Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: xMHd/PWNsvc2chxcNVZUL15WN6CAeWaX5e+INWJkN5E=
Subject key identifier: F4:59:52:53:37:EA:F6:08:E2:C2:E9:45:DE:38:47:A4:D0:F5:0C:EA
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019D3865BD71BCF129411EB66BDBBD329038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: D4CQiyAmkG39VoiuFE7VEfI54NY9AxGkF+2VJ/9c7iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bd:71:bc:f1:29:41:1e:b6:6b:db:bd:32:90:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=f459525337eaf608e2c2e945de3847a4d0f50cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:d8:fc:04:7e:ec:3c:85:f7:d5:9d:b7:a5:
fb:fd:d2:85:cf:e2:20:62:16:f7:bc:d2:37:0c:8f:
8b:1b:2a:94:42:66:1c:5d:1d:9c:e1:6c:a4:10:74:
75:84:91:85:ce:8f:70:29:4e:45:1a:aa:a9:f3:c4:
b5:1c:2a:50:88:1a:51:ee:5f:64:d8:58:f0:ab:80:
bf:1c:d7:0e:39:b4:cc:f7:89:ff:43:5f:37:23:42:
6d:4a:c5:f5:86:e1:cc:8a:d3:b9:3d:5e:6a:38:d7:
88:16:5b:6a:bd:fe:34:41:e2:76:fc:ca:2b:04:be:
67:e3:da:d1:76:92:85:af:11:a5:01:2b:f6:58:89:
24:59:23:2e:f4:46:00:10:ad:12:df:0a:12:1e:36:
b2:b6:93:0a:f2:6c:0c:58:7c:fa:55:a3:e6:9f:3f:
27:ef:e0:75:37:ad:83:7f:22:ad:b5:91:b9:10:80:
10:f7:1e:3c:d9:11:2a:eb:2a:b3:39:33:c5:dc:dd:
ed:54:f2:2c:b0:27:f9:0b:e1:f4:0c:9a:89:8f:f5:
f9:d8:23:64:a9:69:79:fb:17:c7:30:88:23:97:95:
15:45:08:8d:e7:42:c0:64:00:bf:a4:4d:22:a3:f4:
88:14:17:7a:30:c8:58:f7:a9:b1:07:91:b6:a4:a2:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:52:53:37:EA:F6:08:E2:C2:E9:45:DE:38:47:A4:D0:F5:0C:EA
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:95:a5:da:36:f8:01:84:9d:31:55:32:c2:12:3e:3f:30:
87:20:71:0c:d4:1d:7b:3f:c6:9d:19:65:2a:eb:0b:df:69:96:
d7:70:2f:e4:72:d0:d5:44:22:6e:91:3c:e5:aa:e0:b5:52:22:
8e:db:c2:3b:32:35:a1:81:56:99:6e:ac:7b:4b:e3:36:e0:f5:
b4:15:8a:ba:36:ff:06:19:81:12:0a:4b:58:c6:33:eb:85:15:
df:99:92:7b:52:a6:23:18:5c:b0:59:56:89:bf:27:ed:4e:b9:
99:43:cd:f3:f6:12:4e:08:0a:17:9b:dd:50:09:ef:93:70:1d:
14:85:3e:4e:74:80:7a:c4:30:80:95:db:27:e3:d1:db:10:62:
24:d7:82:cd:71:ee:0b:41:dc:8a:8f:96:5a:1d:59:44:78:75:
6e:7d:44:07:cd:51:84:4a:2f:db:a3:67:f8:bf:af:f3:4a:a9:
2f:37:cb:f3:b5:53:56:da:15:cf:38:5f:a6:63:ef:2b:ae:9f:
54:34:1a:c7:e1:09:3b:23:c6:8a:b5:e6:a7:56:04:0b:54:61:
1f:d5:5e:0b:80:0e:bb:df:d5:27:c1:b4:9d:ed:47:79:1b:6d:
39:9f:2f:81:13:c0:dd:78:5e:1c:52:4d:71:07:e6:3f:a0:3b:
f8:10:44:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zb1xvPEpQR62a9u9MpA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm
Y2ExYTUwHhcNMjYwMzI5MDcwMTI0WhcNMjYwMzMwMDcwMTI0WjAzMTEwLwYDVQQD
EyhmNDU5NTI1MzM3ZWFmNjA4ZTJjMmU5NDVkZTM4NDdhNGQwZjUwY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC3Y/AR+7DyF99Wdt6X7/dKFz+Ig
Yhb3vNI3DI+LGyqUQmYcXR2c4WykEHR1hJGFzo9wKU5FGqqp88S1HCpQiBpR7l9k
2Fjwq4C/HNcOObTM94n/Q183I0JtSsX1huHMitO5PV5qONeIFltqvf40QeJ2/Mor
BL5n49rRdpKFrxGlASv2WIkkWSMu9EYAEK0S3woSHjaytpMK8mwMWHz6VaPmnz8n
7+B1N62DfyKttZG5EIAQ9x482REq6yqzOTPF3N3tVPIssCf5C+H0DJqJj/X52CNk
qWl5+xfHMIgjl5UVRQiN50LAZAC/pE0io/SIFBd6MMhY96mxB5G2pKIX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRZUlM36vYI4sLpRd44R6TQ9QzqMB8GA1UdIwQY
MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt
ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5
LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBWVpdo2
+AGEnTFVMsISPj8whyBxDNQdez/GnRllKusL32mW13Av5HLQ1UQibpE85argtVIi
jtvCOzI1oYFWmW6se0vjNuD1tBWKujb/BhmBEgpLWMYz64UV35mSe1KmIxhcsFlW
ib8n7U65mUPN8/YSTggKF5vdUAnvk3AdFIU+TnSAesQwgJXbJ+PR2xBiJNeCzXHu
C0Hcio+WWh1ZRHh1bn1EB81RhEov26Nn+L+v80qpLzfL87VTVtoVzzhfpmPvK66f
VDQax+EJOyPGirXmp1YEC1RhH9VeC4AOu9/VJ8G0ne1HeRttOZ8vgRPA3XheHFJN
cQfmP6A7+BBErA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:07 2026 by rpki-client