Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json)
Hash identifier: LIvXuhfvYkZRHa6p7j8Z/41xGa1nW2EpWCOIa84zaG0=
Subject key identifier: B9:AA:DD:18:EB:20:3A:53:D3:E6:E7:7E:C5:C6:2C:34:1A:E0:DD:A0
Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Certificate serial: 019D3789BD3C32F612CA684B5BE89536F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
Manifest number: 0218
Signing time: Sun 29 Mar 2026 03:01:06 +0000
Manifest this update: Sun 29 Mar 2026 03:01:06 +0000
Manifest next update: Mon 30 Mar 2026 03:01:06 +0000
Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: 43FTbyGJmbJ/ANENDgO1V/CLCy147mZmdDYoPps0ZKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bd:3c:32:f6:12:ca:68:4b:5b:e8:95:36:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Validity
Not Before: Mar 29 03:01:06 2026 GMT
Not After : Mar 30 03:01:06 2026 GMT
Subject: CN=b9aadd18eb203a53d3e6e77ec5c62c341ae0dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:4f:2c:a0:37:84:98:45:83:cf:7a:ed:27:
9e:f6:f5:bb:2e:3f:a2:d7:85:63:02:60:40:d9:68:
11:77:53:33:6e:6d:0c:9d:34:ab:01:59:23:3e:8e:
0f:a7:7d:9f:0a:bb:63:8f:45:9d:81:90:b4:6d:aa:
0d:db:cf:12:72:8b:70:39:c3:61:aa:16:20:00:13:
4e:a4:6b:8e:14:a2:3b:65:99:45:f8:0c:ac:ce:fa:
18:43:f9:54:d4:b5:2a:66:9d:6f:c4:38:b2:16:00:
64:91:71:33:f6:af:06:d1:61:56:86:2b:ee:57:b7:
03:55:67:8d:6d:29:39:63:9b:a2:34:ad:68:2a:10:
bd:91:a1:d4:f6:76:a7:33:cb:7d:8c:4f:ef:f0:88:
d0:70:82:d9:bf:a6:01:98:f1:38:b0:7c:7d:eb:8b:
c3:fe:7a:e4:d7:ed:c9:4d:06:c8:55:f1:52:18:10:
bb:64:c3:88:c0:cd:79:8d:f0:18:f8:5f:29:07:30:
af:d2:a9:39:7c:0f:38:4b:cb:30:10:bf:59:f0:d3:
99:6f:08:76:d7:ce:28:50:40:eb:11:e4:c9:1f:12:
41:3f:b4:50:60:de:43:dd:f0:f1:df:95:64:d3:d9:
d5:6e:d6:74:28:39:54:0d:10:8b:9b:4c:ea:29:17:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:DD:18:EB:20:3A:53:D3:E6:E7:7E:C5:C6:2C:34:1A:E0:DD:A0
X509v3 Authority Key Identifier:
keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7e:57:71:dd:b5:fc:fb:11:43:c8:6e:4d:18:8b:9f:1c:d9:
06:21:f9:fb:b4:9b:d2:17:cc:ed:0f:23:1b:d6:f4:9d:28:59:
4d:fd:eb:d2:dd:ba:5e:75:ea:a5:97:cf:07:49:a5:41:a4:d1:
2e:8b:af:bb:a8:dd:aa:3b:2a:8f:73:36:db:b0:2b:a8:83:b4:
4e:9c:ec:b3:b5:a1:20:52:b8:f4:59:85:f8:99:30:ef:f8:19:
7c:2d:3d:8c:77:db:64:c3:2c:bc:c8:60:58:a1:8d:d0:4b:df:
46:13:79:c6:07:d6:af:a4:db:5f:4a:d2:b5:b2:db:56:37:8c:
ce:90:cc:8f:35:d6:d6:c1:2f:0f:2b:07:f5:0a:11:2b:d9:bd:
1d:d3:5f:8c:48:1f:23:71:40:ed:ee:21:40:46:11:54:4d:a7:
d5:3e:20:68:e5:1a:84:fb:46:f0:cd:95:fd:12:12:66:c9:57:
a7:bd:5c:38:05:c8:18:d4:ea:4c:5b:a5:6b:7b:46:29:fe:f6:
77:7d:1d:69:79:28:1a:91:90:d0:70:e6:26:8b:78:26:3e:d1:
34:14:5f:2d:e3:c8:d0:63:d1:01:cb:77:ba:0f:60:8b:68:9d:
36:64:66:de:b5:5d:0b:30:b4:a6:e7:dd:c9:b5:f6:5c:86:5a:
af:fa:a5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ib08MvYSymhLW+iVNvIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYmJlZGU2NDk2ZjcxNzI3NzY4YWY2YjYxYjBiZGQzMGUy
MTcwYjAwHhcNMjYwMzI5MDMwMTA2WhcNMjYwMzMwMDMwMTA2WjAzMTEwLwYDVQQD
EyhiOWFhZGQxOGViMjAzYTUzZDNlNmU3N2VjNWM2MmMzNDFhZTBkZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1PLKA3hJhFg8967See9vW7Lj+i
14VjAmBA2WgRd1Mzbm0MnTSrAVkjPo4Pp32fCrtjj0WdgZC0baoN288ScotwOcNh
qhYgABNOpGuOFKI7ZZlF+AyszvoYQ/lU1LUqZp1vxDiyFgBkkXEz9q8G0WFWhivu
V7cDVWeNbSk5Y5uiNK1oKhC9kaHU9nanM8t9jE/v8IjQcILZv6YBmPE4sHx964vD
/nrk1+3JTQbIVfFSGBC7ZMOIwM15jfAY+F8pBzCv0qk5fA84S8swEL9Z8NOZbwh2
184oUEDrEeTJHxJBP7RQYN5D3fDx35Vk09nVbtZ0KDlUDRCLm0zqKResvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmq3RjrIDpT0+bnfsXGLDQa4N2gMB8GA1UdIwQY
MBaAFOC77eZJb3Fyd2iva2GwvdMOIXCwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2Qt
MDBmODM5ODdiZWQ3LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2QtMDBmODM5ODdiZWQ3
LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX5Xcd21
/PsRQ8huTRiLnxzZBiH5+7Sb0hfM7Q8jG9b0nShZTf3r0t26XnXqpZfPB0mlQaTR
Louvu6jdqjsqj3M227ArqIO0Tpzss7WhIFK49FmF+Jkw7/gZfC09jHfbZMMsvMhg
WKGN0EvfRhN5xgfWr6TbX0rStbLbVjeMzpDMjzXW1sEvDysH9QoRK9m9HdNfjEgf
I3FA7e4hQEYRVE2n1T4gaOUahPtG8M2V/RISZslXp71cOAXIGNTqTFula3tGKf72
d30daXkoGpGQ0HDmJot4Jj7RNBRfLePI0GPRAct3ug9gi2idNmRm3rVdCzC0pufd
ybX2XIZar/ql7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:11 2026 by rpki-client