Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: YYmJPMRYsNc6fx3zsOyrqJLz9BCjCYt3MDBW6/V1IcA=
Subject key identifier: 35:D0:CF:40:7C:49:CD:55:C0:2D:71:06:4A:E2:E7:39:C9:58:CC:14
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 019D97E157D2DA2DAFFB1615FCA5D1BAE24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 051F
Signing time: Thu 16 Apr 2026 20:00:20 +0000
Manifest this update: Thu 16 Apr 2026 20:00:20 +0000
Manifest next update: Fri 17 Apr 2026 20:00:20 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: HPvPg6xFySEhWmdrg4NYiTGTaXuznPFF566a7eomQxw=)
2: sZJjT_2snQotK3ftEGw_d9sZrf0.roa (hash: ZP0upJCIf42M9db5/txOE5l9C4b/LsGAyR1WtYBipm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:57:d2:da:2d:af:fb:16:15:fc:a5:d1:ba:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Apr 16 20:00:20 2026 GMT
Not After : Apr 17 20:00:20 2026 GMT
Subject: CN=35d0cf407c49cd55c02d71064ae2e739c958cc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:99:52:09:0e:e9:df:c9:34:db:ee:dc:65:
cf:e5:70:cd:d8:70:69:d4:e4:df:4c:3c:b6:25:25:
87:28:5d:9c:59:2c:b3:45:5c:f5:da:75:3c:b8:e9:
7a:df:65:8c:fd:cc:00:41:ea:64:e1:7f:13:3a:c2:
6c:8c:99:84:c3:fc:ab:63:71:de:c7:0f:20:a9:e5:
64:9b:ff:22:46:c1:11:10:c2:b8:76:79:73:93:62:
88:98:e3:0d:60:ea:7a:fc:14:b9:14:ee:a2:7f:16:
f0:95:88:e6:20:29:f6:3f:96:7a:ab:f9:7c:4d:ef:
d6:95:13:a2:ac:b0:d0:5d:b5:c1:b8:98:3a:7a:cc:
a0:84:42:52:e8:4d:12:a2:df:c8:4c:bf:2f:ce:14:
f0:4d:71:ea:be:0a:a9:d9:31:be:9d:5d:97:26:e0:
2e:7e:62:68:23:a3:a9:a1:d4:37:6f:d7:90:7b:3f:
6a:b9:83:5e:70:04:93:94:a8:71:57:4c:e8:c8:a9:
2d:a2:28:3e:ad:ac:5c:07:81:9c:5c:b2:b0:ec:fd:
5c:0a:7d:4b:9e:46:a1:53:41:d5:9e:16:a5:73:df:
44:e6:61:b1:8d:ae:ca:da:9d:02:39:5e:ab:c0:77:
7e:8f:7b:a4:d3:52:be:d4:04:32:85:22:d3:54:72:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:CF:40:7C:49:CD:55:C0:2D:71:06:4A:E2:E7:39:C9:58:CC:14
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2d:5e:94:99:da:71:7e:05:88:ea:4a:00:3a:fe:e6:65:b7:
f5:6d:c3:17:14:ee:03:57:61:9e:e7:f7:0e:44:a7:db:43:ec:
86:d0:66:50:18:02:16:8d:18:59:a5:aa:10:d7:5e:93:11:8f:
89:7d:e9:2e:37:89:34:b5:25:84:fb:93:ad:71:11:0a:10:22:
b4:a9:bf:b8:a9:ba:f2:aa:ce:9c:a6:15:c6:9c:15:b6:89:a4:
72:2e:df:ec:ae:e8:62:85:01:9e:69:2c:19:dd:6c:d9:63:68:
bf:b1:ed:1d:78:2b:05:e2:69:12:2e:de:fe:57:13:73:3b:74:
b6:ba:59:50:26:69:3e:2b:38:8e:5b:6b:8e:16:f4:1a:17:cf:
e2:7e:83:e1:34:5e:c5:6c:25:89:3e:1f:96:05:f5:45:98:fa:
b9:ff:3c:25:48:a9:d0:1e:c7:9c:ef:14:3b:99:64:da:6d:61:
c8:ad:41:e8:16:50:a7:55:6e:6d:26:62:9e:6a:a0:28:34:f1:
2b:e8:ed:23:17:ca:82:1f:e3:77:2f:d5:e5:7b:bb:50:17:63:
65:6e:92:34:ac:ca:7c:6e:6a:ef:36:64:f0:31:d6:9b:09:31:
17:45:18:85:0f:a2:5a:fd:d0:88:35:c7:35:9f:be:f9:6b:5a:
f8:df:0a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4VfS2i2v+xYV/KXRuuJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDRhMDlhNDU5NmQ4MTU3ZGE2OWRjMzM0NmM1YWJjZTRj
ZTRlMTMwHhcNMjYwNDE2MjAwMDIwWhcNMjYwNDE3MjAwMDIwWjAzMTEwLwYDVQQD
EygzNWQwY2Y0MDdjNDljZDU1YzAyZDcxMDY0YWUyZTczOWM5NThjYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv6ZUgkO6d/JNNvu3GXP5XDN2HBp
1OTfTDy2JSWHKF2cWSyzRVz12nU8uOl632WM/cwAQepk4X8TOsJsjJmEw/yrY3He
xw8gqeVkm/8iRsEREMK4dnlzk2KImOMNYOp6/BS5FO6ifxbwlYjmICn2P5Z6q/l8
Te/WlROirLDQXbXBuJg6esyghEJS6E0Sot/ITL8vzhTwTXHqvgqp2TG+nV2XJuAu
fmJoI6OpodQ3b9eQez9quYNecASTlKhxV0zoyKktoig+raxcB4GcXLKw7P1cCn1L
nkahU0HVnhalc99E5mGxja7K2p0COV6rwHd+j3uk01K+1AQyhSLTVHL0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXQz0B8Sc1VwC1xBkri5znJWMwUMB8GA1UdIwQY
MBaAFJUEoJpFltgVfaadwzRsWrzkzk4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFTZ21rV1cyQlY5cHAzRE5HeGF2T1RPVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85ZWFmNWMtOGM1NC00NWVkLWJmYzQt
NjczYzM4ODkxNjFkLzEvbFFTZ21rV1cyQlY5cHAzRE5HeGF2T1RPVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85ZWFmNWMtOGM1NC00NWVkLWJmYzQtNjczYzM4ODkxNjFk
LzEvbFFTZ21rV1cyQlY5cHAzRE5HeGF2T1RPVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXS1elJna
cX4FiOpKADr+5mW39W3DFxTuA1dhnuf3DkSn20PshtBmUBgCFo0YWaWqENdekxGP
iX3pLjeJNLUlhPuTrXERChAitKm/uKm68qrOnKYVxpwVtomkci7f7K7oYoUBnmks
Gd1s2WNov7HtHXgrBeJpEi7e/lcTczt0trpZUCZpPis4jltrjhb0GhfP4n6D4TRe
xWwliT4flgX1RZj6uf88JUip0B7HnO8UO5lk2m1hyK1B6BZQp1VubSZinmqgKDTx
K+jtIxfKgh/jdy/V5Xu7UBdjZW6SNKzKfG5q7zZk8DHWmwkxF0UYhQ+iWv3QiDXH
NZ+++Wta+N8K9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:37 2026 by rpki-client