Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: jAaaNwqlcoJBeSPfgNz0ZMh27BPbdVX+NUAtqC1gjL4=
Subject key identifier: 91:39:64:17:76:6F:E3:C8:41:65:5F:1F:0F:57:BB:A4:80:BC:1F:47
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019FA14D78588F4FCE1E2015C9DA4B6DD0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 17DF
Signing time: Mon 27 Jul 2026 02:00:36 +0000
Manifest this update: Mon 27 Jul 2026 02:00:36 +0000
Manifest next update: Tue 28 Jul 2026 02:00:36 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: 8Ru/XE/HHmsjbKCVtqFpx6bkyj7NkhZTb419vnWIKS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:78:58:8f:4f:ce:1e:20:15:c9:da:4b:6d:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jul 27 02:00:36 2026 GMT
Not After : Jul 28 02:00:36 2026 GMT
Subject: CN=91396417766fe3c841655f1f0f57bba480bc1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:83:d7:f7:f9:08:67:21:a1:3c:ee:af:ba:
69:07:db:6b:bb:3c:65:b4:cf:ba:e2:cf:fb:40:75:
69:dc:5a:63:c4:56:72:9b:6f:7c:5e:ef:74:19:27:
97:01:95:22:48:6e:f6:58:55:d5:1e:c7:72:87:80:
ca:16:a0:34:e4:0d:bb:31:45:6f:fe:78:10:f2:7e:
62:11:02:21:dd:fb:f9:20:d5:1e:29:91:97:36:1c:
5d:f8:4d:38:36:33:bd:e5:cf:a0:89:a0:1b:de:2e:
0e:d1:06:b6:93:cd:c3:17:07:b8:3d:1a:d4:2d:62:
d5:a8:85:07:97:56:0f:36:61:29:d6:77:54:d1:cb:
75:96:39:c5:45:58:92:b3:d1:c1:d4:96:56:c2:46:
7d:c8:f1:5a:43:ef:ca:be:2c:18:1d:d2:ec:d3:c3:
e2:d0:58:d6:b6:fa:c7:4b:76:81:b4:20:e2:2f:bb:
77:91:e6:62:7f:9e:ce:7a:97:4b:cf:c8:42:63:02:
26:78:71:bf:ad:a3:a5:cb:0d:52:6a:5d:df:f6:45:
91:d7:ee:09:cc:d1:6b:e8:7f:b5:bc:8b:dd:1a:6f:
18:1c:80:8d:86:22:45:ac:29:c8:73:16:ff:2b:b2:
1e:8d:e8:2b:ba:2a:25:54:cc:30:3d:59:e3:cb:53:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:64:17:76:6F:E3:C8:41:65:5F:1F:0F:57:BB:A4:80:BC:1F:47
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:81:f9:df:c5:8d:31:e5:ad:f7:68:12:b1:f3:c3:cf:3d:ae:
2d:f2:58:d7:88:ab:12:aa:93:ff:09:f6:8b:07:69:2d:0e:a9:
c3:71:a3:8f:14:67:7a:2b:9c:9b:f5:40:69:b7:da:7e:db:1f:
53:f2:11:4a:b2:b1:44:fa:ea:16:23:7b:3b:d6:8a:dd:16:2c:
63:92:bf:ac:da:bd:03:30:6f:04:ec:2d:54:ab:c9:46:a5:65:
7e:71:2c:df:0a:88:09:55:85:27:91:b2:6b:3d:29:82:09:65:
a4:fd:c4:4e:14:2f:e2:e1:58:98:61:74:cc:be:82:5b:4c:ce:
d5:4f:82:1c:77:dc:af:12:42:f0:b7:13:14:99:d3:c2:bb:64:
2a:e2:43:c6:a3:4a:1d:ff:07:2c:1a:4d:23:4e:ec:a8:35:8b:
93:6b:db:d1:ce:09:eb:0e:73:6f:f3:ba:05:46:f2:f2:9c:71:
68:92:b7:df:a4:c6:ec:fc:5b:be:d3:a8:e6:79:52:66:66:0f:
65:78:6f:ef:5e:98:43:a1:21:e3:5a:f9:00:08:3f:f0:ae:cf:
62:64:9f:19:0d:9e:fd:57:cf:5d:8a:57:f6:10:db:e9:de:96:
b3:9a:2a:78:7c:cd:89:0c:a9:f6:68:66:77:a5:aa:f0:67:77:
89:ed:3e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTXhYj0/OHiAVydpLbdDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzYwZDRkNDU4Y2VjM2I4ZDYxOGEwMTMwMDY0MmI1ODhj
MzE3M2IwHhcNMjYwNzI3MDIwMDM2WhcNMjYwNzI4MDIwMDM2WjAzMTEwLwYDVQQD
Eyg5MTM5NjQxNzc2NmZlM2M4NDE2NTVmMWYwZjU3YmJhNDgwYmMxZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XOD1/f5CGchoTzur7ppB9truzxl
tM+64s/7QHVp3FpjxFZym298Xu90GSeXAZUiSG72WFXVHsdyh4DKFqA05A27MUVv
/ngQ8n5iEQIh3fv5INUeKZGXNhxd+E04NjO95c+giaAb3i4O0Qa2k83DFwe4PRrU
LWLVqIUHl1YPNmEp1ndU0ct1ljnFRViSs9HB1JZWwkZ9yPFaQ+/KviwYHdLs08Pi
0FjWtvrHS3aBtCDiL7t3keZif57OepdLz8hCYwImeHG/raOlyw1Sal3f9kWR1+4J
zNFr6H+1vIvdGm8YHICNhiJFrCnIcxb/K7IejegruiolVMwwPVnjy1N4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE5ZBd2b+PIQWVfHw9Xu6SAvB9HMB8GA1UdIwQY
MBaAFJfGDU1FjOw7jWGKATAGQrWIwxc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2Yt
N2MwMzYxNzgxMjZjLzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2YtN2MwMzYxNzgxMjZj
LzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIH538WN
MeWt92gSsfPDzz2uLfJY14irEqqT/wn2iwdpLQ6pw3GjjxRneiucm/VAabfaftsf
U/IRSrKxRPrqFiN7O9aK3RYsY5K/rNq9AzBvBOwtVKvJRqVlfnEs3wqICVWFJ5Gy
az0pggllpP3EThQv4uFYmGF0zL6CW0zO1U+CHHfcrxJC8LcTFJnTwrtkKuJDxqNK
Hf8HLBpNI07sqDWLk2vb0c4J6w5zb/O6BUby8pxxaJK336TG7PxbvtOo5nlSZmYP
ZXhv716YQ6Eh41r5AAg/8K7PYmSfGQ2e/VfPXYpX9hDb6d6Ws5oqeHzNiQyp9mhm
d6Wq8Gd3ie0+AQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:15 2026 by rpki-client