Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
File: 1LkIqddLShCqH0wOiu1qhKO3kAU.mft (raw, json)
Hash identifier: psnqZCz8sIJ4U6VHr54Sk9fT1T1swxLoaBLg2yiDPkg=
Subject key identifier: 63:95:07:83:F1:BB:04:01:60:CD:FC:6B:28:81:EE:32:E6:B8:F2:43
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 019FAB2CBBC5CCBA5E37A18BF1ED8A523232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
Manifest number: 0166
Signing time: Wed 29 Jul 2026 00:01:03 +0000
Manifest this update: Wed 29 Jul 2026 00:01:03 +0000
Manifest next update: Thu 30 Jul 2026 00:01:03 +0000
Files and hashes: 1: 1LkIqddLShCqH0wOiu1qhKO3kAU.crl (hash: M+9gfTCxBRPx4/V9xzx9uDvg1tIwvNIYGHubhBhDblE=)
2: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (hash: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=)
3: oMAU4cDFxFwhA1NEpG0dXZO6zCQ.asa (hash: WY020cbiNFXtPn2WDWywnrSUq7C1vkRuGv5i2lQyac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:bb:c5:cc:ba:5e:37:a1:8b:f1:ed:8a:52:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: Jul 29 00:01:03 2026 GMT
Not After : Jul 30 00:01:03 2026 GMT
Subject: CN=63950783f1bb040160cdfc6b2881ee32e6b8f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:f5:ea:01:56:5c:8d:b2:c2:66:6f:eb:3c:
c9:b0:af:3e:4c:2a:ed:c5:c0:76:92:b2:c7:61:d8:
5d:75:3e:fd:c1:bd:bc:1d:09:a1:37:eb:47:f6:be:
d9:55:57:43:38:d9:95:bd:a3:61:ba:43:3b:e0:07:
c7:2c:2b:91:f6:a7:01:0a:54:fa:44:6b:29:b0:35:
bc:e4:70:e0:b6:85:a0:44:41:60:e2:63:96:e6:40:
76:3f:97:e7:78:34:93:0e:01:d9:5a:90:ea:32:f1:
0c:c2:81:30:9d:44:e5:80:b3:65:fa:43:25:e9:66:
aa:67:d8:06:05:15:90:55:c6:b2:60:e2:f1:82:30:
4f:cb:43:59:ad:90:e9:12:11:60:12:c5:ff:00:c4:
0f:66:1c:3f:e0:2d:2d:ae:06:9a:47:4f:10:e8:41:
ab:3b:ed:86:11:77:e6:d1:5b:5d:c2:0f:c4:ab:41:
c9:39:75:42:da:a0:d4:b5:71:ab:e3:03:4d:48:b8:
7c:27:0e:1e:95:99:4e:f6:94:69:3b:ee:f2:ba:1f:
7e:35:2d:35:f9:66:6c:28:12:2d:16:2c:11:cb:67:
db:f2:f7:aa:e8:c9:f3:52:19:45:dc:12:f0:c8:b8:
00:e6:54:57:60:5c:ff:65:16:9b:92:96:1c:38:7b:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:07:83:F1:BB:04:01:60:CD:FC:6B:28:81:EE:32:E6:B8:F2:43
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dd:b3:90:e3:6f:33:ad:ad:7b:73:29:e7:bf:56:fd:c5:bc:
c5:5a:06:16:bb:82:6f:7a:ed:e8:ec:bd:a3:e3:16:6a:20:55:
71:1c:e5:3e:0b:c2:92:a7:7c:42:93:4e:43:87:19:cf:c3:3e:
4f:4d:94:1c:d9:15:55:78:52:12:fa:23:60:a5:59:2e:6a:2d:
ae:9a:58:79:5a:f4:d7:2f:46:fa:32:78:6f:b4:66:08:66:f0:
71:0f:4e:ea:ef:67:c2:e2:db:55:2a:36:99:00:b8:40:f3:aa:
83:22:76:fa:18:bf:12:e7:65:76:af:dd:53:1d:40:93:f4:a8:
f1:d7:a3:99:a0:99:9d:5e:cc:70:3c:cd:62:f0:4a:35:a3:f9:
b5:7a:0c:03:f8:f7:25:e4:a2:a1:37:6b:0f:d3:6d:96:6f:9e:
60:ad:4a:1c:85:23:32:25:1e:3f:69:70:04:36:25:ec:80:c9:
50:85:8f:db:ec:a6:37:3a:a8:df:af:58:6c:78:dd:68:b3:3c:
2f:1b:d6:77:fd:6f:84:c2:d5:fc:1c:b4:94:28:c4:92:65:98:
07:75:b0:ae:1b:03:ad:9c:f3:9f:24:30:72:26:a9:8d:8e:a5:
60:39:4e:48:c2:f6:8c:a0:2f:e3:90:d3:36:1e:bd:ce:97:07:
c2:bf:89:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLLvFzLpeN6GL8e2KUjIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YjkwOGE5ZDc0YjRhMTBhYTFmNGMwZThhZWQ2YTg0YTNi
NzkwMDUwHhcNMjYwNzI5MDAwMTAzWhcNMjYwNzMwMDAwMTAzWjAzMTEwLwYDVQQD
Eyg2Mzk1MDc4M2YxYmIwNDAxNjBjZGZjNmIyODgxZWUzMmU2YjhmMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4j16gFWXI2ywmZv6zzJsK8+TCrt
xcB2krLHYdhddT79wb28HQmhN+tH9r7ZVVdDONmVvaNhukM74AfHLCuR9qcBClT6
RGspsDW85HDgtoWgREFg4mOW5kB2P5fneDSTDgHZWpDqMvEMwoEwnUTlgLNl+kMl
6WaqZ9gGBRWQVcayYOLxgjBPy0NZrZDpEhFgEsX/AMQPZhw/4C0trgaaR08Q6EGr
O+2GEXfm0Vtdwg/Eq0HJOXVC2qDUtXGr4wNNSLh8Jw4elZlO9pRpO+7yuh9+NS01
+WZsKBItFiwRy2fb8veq6MnzUhlF3BLwyLgA5lRXYFz/ZRabkpYcOHvbnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOVB4PxuwQBYM38ayiB7jLmuPJDMB8GA1UdIwQY
MBaAFNS5CKnXS0oQqh9MDortaoSjt5AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxrSXFkZExTaENxSDB3T2l1MXFoS08za0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85OGUyNDktNzk3YS00OGRmLWE2OWEt
MTI3NWVmYjhiMDU1LzEvMUxrSXFkZExTaENxSDB3T2l1MXFoS08za0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85OGUyNDktNzk3YS00OGRmLWE2OWEtMTI3NWVmYjhiMDU1
LzEvMUxrSXFkZExTaENxSDB3T2l1MXFoS08za0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd2zkONv
M62te3Mp579W/cW8xVoGFruCb3rt6Oy9o+MWaiBVcRzlPgvCkqd8QpNOQ4cZz8M+
T02UHNkVVXhSEvojYKVZLmotrppYeVr01y9G+jJ4b7RmCGbwcQ9O6u9nwuLbVSo2
mQC4QPOqgyJ2+hi/Eudldq/dUx1Ak/So8dejmaCZnV7McDzNYvBKNaP5tXoMA/j3
JeSioTdrD9Ntlm+eYK1KHIUjMiUeP2lwBDYl7IDJUIWP2+ymNzqo369YbHjdaLM8
LxvWd/1vhMLV/By0lCjEkmWYB3WwrhsDrZzznyQwciapjY6lYDlOSML2jKAv45DT
Nh69zpcHwr+Jjg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:41 2026 by rpki-client