Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: Wb5kmgYpawXcJ8R+gTBgzYbHUUhxPlR5kIAF8ZljOws=
Subject key identifier: F1:F7:8C:5B:1F:5D:92:F9:3F:04:A1:E6:F1:BC:AD:E6:5D:A4:B8:ED
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019D98184C521851C9F08FCCA31C5B1C1AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1842
Signing time: Thu 16 Apr 2026 21:00:22 +0000
Manifest this update: Thu 16 Apr 2026 21:00:22 +0000
Manifest next update: Fri 17 Apr 2026 21:00:22 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: OcubNAmxgNa4Tn/rFt5Bu1XU6gPbnH6glBTYJtBgq6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:4c:52:18:51:c9:f0:8f:cc:a3:1c:5b:1c:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Apr 16 21:00:22 2026 GMT
Not After : Apr 17 21:00:22 2026 GMT
Subject: CN=f1f78c5b1f5d92f93f04a1e6f1bcade65da4b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:63:92:98:9f:5a:10:35:49:50:5a:3e:da:
ff:c0:48:6e:e9:5b:8e:8a:35:ba:07:f7:f1:32:ad:
c6:e2:8f:04:af:49:b5:30:ad:6d:d0:8c:3f:44:b4:
55:a4:11:06:59:4b:33:a8:8d:b4:ab:63:bc:ad:d6:
85:e6:75:fd:46:9c:0e:04:3a:43:47:15:88:45:29:
0e:24:67:6e:e2:eb:ad:83:42:30:0e:bf:2a:90:4e:
ca:34:97:fb:b0:9c:7b:e9:e4:f8:62:35:ab:7e:fa:
69:8c:a8:87:b5:b0:94:5b:dc:45:68:27:a0:8b:24:
ef:d0:47:19:2d:3e:7b:1f:5c:f0:5d:78:92:c8:55:
4f:99:de:64:f4:74:4e:aa:bd:b2:4f:a5:4c:51:16:
6e:94:bd:64:9a:7d:92:21:a3:3f:33:7e:de:07:0c:
ef:ee:77:eb:b8:f9:4e:bd:8a:c0:0e:44:bf:48:0d:
97:c7:6d:ab:6e:0b:74:8b:78:a8:13:c1:89:14:33:
97:30:76:1d:ca:ee:0e:6c:e4:a4:04:5a:fc:a0:bb:
43:a6:fe:81:c3:07:ee:09:6b:64:63:31:c8:fb:6f:
00:74:8a:a6:18:6b:f0:1e:8a:63:b4:22:44:86:03:
52:13:f0:a9:e2:6c:4c:7c:97:c1:97:a5:51:25:06:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:8C:5B:1F:5D:92:F9:3F:04:A1:E6:F1:BC:AD:E6:5D:A4:B8:ED
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c3:0f:50:7a:65:a2:9c:52:e5:9f:16:d0:6a:d4:2b:7d:67:
1b:76:98:75:df:97:2e:0c:f6:e1:8b:56:0e:fb:2a:3c:f5:34:
32:f9:84:a9:8d:ae:c9:78:9b:3f:4b:95:75:9f:2a:96:52:a1:
12:f9:c2:9f:6b:30:3f:07:76:08:bc:d6:a0:c3:6b:fd:1a:e0:
6a:4b:fd:1f:4e:e6:e0:82:6e:b3:5e:10:50:a7:26:56:8d:c0:
77:0d:65:d6:c9:55:ee:a7:5e:a1:b5:3d:91:ac:65:57:80:4c:
53:2d:58:88:12:b2:0d:a1:3b:fb:e2:63:26:36:a9:ee:64:11:
8c:0a:ca:14:7d:55:62:04:42:37:c8:a5:7c:ec:c5:f6:78:9a:
11:49:a9:54:30:da:f9:ec:32:9f:07:62:74:04:69:30:52:e0:
8e:0c:c7:68:40:90:cc:5a:74:5f:c3:b5:f6:d6:26:a0:dc:f7:
d0:23:f9:af:75:c1:5b:ae:7c:81:a5:74:a4:2f:11:69:61:cb:
b8:d4:dd:11:0a:4e:4a:51:78:9e:b2:a5:98:83:60:77:e3:6b:
f3:5c:16:ba:c9:94:96:17:80:1f:72:4f:8d:90:fb:97:4a:a6:
1a:11:57:df:ec:1c:e7:ad:bf:16:5c:e9:92:a3:6b:2d:ee:d5:
c0:fa:06:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGExSGFHJ8I/MoxxbHBryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1
ODhlOGMwHhcNMjYwNDE2MjEwMDIyWhcNMjYwNDE3MjEwMDIyWjAzMTEwLwYDVQQD
EyhmMWY3OGM1YjFmNWQ5MmY5M2YwNGExZTZmMWJjYWRlNjVkYTRiOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7tjkpifWhA1SVBaPtr/wEhu6VuO
ijW6B/fxMq3G4o8Er0m1MK1t0Iw/RLRVpBEGWUszqI20q2O8rdaF5nX9RpwOBDpD
RxWIRSkOJGdu4uutg0IwDr8qkE7KNJf7sJx76eT4YjWrfvppjKiHtbCUW9xFaCeg
iyTv0EcZLT57H1zwXXiSyFVPmd5k9HROqr2yT6VMURZulL1kmn2SIaM/M37eBwzv
7nfruPlOvYrADkS/SA2Xx22rbgt0i3ioE8GJFDOXMHYdyu4ObOSkBFr8oLtDpv6B
wwfuCWtkYzHI+28AdIqmGGvwHopjtCJEhgNSE/Cp4mxMfJfBl6VRJQarlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH3jFsfXZL5PwSh5vG8reZdpLjtMB8GA1UdIwQY
MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt
MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl
LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8MPUHpl
opxS5Z8W0GrUK31nG3aYdd+XLgz24YtWDvsqPPU0MvmEqY2uyXibP0uVdZ8qllKh
EvnCn2swPwd2CLzWoMNr/Rrgakv9H07m4IJus14QUKcmVo3Adw1l1slV7qdeobU9
kaxlV4BMUy1YiBKyDaE7++JjJjap7mQRjArKFH1VYgRCN8ilfOzF9niaEUmpVDDa
+ewynwdidARpMFLgjgzHaECQzFp0X8O19tYmoNz30CP5r3XBW658gaV0pC8RaWHL
uNTdEQpOSlF4nrKlmINgd+Nr81wWusmUlheAH3JPjZD7l0qmGhFX3+wc562/Flzp
kqNrLe7VwPoGCg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:00 2026 by rpki-client