Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: 4cwgdb4QEeZ8JcggCkSxmAkpuMrVdfz9GaiA32IMOt4=
Subject key identifier: 03:3F:06:10:65:EF:7B:BB:90:70:43:44:CA:E2:11:04:02:75:10:3A
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 019D38D2BA875C6FCED30C44B6174F2BB188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: UQSUyaKQLKBDI0fD49PxGonK4q8aAUkTj0HF0jw2jsw=)
2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ba:87:5c:6f:ce:d3:0c:44:b6:17:4f:2b:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=033f061065ef7bbb90704344cae211040275103a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:c5:ef:1d:fd:63:d3:92:df:59:11:1c:1a:
d8:0a:c2:a2:a2:0f:8d:5f:34:46:15:d2:7c:cd:db:
94:8a:b0:1d:21:4f:f8:da:46:5e:9e:48:2d:9a:af:
8d:9c:60:ee:b9:0e:b7:ae:7b:f2:43:6e:3c:a7:16:
e6:76:61:c6:e3:88:cc:fd:6b:5b:9a:49:4d:d2:fb:
fc:8d:40:11:f4:84:66:53:0e:50:4d:ad:26:8c:55:
59:26:7e:50:4f:f7:4c:96:6b:1e:1b:27:2b:4e:98:
de:5a:3d:c5:83:31:fc:95:a1:1c:80:8a:7a:61:d5:
3f:ef:b6:6c:aa:30:5d:08:16:9a:5a:ad:ab:48:f2:
07:f1:8c:22:25:18:b5:9d:bb:9c:c2:fc:26:b4:22:
8c:fd:7e:d4:38:a9:7c:35:fb:21:47:50:91:fb:1d:
6c:ce:15:fb:5d:09:9c:5c:b1:76:a4:0b:cd:da:da:
39:68:06:1c:00:de:c3:20:1f:03:b1:1d:e6:14:d0:
f0:4f:a4:d2:c7:df:b3:9a:32:e0:4c:16:7f:06:bb:
b4:4e:98:aa:0e:97:37:38:21:47:73:c4:d5:4c:3f:
b2:a9:af:9e:c4:a7:73:2e:dc:e4:60:82:11:c2:3b:
cd:64:6e:09:ad:6e:25:36:73:20:a2:f1:a5:96:9c:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:06:10:65:EF:7B:BB:90:70:43:44:CA:E2:11:04:02:75:10:3A
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:5c:30:2e:c3:11:4b:ef:31:57:73:5c:c6:b6:96:e9:ab:
0b:8a:3e:69:61:b4:5b:3f:22:a2:f9:1a:68:19:c4:71:b2:d8:
bf:02:5f:0c:49:30:87:b8:93:ae:5c:2d:91:d5:2e:06:51:ef:
03:ac:3a:74:bf:91:47:60:79:17:63:6a:4e:18:fb:0b:cf:b7:
1f:5a:83:e3:1c:d9:28:c4:30:89:c6:fa:c5:57:cc:a9:83:db:
67:a1:9b:4e:ec:55:65:4e:a3:78:39:9f:a6:4a:23:33:95:54:
60:22:f2:4a:2f:ef:7f:fb:e0:63:13:ad:66:77:83:4e:49:49:
cc:e0:a3:73:55:7e:08:1b:65:97:9d:53:39:34:df:f9:37:57:
08:8b:ff:68:93:da:82:cb:83:54:1a:32:29:22:65:57:1a:c3:
1e:41:c3:18:95:a2:8f:2e:02:3b:52:00:18:49:bf:f5:c7:ac:
47:56:e3:0b:da:36:e9:6f:ba:8d:8a:62:a1:4c:84:41:4d:c9:
97:55:4c:2f:29:04:9d:82:47:d6:99:0a:59:ef:f4:34:b1:1a:
e7:86:f9:98:7d:04:c9:cf:ed:a1:06:92:e8:4b:53:96:d7:ca:
5d:63:3b:09:c5:b1:65:5a:9c:fd:37:ef:39:fa:75:69:a7:9a:
74:3f:10:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rqHXG/O0wxEthdPK7GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk
OGQzMmIwHhcNMjYwMzI5MDkwMDI3WhcNMjYwMzMwMDkwMDI3WjAzMTEwLwYDVQQD
EygwMzNmMDYxMDY1ZWY3YmJiOTA3MDQzNDRjYWUyMTEwNDAyNzUxMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz7F7x39Y9OS31kRHBrYCsKiog+N
XzRGFdJ8zduUirAdIU/42kZenkgtmq+NnGDuuQ63rnvyQ248pxbmdmHG44jM/Wtb
mklN0vv8jUAR9IRmUw5QTa0mjFVZJn5QT/dMlmseGycrTpjeWj3FgzH8laEcgIp6
YdU/77ZsqjBdCBaaWq2rSPIH8YwiJRi1nbucwvwmtCKM/X7UOKl8NfshR1CR+x1s
zhX7XQmcXLF2pAvN2to5aAYcAN7DIB8DsR3mFNDwT6TSx9+zmjLgTBZ/Bru0Tpiq
Dpc3OCFHc8TVTD+yqa+exKdzLtzkYIIRwjvNZG4JrW4lNnMgovGllpzx2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM/BhBl73u7kHBDRMriEQQCdRA6MB8GA1UdIwQY
MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt
OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm
LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBxcMC7D
EUvvMVdzXMa2lumrC4o+aWG0Wz8iovkaaBnEcbLYvwJfDEkwh7iTrlwtkdUuBlHv
A6w6dL+RR2B5F2NqThj7C8+3H1qD4xzZKMQwicb6xVfMqYPbZ6GbTuxVZU6jeDmf
pkojM5VUYCLySi/vf/vgYxOtZneDTklJzOCjc1V+CBtll51TOTTf+TdXCIv/aJPa
gsuDVBoyKSJlVxrDHkHDGJWijy4CO1IAGEm/9cesR1bjC9o26W+6jYpioUyEQU3J
l1VMLykEnYJH1pkKWe/0NLEa54b5mH0Eyc/toQaS6EtTltfKXWM7CcWxZVqc/Tfv
Ofp1aaeadD8Qfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:12 2026 by rpki-client