Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: tl10Q6Az0Pf0NvIVG2XpLFX/MrN8S1Eo+hfMYTtrwMA=
Subject key identifier: C8:EF:BD:D4:1D:6E:62:01:D9:10:52:42:60:58:17:F6:F0:3F:84:7A
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019EB7A0B780BFD983D22EDA37496EA4E5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1766
Signing time: Thu 11 Jun 2026 17:00:23 +0000
Manifest this update: Thu 11 Jun 2026 17:00:23 +0000
Manifest next update: Fri 12 Jun 2026 17:00:23 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: puaWbeubFl0qX50KHqzHhRSe5+/Ybl1I5FYfGzqI240=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b7:80:bf:d9:83:d2:2e:da:37:49:6e:a4:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jun 11 17:00:23 2026 GMT
Not After : Jun 12 17:00:23 2026 GMT
Subject: CN=c8efbdd41d6e6201d9105242605817f6f03f847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:c9:d1:49:66:4a:57:cf:31:bc:ef:81:e1:
5f:68:02:9c:8d:5d:43:ca:9d:09:c6:92:8c:17:1c:
55:b2:f1:8e:17:9d:5a:46:e3:da:e2:74:fb:a3:a3:
22:10:ef:22:46:7d:a0:f8:61:4c:80:70:62:21:43:
14:a6:89:87:70:92:f6:58:98:e9:64:a6:64:31:4d:
b7:1a:b9:9b:f7:d7:0a:d4:07:ab:20:eb:68:54:c6:
86:c1:0e:d2:d2:66:73:de:28:d6:a9:0d:df:30:a4:
70:4a:88:de:67:ef:d9:62:33:37:57:ff:ce:59:c4:
5a:28:ab:f1:f7:1f:0e:c6:6c:f2:d3:6a:c0:61:4e:
52:77:39:dd:09:c5:28:de:1a:0e:01:22:28:87:e9:
bb:15:ce:e0:5a:a4:8f:60:02:bc:1e:f4:b0:b3:7a:
f6:4f:e6:3a:f2:7a:d0:ad:68:cf:3b:b9:c6:2b:b1:
ed:aa:3f:36:b6:ea:17:e7:37:80:90:27:68:d0:50:
7b:d3:58:af:13:80:78:9d:43:2b:31:3d:8e:2c:b5:
3f:b8:7e:02:d8:91:3f:68:0b:9f:4e:b5:32:26:b8:
8a:57:f4:4a:a2:11:71:ae:78:7b:15:5b:1b:d9:d6:
3b:f9:52:38:3a:5f:3d:19:83:81:36:35:9c:ac:ce:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:BD:D4:1D:6E:62:01:D9:10:52:42:60:58:17:F6:F0:3F:84:7A
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:f3:02:e6:1f:9d:83:e2:10:c3:d5:18:bd:7e:db:04:29:
fd:2c:d6:93:00:7a:f5:83:ea:03:aa:5d:fc:90:15:f8:a8:01:
ae:d5:64:02:49:a3:b4:38:1c:98:79:d8:3a:db:a5:03:2e:4b:
bd:01:ee:82:f0:60:67:00:60:a9:60:25:0e:6c:89:05:bb:da:
89:c4:0e:de:e9:00:9c:bc:28:15:87:87:df:36:32:71:21:5f:
d1:9b:c6:e4:54:10:b6:d8:e1:aa:78:1e:1f:f0:ca:45:4c:f2:
2b:62:95:b6:ea:30:f6:a7:89:b3:04:65:01:31:94:d4:3e:c9:
47:8e:4b:3f:22:9a:7c:7b:47:b7:ec:d9:d8:20:2f:1d:9d:6a:
f5:a8:92:75:cc:c1:c1:08:ad:2c:41:9e:cd:2b:a0:d7:27:f3:
9b:bc:b7:32:a5:4c:df:a7:e0:bb:d4:a0:c1:2e:d5:ed:19:14:
c1:21:e7:06:67:76:65:63:07:5b:3c:de:56:51:21:69:37:22:
3c:d0:b4:7b:0d:44:dc:2a:31:1f:d6:d8:6d:62:f9:0e:eb:2a:
c1:8f:80:c7:c9:86:f5:09:00:28:0f:f7:b6:1b:2b:54:4f:9f:
90:39:44:88:d7:5e:3b:bb:57:f4:7c:48:52:62:07:3e:53:1e:
b6:a8:d8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oLeAv9mD0i7aN0lupOWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzYwZDRkNDU4Y2VjM2I4ZDYxOGEwMTMwMDY0MmI1ODhj
MzE3M2IwHhcNMjYwNjExMTcwMDIzWhcNMjYwNjEyMTcwMDIzWjAzMTEwLwYDVQQD
EyhjOGVmYmRkNDFkNmU2MjAxZDkxMDUyNDI2MDU4MTdmNmYwM2Y4NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyfJ0UlmSlfPMbzvgeFfaAKcjV1D
yp0JxpKMFxxVsvGOF51aRuPa4nT7o6MiEO8iRn2g+GFMgHBiIUMUpomHcJL2WJjp
ZKZkMU23Grmb99cK1AerIOtoVMaGwQ7S0mZz3ijWqQ3fMKRwSojeZ+/ZYjM3V//O
WcRaKKvx9x8Oxmzy02rAYU5SdzndCcUo3hoOASIoh+m7Fc7gWqSPYAK8HvSws3r2
T+Y68nrQrWjPO7nGK7Htqj82tuoX5zeAkCdo0FB701ivE4B4nUMrMT2OLLU/uH4C
2JE/aAufTrUyJriKV/RKohFxrnh7FVsb2dY7+VI4Ol89GYOBNjWcrM5IdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjvvdQdbmIB2RBSQmBYF/bwP4R6MB8GA1UdIwQY
MBaAFJfGDU1FjOw7jWGKATAGQrWIwxc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2Yt
N2MwMzYxNzgxMjZjLzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2YtN2MwMzYxNzgxMjZj
LzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMXzAuYf
nYPiEMPVGL1+2wQp/SzWkwB69YPqA6pd/JAV+KgBrtVkAkmjtDgcmHnYOtulAy5L
vQHugvBgZwBgqWAlDmyJBbvaicQO3ukAnLwoFYeH3zYycSFf0ZvG5FQQttjhqnge
H/DKRUzyK2KVtuow9qeJswRlATGU1D7JR45LPyKafHtHt+zZ2CAvHZ1q9aiSdczB
wQitLEGezSug1yfzm7y3MqVM36fgu9SgwS7V7RkUwSHnBmd2ZWMHWzzeVlEhaTci
PNC0ew1E3CoxH9bYbWL5DusqwY+Ax8mG9QkAKA/3thsrVE+fkDlEiNdeO7tX9HxI
UmIHPlMetqjY8g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:54 2026 by rpki-client