Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: 2k+Gah8Psaq1SweU5By00h54d44qFHjX89YwOmplD/I=
Subject key identifier: 53:1B:42:23:EA:18:9C:9E:CA:A3:9D:8B:1C:14:10:A0:77:F9:2C:F1
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019D9A06DF8418A8E322B3FB39A94B48304C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 15BE
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: 6cbwN1Hj+ytpZYLy6xmzy5GM4sO42x1DcT9PrakI4ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:df:84:18:a8:e3:22:b3:fb:39:a9:4b:48:30:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=531b4223ea189c9ecaa39d8b1c1410a077f92cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:e2:9d:9a:8e:2c:f4:7a:68:8f:00:8e:c8:
39:09:74:8c:c7:05:99:c3:a1:e9:3a:bb:cc:3a:1b:
34:c8:4d:51:5e:2a:0b:6a:1a:a6:8a:6e:9e:cc:6d:
6f:1b:06:f1:42:c5:f3:d4:d4:7c:f9:96:3e:26:9c:
4e:b5:05:17:dc:c2:06:ee:00:36:05:7f:29:5d:bb:
e1:b9:34:76:e8:f6:0d:30:6a:c1:c3:c8:b0:26:a1:
7c:1f:6b:c2:0c:7f:bc:ea:f4:84:4c:2d:e2:b5:b3:
4f:9e:76:38:3f:f0:9c:b7:9d:f4:53:a1:5e:e9:60:
ea:93:e5:bc:f2:5b:60:cd:14:a6:b5:51:28:95:12:
93:77:b4:80:08:30:7c:ea:0f:c2:e2:ff:f3:0c:77:
e4:0e:6a:ee:55:cf:4e:ac:6c:2d:b9:27:ad:eb:75:
06:0a:0d:56:44:51:9d:af:71:22:c2:b8:ec:b6:6b:
a3:40:ae:e3:e6:06:c2:e0:4a:57:bb:63:7f:48:6f:
46:68:72:6b:d7:26:3b:e0:35:fc:96:cf:28:88:e6:
c4:b0:cd:77:e6:e1:ea:c6:a4:3c:21:8b:54:db:06:
c3:a1:b8:73:a1:4a:13:22:86:5c:92:2e:18:b2:8e:
55:0c:cd:0c:e8:5f:a5:fc:e8:30:d1:0d:e6:54:64:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:42:23:EA:18:9C:9E:CA:A3:9D:8B:1C:14:10:A0:77:F9:2C:F1
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:42:11:90:45:a5:af:1d:8b:f0:38:69:8c:08:95:3c:05:9a:
08:ef:9d:44:da:5d:43:77:ef:31:b1:21:66:5e:fc:3e:c5:ba:
b9:d8:99:5e:f6:c2:2f:d9:24:e4:d2:c9:0c:aa:2b:24:f1:f6:
89:98:77:f0:4c:e6:9d:9f:21:09:1a:84:7e:e3:59:cd:7c:12:
5a:92:1f:8f:e2:87:17:0a:74:19:e3:55:e9:7a:1b:54:e2:86:
6e:7a:41:2a:fc:46:cb:3c:bd:e6:f1:ba:77:35:3c:86:9f:60:
0c:1e:fe:52:d2:55:11:a2:d3:ac:80:2a:25:5c:dc:01:a9:f0:
90:75:e5:1b:7c:7e:2c:da:c2:d2:4b:93:eb:7a:78:d3:df:d3:
5d:95:85:5d:2d:52:f8:c4:7e:41:d7:00:41:a1:a1:f3:b6:dc:
b3:5f:57:cd:4a:1a:d0:d0:87:81:a0:2a:88:5d:a3:9b:dd:f6:
c2:a6:66:73:98:05:ce:a4:55:2d:5c:6f:4c:33:5c:12:8a:63:
cb:36:02:7b:d2:6e:04:cb:84:bb:a7:d4:d4:6e:c0:85:74:a1:
fb:66:7d:58:71:c4:a0:08:08:ce:77:5c:c9:3b:62:e6:4e:50:
37:29:84:33:69:ff:a5:53:e6:42:1a:0e:21:7a:1a:98:56:7e:
60:eb:c6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBt+EGKjjIrP7OalLSDBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjYwNDE3MDYwMDM0WhcNMjYwNDE4MDYwMDM0WjAzMTEwLwYDVQQD
Eyg1MzFiNDIyM2VhMTg5YzllY2FhMzlkOGIxYzE0MTBhMDc3ZjkyY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRfinZqOLPR6aI8Ajsg5CXSMxwWZ
w6HpOrvMOhs0yE1RXioLahqmim6ezG1vGwbxQsXz1NR8+ZY+JpxOtQUX3MIG7gA2
BX8pXbvhuTR26PYNMGrBw8iwJqF8H2vCDH+86vSETC3itbNPnnY4P/Cct530U6Fe
6WDqk+W88ltgzRSmtVEolRKTd7SACDB86g/C4v/zDHfkDmruVc9OrGwtuSet63UG
Cg1WRFGdr3EiwrjstmujQK7j5gbC4EpXu2N/SG9GaHJr1yY74DX8ls8oiObEsM13
5uHqxqQ8IYtU2wbDobhzoUoTIoZcki4Yso5VDM0M6F+l/Ogw0Q3mVGSpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMbQiPqGJyeyqOdixwUEKB3+SzxMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUIRkEWl
rx2L8DhpjAiVPAWaCO+dRNpdQ3fvMbEhZl78PsW6udiZXvbCL9kk5NLJDKorJPH2
iZh38EzmnZ8hCRqEfuNZzXwSWpIfj+KHFwp0GeNV6XobVOKGbnpBKvxGyzy95vG6
dzU8hp9gDB7+UtJVEaLTrIAqJVzcAanwkHXlG3x+LNrC0kuT63p409/TXZWFXS1S
+MR+QdcAQaGh87bcs19XzUoa0NCHgaAqiF2jm932wqZmc5gFzqRVLVxvTDNcEopj
yzYCe9JuBMuEu6fU1G7AhXSh+2Z9WHHEoAgIzndcyTti5k5QNymEM2n/pVPmQhoO
IXoamFZ+YOvGeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:10 2026 by rpki-client