Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: fqgArA967PPXj9k1qyfE6PlHKM79HkfwxbAAz8z2pbE=
Subject key identifier: B0:F7:93:2A:C7:B1:FF:20:9B:7C:BC:D4:84:5C:6E:77:F5:FA:83:EB
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019D985043035B57A6CEE755B17D34233D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 069D
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: GFIibP3fcCQAXue-pLs_MEmE4aM.roa (hash: vZPkadzf5zT9TuSZwyNbMA/XV23iCETvdmYU8OniDec=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: VJNOso/Jjk4O1e9Nx1+zvDX5h0W85Cnb9B1IZPtVfYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:43:03:5b:57:a6:ce:e7:55:b1:7d:34:23:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=b0f7932ac7b1ff209b7cbcd4845c6e77f5fa83eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:d2:78:f0:2d:45:03:2d:09:05:04:3e:5c:
b6:54:4a:36:e1:57:8c:d4:11:64:47:46:96:91:1e:
a6:20:70:3d:54:6b:4c:a4:b9:b9:6e:fe:7a:b3:dc:
e6:f6:e0:e5:ee:29:1a:c5:46:36:9e:89:8b:35:61:
ef:97:5d:8b:35:4e:ad:8a:8a:b3:5a:ef:7f:c6:35:
f5:bd:a4:09:9a:88:86:c7:6f:77:19:52:42:5b:fd:
4e:67:f5:5a:7e:28:9c:22:6e:eb:54:5b:de:a5:e3:
5d:b2:24:2f:a1:c0:fd:d8:53:8b:a1:92:75:a9:ac:
fa:66:dd:9d:67:be:b5:51:ff:29:d3:69:15:58:71:
cd:dd:6b:c8:f6:3d:65:30:ae:6b:dd:44:64:84:71:
93:e3:40:cd:5d:85:79:b4:01:c2:3c:98:f1:73:f6:
5d:df:c1:c8:be:31:fb:99:b4:c7:8b:33:77:8f:55:
09:61:2a:d1:2f:d1:7e:51:c8:38:78:16:0a:bf:63:
0a:55:7b:90:06:96:1d:e5:c1:3a:74:4f:77:21:bb:
d8:9e:70:1b:92:37:78:2d:40:3b:6e:f2:22:e3:a2:
98:de:8f:42:72:41:3b:b9:9d:a1:a8:a7:d3:a6:b7:
0e:c5:5b:53:33:48:7c:c0:c4:8b:59:e4:ad:f5:63:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:93:2A:C7:B1:FF:20:9B:7C:BC:D4:84:5C:6E:77:F5:FA:83:EB
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:38:99:ce:ff:23:df:28:5a:64:29:10:81:1d:f6:6a:52:3b:
03:27:74:96:1c:08:ef:82:d0:dc:ee:40:c2:10:29:f4:f9:40:
0f:ab:e4:12:2c:0d:a9:99:82:da:52:fb:d3:04:fa:05:8a:30:
54:0d:da:2f:fa:66:6a:22:74:2e:20:ce:8f:85:66:f0:39:d1:
aa:da:5b:ac:67:ff:ed:41:fe:cf:f8:9e:e6:52:e7:7c:5f:78:
82:1d:67:8f:93:ac:89:ad:52:bc:01:61:c2:cc:4b:70:c8:7e:
78:ad:4a:de:61:fb:44:02:28:05:27:80:ff:6e:6e:01:02:82:
ff:0c:8e:2d:30:3e:61:ee:87:e1:d2:3f:04:ab:86:09:11:f7:
3a:74:46:a4:f0:a2:c2:a1:3f:cb:5a:82:c4:0b:82:9c:a8:6a:
c8:8d:56:d9:70:4c:54:0a:ac:ec:3e:7f:5b:6a:1b:6d:23:8b:
80:a4:29:cc:35:9f:9a:86:aa:ce:3e:2e:a2:e5:8b:ea:ab:d5:
aa:73:5d:23:60:01:e8:e6:3d:bb:6c:61:db:2a:33:a8:f3:46:
d3:2a:d7:79:e9:ca:8f:04:54:cb:63:60:81:df:75:b5:94:48:
7d:f8:48:ca:cb:ce:47:05:f2:fb:f2:b6:d5:16:04:bd:d9:91:
f0:cf:f0:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEMDW1emzudVsX00Iz2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj
ZjgyZjEwHhcNMjYwNDE2MjIwMTI5WhcNMjYwNDE3MjIwMTI5WjAzMTEwLwYDVQQD
EyhiMGY3OTMyYWM3YjFmZjIwOWI3Y2JjZDQ4NDVjNmU3N2Y1ZmE4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B/SePAtRQMtCQUEPly2VEo24VeM
1BFkR0aWkR6mIHA9VGtMpLm5bv56s9zm9uDl7ikaxUY2nomLNWHvl12LNU6tioqz
Wu9/xjX1vaQJmoiGx293GVJCW/1OZ/VafiicIm7rVFvepeNdsiQvocD92FOLoZJ1
qaz6Zt2dZ761Uf8p02kVWHHN3WvI9j1lMK5r3URkhHGT40DNXYV5tAHCPJjxc/Zd
38HIvjH7mbTHizN3j1UJYSrRL9F+Ucg4eBYKv2MKVXuQBpYd5cE6dE93IbvYnnAb
kjd4LUA7bvIi46KY3o9CckE7uZ2hqKfTprcOxVtTM0h8wMSLWeSt9WO7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD3kyrHsf8gm3y81IRcbnf1+oPrMB8GA1UdIwQY
MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et
ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5
LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjiZzv8j
3yhaZCkQgR32alI7Ayd0lhwI74LQ3O5AwhAp9PlAD6vkEiwNqZmC2lL70wT6BYow
VA3aL/pmaiJ0LiDOj4Vm8DnRqtpbrGf/7UH+z/ie5lLnfF94gh1nj5Osia1SvAFh
wsxLcMh+eK1K3mH7RAIoBSeA/25uAQKC/wyOLTA+Ye6H4dI/BKuGCRH3OnRGpPCi
wqE/y1qCxAuCnKhqyI1W2XBMVAqs7D5/W2obbSOLgKQpzDWfmoaqzj4uouWL6qvV
qnNdI2AB6OY9u2xh2yozqPNG0yrXeenKjwRUy2Nggd91tZRIffhIysvORwXy+/K2
1RYEvdmR8M/wMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:33 2026 by rpki-client