Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
File: l04fjAqkvQNL6t2zOJvXNspEPsA.mft (raw, json)
Hash identifier: w7g8TjZnlf4vqloQGtkHF0GUdaZTj2S2oweQpHExuBY=
Subject key identifier: 75:9B:97:71:58:DB:76:68:E9:32:24:6B:D3:3F:82:23:1C:6A:C7:DB
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Certificate issuer: /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial: 01A03E29222F21C29A6C3E235A5C347E2C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
Manifest number: 14
Signing time: Wed 26 Aug 2026 13:01:18 +0000
Manifest this update: Wed 26 Aug 2026 13:01:18 +0000
Manifest next update: Thu 27 Aug 2026 13:01:18 +0000
Files and hashes: 1: 7BZeedmWNxSvPKrlY8KT7vjjkl0.asa (hash: rlQ8KOmIrplS+aFjafrA9Je7LwJ3y4Bn50nbQiuj0HQ=)
2: ZZNTkdQ0qNkUIt1x3DBM_QEjN9g.asa (hash: y6tGnMrTFQWrlwh5vodKSvzloXocim8c4Iw4u+NzLfI=)
3: l04fjAqkvQNL6t2zOJvXNspEPsA.crl (hash: 48M2QvBxLEvwmOhpA7C72feN7Fh7n4484+P1b8FInW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:29:22:2f:21:c2:9a:6c:3e:23:5a:5c:34:7e:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Validity
Not Before: Aug 26 13:01:18 2026 GMT
Not After : Aug 27 13:01:18 2026 GMT
Subject: CN=759b977158db7668e932246bd33f82231c6ac7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:f7:b2:a6:63:b9:af:10:ce:a2:b4:a0:c6:
e1:d6:d5:fc:8c:8c:3c:94:cc:f3:e9:cc:80:e2:dd:
c0:08:4b:f4:0c:21:61:94:03:a3:b0:89:82:23:88:
a5:ce:11:bf:58:ce:06:79:f1:12:10:5e:81:2a:3b:
31:3d:a3:9a:e5:45:9c:43:e6:1f:3d:d8:b1:ba:90:
78:4d:1b:ec:3b:52:e1:7b:3a:97:31:a0:7a:ca:bb:
5d:04:fe:e8:81:9d:87:b2:42:00:2b:e9:10:f7:c2:
6e:dc:25:8a:75:7e:5e:6b:5f:54:46:0b:28:a6:8b:
83:8f:d8:0f:e3:54:30:eb:bc:9b:3b:53:03:8b:c0:
37:cb:55:b3:4e:f8:f5:1e:52:f1:1b:f2:8d:9d:fc:
6e:e9:1c:c9:b7:b3:d1:35:17:ff:ee:08:bb:e3:e0:
16:7d:6e:d4:ab:ab:0a:6c:74:de:ff:c5:20:8e:c6:
49:7e:38:e6:c6:e3:85:8a:11:ac:10:89:62:b4:90:
e4:11:27:77:9c:6b:1a:18:df:59:28:79:e0:32:45:
4c:32:45:e4:cb:2f:40:9c:c5:de:65:7e:c4:3e:b7:
78:b2:5e:f7:57:11:a7:7d:fb:e0:50:34:ad:e1:83:
32:0e:14:84:3c:d5:b8:f9:98:45:78:42:a6:24:16:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:97:71:58:DB:76:68:E9:32:24:6B:D3:3F:82:23:1C:6A:C7:DB
X509v3 Authority Key Identifier:
keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c9:fe:52:43:15:48:bf:7e:41:ae:ca:58:25:65:5f:de:91:
bd:93:e8:18:f6:55:82:be:d3:23:b8:7e:be:f9:60:07:bd:08:
d6:4b:50:c2:fc:14:6a:60:44:92:cb:66:55:dc:4e:ea:c3:80:
6a:b1:3b:aa:2d:f3:bc:ad:a1:ce:a5:ee:48:c4:e1:3d:76:11:
bf:da:f6:99:44:15:bd:4a:16:3a:be:de:a5:5e:0f:fa:ad:a7:
74:59:31:6a:b9:01:50:de:e8:5f:f9:c0:59:24:32:45:f3:40:
59:40:b7:c1:e2:72:71:e0:e7:04:da:08:35:4e:59:28:ea:16:
99:39:d1:d0:9e:f3:88:93:c3:f7:f5:61:b4:03:53:89:86:75:
73:97:ea:06:08:6e:d6:a6:de:15:4a:83:ad:0e:01:67:c6:98:
a7:c7:28:97:7f:98:d8:7d:fe:27:a9:5e:11:8c:4d:ef:38:ba:
1c:c6:11:3d:af:11:4e:1b:b9:21:73:02:aa:70:55:ef:03:b9:
c5:b8:38:ab:cc:95:f6:5a:73:7c:aa:32:f4:f3:e1:6e:6b:6f:
d4:30:71:74:cb:5b:31:34:dc:50:fd:e1:2d:13:bd:9a:a0:78:
74:09:52:b1:79:92:a8:8d:12:2e:70:e2:bf:12:f8:c9:be:35:
42:64:41:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+KSIvIcKabD4jWlw0fiyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUxZjhjMGFhNGJkMDM0YmVhZGRiMzM4OWJkNzM2Y2E0
NDNlYzAwHhcNMjYwODI2MTMwMTE4WhcNMjYwODI3MTMwMTE4WjAzMTEwLwYDVQQD
Eyg3NTliOTc3MTU4ZGI3NjY4ZTkzMjI0NmJkMzNmODIyMzFjNmFjN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qj3sqZjua8QzqK0oMbh1tX8jIw8
lMzz6cyA4t3ACEv0DCFhlAOjsImCI4ilzhG/WM4GefESEF6BKjsxPaOa5UWcQ+Yf
PdixupB4TRvsO1LhezqXMaB6yrtdBP7ogZ2HskIAK+kQ98Ju3CWKdX5ea19URgso
pouDj9gP41Qw67ybO1MDi8A3y1WzTvj1HlLxG/KNnfxu6RzJt7PRNRf/7gi74+AW
fW7Uq6sKbHTe/8UgjsZJfjjmxuOFihGsEIlitJDkESd3nGsaGN9ZKHngMkVMMkXk
yy9AnMXeZX7EPrd4sl73VxGnffvgUDSt4YMyDhSEPNW4+ZhFeEKmJBbeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWbl3FY23Zo6TIka9M/giMcasfbMB8GA1UdIwQY
MBaAFJdOH4wKpL0DS+rdszib1zbKRD7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMt
ODU5Mjc4NjQ4MTEyLzEvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMtODU5Mjc4NjQ4MTEy
LzEvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMn+UkMV
SL9+Qa7KWCVlX96RvZPoGPZVgr7TI7h+vvlgB70I1ktQwvwUamBEkstmVdxO6sOA
arE7qi3zvK2hzqXuSMThPXYRv9r2mUQVvUoWOr7epV4P+q2ndFkxarkBUN7oX/nA
WSQyRfNAWUC3weJyceDnBNoINU5ZKOoWmTnR0J7ziJPD9/VhtANTiYZ1c5fqBghu
1qbeFUqDrQ4BZ8aYp8col3+Y2H3+J6leEYxN7zi6HMYRPa8RThu5IXMCqnBV7wO5
xbg4q8yV9lpzfKoy9PPhbmtv1DBxdMtbMTTcUP3hLRO9mqB4dAlSsXmSqI0SLnDi
vxL4yb41QmRBWg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:16:24 2026 by rpki-client