Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: WA57Wz7DFueAJbBoa7zSyld30xg8Tdt77pltiBmu3nA=
Subject key identifier: 51:D5:E8:AA:70:B6:F3:E9:11:DC:A2:35:75:82:08:7F:E3:D2:AB:57
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019CAC7DF375727889F526345E2B5D868D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1543
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: BLJo4GYk5DbfFVE7CqyoMzeZME8haLoNIhtyxnjqzrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f3:75:72:78:89:f5:26:34:5e:2b:5d:86:8d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=51d5e8aa70b6f3e911dca2357582087fe3d2ab57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:7e:c0:65:44:51:60:ea:31:49:6d:53:c8:
d9:ab:38:f5:98:39:8f:d7:33:f3:54:b4:de:f9:22:
4e:e2:aa:88:e8:86:ed:76:e3:f0:f7:c1:86:55:44:
06:73:42:1e:a2:eb:22:7b:bd:7f:be:90:d9:7e:5f:
7d:c0:66:2f:a3:8a:41:78:59:49:b0:e1:76:e3:b4:
35:d4:8b:53:b2:20:bc:0f:0b:c4:bf:22:11:3b:22:
3b:eb:85:41:9a:53:7a:8a:97:e0:92:b5:5d:cc:36:
d1:68:b2:f1:68:61:a8:ea:d8:f5:43:24:35:35:96:
13:14:87:c4:b9:16:76:77:19:c1:1c:ca:79:b3:2f:
c0:0c:6d:1c:f9:48:fc:05:c3:3c:11:af:0d:a7:c2:
3f:7d:62:39:45:59:3b:d9:b8:12:bc:d8:72:30:cb:
1b:2a:a2:e6:a9:9d:ae:b2:18:01:40:6b:1b:1b:47:
5d:85:52:72:ab:ce:7f:05:4f:55:86:be:cd:43:07:
a6:e1:b9:e9:c2:4e:b3:b6:e1:13:53:c6:5b:aa:f9:
7a:4a:1f:45:89:51:70:77:da:44:77:cb:38:69:d9:
1b:6c:75:97:5a:f3:4c:55:d3:31:4d:27:fd:c1:33:
26:1e:76:59:e6:cf:c6:84:66:2e:66:e9:b3:71:ae:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:E8:AA:70:B6:F3:E9:11:DC:A2:35:75:82:08:7F:E3:D2:AB:57
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:74:f0:4b:fb:d5:d1:b6:90:41:ba:9e:79:a7:18:e8:98:e3:
ca:41:38:9b:7d:a0:b6:0f:15:8a:a2:46:22:41:c4:32:d3:0c:
af:9b:c4:02:6d:63:9f:00:dd:5d:c6:ad:2b:8f:5e:ab:f0:cf:
0d:4b:32:28:53:96:b8:f4:2f:c0:c2:88:84:d1:c2:31:a7:1f:
0c:bf:16:c6:2c:94:53:3c:88:5d:0c:8c:8d:83:dd:68:2c:9f:
f7:61:9b:de:f0:a1:33:57:5d:f6:94:52:c9:a5:d6:4b:da:0b:
ea:58:50:7f:b5:a6:26:ac:a6:eb:9e:51:77:9c:92:a8:82:a8:
8b:e0:d0:25:21:2d:09:73:27:3a:67:fc:87:aa:cd:e8:e2:73:
ee:9e:16:65:b1:63:9b:94:68:93:03:5d:c5:84:8c:5a:f8:33:
9c:4c:ae:a0:7c:a7:4d:28:22:75:9a:58:5b:50:d3:c1:88:82:
ae:05:69:a3:cb:d8:fe:64:91:29:21:ef:30:b8:62:ed:aa:cf:
bd:9a:3b:81:00:61:2f:b5:d3:39:dc:39:81:3c:38:db:b4:85:
56:6c:53:c8:55:74:0e:9b:d2:3c:8f:66:02:c8:a8:e8:58:49:
ac:a6:9c:3a:85:35:e4:46:a0:1a:a4:f4:50:7d:8c:aa:d2:90:
86:22:7e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysffN1cniJ9SY0Xitdho1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjYwMzAyMDMwMTAxWhcNMjYwMzAzMDMwMTAxWjAzMTEwLwYDVQQD
Eyg1MWQ1ZThhYTcwYjZmM2U5MTFkY2EyMzU3NTgyMDg3ZmUzZDJhYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42h+wGVEUWDqMUltU8jZqzj1mDmP
1zPzVLTe+SJO4qqI6IbtduPw98GGVUQGc0Ieousie71/vpDZfl99wGYvo4pBeFlJ
sOF247Q11ItTsiC8DwvEvyIROyI764VBmlN6ipfgkrVdzDbRaLLxaGGo6tj1QyQ1
NZYTFIfEuRZ2dxnBHMp5sy/ADG0c+Uj8BcM8Ea8Np8I/fWI5RVk72bgSvNhyMMsb
KqLmqZ2ushgBQGsbG0ddhVJyq85/BU9Vhr7NQwem4bnpwk6ztuETU8Zbqvl6Sh9F
iVFwd9pEd8s4adkbbHWXWvNMVdMxTSf9wTMmHnZZ5s/GhGYuZumzca5JDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHV6KpwtvPpEdyiNXWCCH/j0qtXMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3TwS/vV
0baQQbqeeacY6JjjykE4m32gtg8ViqJGIkHEMtMMr5vEAm1jnwDdXcatK49eq/DP
DUsyKFOWuPQvwMKIhNHCMacfDL8WxiyUUzyIXQyMjYPdaCyf92Gb3vChM1dd9pRS
yaXWS9oL6lhQf7WmJqym655Rd5ySqIKoi+DQJSEtCXMnOmf8h6rN6OJz7p4WZbFj
m5RokwNdxYSMWvgznEyuoHynTSgidZpYW1DTwYiCrgVpo8vY/mSRKSHvMLhi7arP
vZo7gQBhL7XTOdw5gTw427SFVmxTyFV0DpvSPI9mAsio6FhJrKacOoU15EagGqT0
UH2MqtKQhiJ+Ug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:53 2026 by rpki-client