Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: qNqCVdLoB1EGvORDdMPhDdHK0xkfZtCChiKMXuKmb3I=
Subject key identifier: 33:77:EF:F6:12:65:18:9A:86:FB:4C:E5:63:6A:CB:8C:C6:EB:FD:94
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019D97E1CD2545F4620171EACCA86D56A6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 07F5
Signing time: Thu 16 Apr 2026 20:00:50 +0000
Manifest this update: Thu 16 Apr 2026 20:00:50 +0000
Manifest next update: Fri 17 Apr 2026 20:00:50 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: FAIYkd9QL8lyW5YW/wA3Fxq6Dzl36ve6K4piOtC8Gq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:cd:25:45:f4:62:01:71:ea:cc:a8:6d:56:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Apr 16 20:00:50 2026 GMT
Not After : Apr 17 20:00:50 2026 GMT
Subject: CN=3377eff61265189a86fb4ce5636acb8cc6ebfd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:0a:3e:f2:5a:91:d5:c5:6a:e7:18:96:2e:
cf:23:de:cf:9b:76:f9:54:a2:40:6a:23:ec:da:0c:
65:49:1a:48:88:40:fe:3e:cc:6d:b9:fc:39:91:12:
3c:5e:7d:78:6f:5b:c6:69:9c:96:7a:c4:67:6f:91:
8b:e8:2e:0d:90:ac:a1:dc:60:fc:b8:eb:d6:28:96:
e2:b6:a3:8b:f1:88:ad:87:1c:98:a3:45:13:61:9f:
25:be:b1:4c:42:77:56:4d:2b:72:f5:97:89:98:d3:
b7:ac:5e:28:03:e4:f0:37:ef:fe:6e:ba:2f:f8:ff:
dd:4c:81:e5:72:1c:3e:cd:2a:de:4e:bd:8b:3b:e3:
23:12:03:a4:74:2f:13:e8:94:92:2a:c7:8a:8b:3b:
76:be:ce:56:b0:81:38:f9:01:30:26:62:87:45:d4:
26:ac:ef:fd:da:b8:9d:86:df:04:38:07:9e:84:b7:
58:03:91:3e:56:06:b1:b4:3a:93:b9:fc:20:d8:d1:
df:81:57:d2:f5:91:14:e9:cd:a6:2c:ca:bd:e6:40:
8e:bb:f8:24:71:88:17:eb:29:2b:2f:2b:58:fb:bf:
64:9e:2e:15:e2:f0:58:70:38:7a:40:67:2d:7a:5e:
92:67:73:6e:eb:ac:a2:29:93:c0:22:bf:62:67:1b:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:EF:F6:12:65:18:9A:86:FB:4C:E5:63:6A:CB:8C:C6:EB:FD:94
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3c:0d:70:f5:aa:b8:f7:dd:3d:1a:16:f6:65:d3:2f:07:ba:
c4:ed:1e:8f:b4:0d:31:6d:d8:de:bd:b3:ef:95:5e:e5:3a:f1:
31:b9:0c:96:09:97:b4:ae:cd:ba:a6:d4:9d:bf:07:1a:19:f5:
0b:61:b4:83:77:3d:f4:59:0f:67:2b:d3:3f:9a:2e:c8:47:5e:
59:09:a6:65:92:ef:7e:fe:f6:57:86:a7:51:76:df:4a:55:cf:
7c:03:1d:e5:0a:1d:f6:c6:45:69:88:9b:3c:ab:2b:bf:e5:be:
1d:48:c9:07:8d:df:e6:c1:b8:ce:a6:8c:d5:9a:52:55:9e:f4:
c8:78:2f:18:e1:64:5c:5e:00:5f:be:7d:6b:2c:88:92:84:d0:
a0:53:c8:99:bb:ce:44:dc:a6:4c:08:98:1f:80:74:05:74:27:
64:2d:3f:e1:08:2c:3e:d4:f6:a1:21:4e:90:e2:68:0b:de:d6:
50:09:e6:d5:59:1e:b2:ca:28:ae:ec:f4:d8:a3:84:f1:40:76:
a8:7e:68:4e:ea:3b:34:6a:9f:7b:37:d7:c0:d0:1d:96:df:40:
00:21:65:32:04:04:dc:26:58:90:4e:e6:30:b2:66:5c:80:9d:
21:28:d5:64:28:6e:ef:ad:8f:f2:41:24:69:fd:9f:1e:dd:9b:
59:84:30:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4c0lRfRiAXHqzKhtVqa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx
Y2Y0ZDYwHhcNMjYwNDE2MjAwMDUwWhcNMjYwNDE3MjAwMDUwWjAzMTEwLwYDVQQD
EygzMzc3ZWZmNjEyNjUxODlhODZmYjRjZTU2MzZhY2I4Y2M2ZWJmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGYKPvJakdXFaucYli7PI97Pm3b5
VKJAaiPs2gxlSRpIiED+Psxtufw5kRI8Xn14b1vGaZyWesRnb5GL6C4NkKyh3GD8
uOvWKJbitqOL8YithxyYo0UTYZ8lvrFMQndWTSty9ZeJmNO3rF4oA+TwN+/+brov
+P/dTIHlchw+zSreTr2LO+MjEgOkdC8T6JSSKseKizt2vs5WsIE4+QEwJmKHRdQm
rO/92ridht8EOAeehLdYA5E+VgaxtDqTufwg2NHfgVfS9ZEU6c2mLMq95kCOu/gk
cYgX6ykrLytY+79kni4V4vBYcDh6QGctel6SZ3Nu66yiKZPAIr9iZxuhDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN37/YSZRiahvtM5WNqy4zG6/2UMB8GA1UdIwQY
MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt
ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl
LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDwNcPWq
uPfdPRoW9mXTLwe6xO0ej7QNMW3Y3r2z75Ve5TrxMbkMlgmXtK7NuqbUnb8HGhn1
C2G0g3c99FkPZyvTP5ouyEdeWQmmZZLvfv72V4anUXbfSlXPfAMd5Qod9sZFaYib
PKsrv+W+HUjJB43f5sG4zqaM1ZpSVZ70yHgvGOFkXF4AX759ayyIkoTQoFPImbvO
RNymTAiYH4B0BXQnZC0/4QgsPtT2oSFOkOJoC97WUAnm1Vkessooruz02KOE8UB2
qH5oTuo7NGqfezfXwNAdlt9AACFlMgQE3CZYkE7mMLJmXICdISjVZChu762P8kEk
af2fHt2bWYQwIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:08 2026 by rpki-client