0d:c2:f7:31:35:8a:12:
ec:68:17:d9:b4:be:07:7b:12:cd:44:0e:d9:b1:fa:
4e:3e:df:19:61:2c:c4:67:86:ca:b6:70:5a:72:56:
16:98:20:2a:ec:c0:87:b0:ef:ce:87:a1:22:30:b7:
27:29:7f:98:49:2a:14:83:b4:55:8d:9b:01:ce:9f:
3d:9b:d5:f3:da:47:10:79:59:f4:d1:9c:ca:d5:19:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:67:F1:E5:D1:20:11:F2:EA:54:5C:5B:7C:A1:29:1C:63:02:69
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f4:66:6c:9c:4b:d2:68:e0:97:2c:17:36:e0:98:76:13:96:
68:c3:74:b8:99:fc:8b:88:83:7f:4a:c0:b6:02:d5:db:8b:2a:
b8:4a:46:e7:66:3f:3e:5d:0f:8b:b5:ff:18:8c:f2:fc:e0:48:
ba:99:62:d6:12:6e:93:ae:b6:2b:25:c2:b4:b0:19:74:2d:45:
0f:d4:a9:c0:85:8c:6e:cd:57:17:f6:5d:97:87:92:6e:0b:19:
70:ab:49:39:40:d4:20:51:c9:70:a3:88:b9:b7:53:24:d4:30:
66:9c:b0:50:ae:e1:84:8e:2b:2a:e3:2b:67:a8:14:82:63:02:
ad:42:ef:04:02:24:3c:c0:8b:5b:2c:ae:75:cf:d9:fb:7b:d8:
82:e9:6a:00:90:0d:8f:d5:66:f3:49:ba:ab:2e:23:c9:4b:ae:
49:c2:54:d3:f1:c4:7b:39:87:85:09:fe:47:87:2f:d7:1b:0c:
98:6e:e6:02:20:00:4c:2e:7f:25:50:d0:cc:66:55:fa:fa:bc:
e2:82:bf:ad:bc:dd:33:f5:9f:32:32:d1:b3:34:21:0b:f6:b8:
0e:f8:63:3c:43:ab:d9:34:0f:b4:34:de:0c:85:63:3a:38:10:
9b:e6:e4:f8:6d:43:58:6d:53:25:81:f4:4a:03:08:87:fd:1d:
46:9b:21:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adLtVZpBifVIbZ3ZPzMh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjYwNDE3MDgwMDM0WhcNMjYwNDE4MDgwMDM0WjAzMTEwLwYDVQQD
EyhiNzg4NjdmMWU1ZDEyMDExZjJlYTU0NWM1YjdjYTEyOTFjNjMwMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3lQOdWVaEs9P3SJun2dv+vSBZwy
G4eiRPCHAk1ggqCyge8kNJF97dEKtZA9erhyZaPdmaelTKXn+zzvpFlZhvMKrmCW
J2w+WLDAL8c1NGGtbjtt6AGob10SNhHbGbCbLp7LIAdCW4OheC+0+pLNx8qrTXNH
HPuCS8HhljPUoURuDFVtBf5lKexAd7WaTfB+GzabxQfWiuj6WG9F/5qtLP9P+jyz
+m5AjEmEPA3C9zE1ihLsaBfZtL4HexLNRA7ZsfpOPt8ZYSzEZ4bKtnBaclYWmCAq
7MCHsO/Oh6EiMLcnKX+YSSoUg7RVjZsBzp89m9Xz2kcQeVn00ZzK1RkQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeIZ/Hl0SAR8upUXFt8oSkcYwJpMB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2fRmbJxL
0mjglywXNuCYdhOWaMN0uJn8i4iDf0rAtgLV24squEpG52Y/Pl0Pi7X/GIzy/OBI
upli1hJuk662KyXCtLAZdC1FD9SpwIWMbs1XF/Zdl4eSbgsZcKtJOUDUIFHJcKOI
ubdTJNQwZpywUK7hhI4rKuMrZ6gUgmMCrULvBAIkPMCLWyyudc/Z+3vYgulqAJAN
j9Vm80m6qy4jyUuuScJU0/HEezmHhQn+R4cv1xsMmG7mAiAATC5/JVDQzGZV+vq8
4oK/rbzdM/WfMjLRszQhC/a4DvhjPEOr2TQPtDTeDIVjOjgQm+bk+G1DWG1TJYH0
SgMIh/0dRpshHA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:15 2026 by rpki-client