Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: cYoyXyJg2RKXJWnZrgG+2NWwuUkqjEl5gUUYwGqairc=
Subject key identifier: C9:41:67:19:D4:01:9C:A1:61:69:3E:21:42:4A:5D:8B:35:EE:3E:25
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 019D389BDA1133F9B77C9BD5274E3CD34660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0C92
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: RoAssVBGdOoQ1rNxHmiH28zQh2/ssNrq/d20vFARH58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:da:11:33:f9:b7:7c:9b:d5:27:4e:3c:d3:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=c9416719d4019ca161693e21424a5d8b35ee3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:0a:c8:9e:9e:b3:46:e4:50:dd:5f:20:4d:
ea:e7:f1:cf:0e:7f:d0:07:ea:1e:61:4b:89:4e:18:
56:40:3a:54:0f:e9:ba:a0:c8:ac:bd:b2:77:db:55:
b0:e0:b7:43:34:23:59:c7:c6:ab:01:29:5e:9d:fd:
ba:e1:ef:c0:59:1e:c4:46:fe:1b:74:21:00:6f:a2:
81:4d:5f:e7:65:f4:fb:b5:56:1e:e2:77:ec:e4:d7:
f9:02:6e:d7:6c:0f:16:69:5f:c4:1a:e6:ab:fa:63:
87:90:8d:37:03:bf:29:56:68:a6:bd:27:73:2b:33:
5c:e7:ad:58:2f:f1:b7:ab:86:70:bb:e9:88:b5:f8:
a4:e9:96:2f:87:5b:96:ee:c2:5e:eb:37:9e:6d:b0:
99:71:7d:ff:cb:ab:78:0c:19:4c:46:07:5a:b3:d1:
c3:3e:4e:85:30:89:c4:3c:5d:56:8b:2f:3f:bf:61:
7d:c4:fe:c1:cc:01:40:c8:70:58:5b:02:af:16:1c:
2a:53:af:2b:a0:b4:69:0b:b5:09:e7:e0:a6:98:52:
0c:0f:aa:13:fb:f8:5a:a6:0b:7d:45:8c:66:c0:e8:
06:08:a1:2d:6c:05:9f:22:4f:c4:bc:95:7e:0e:df:
1a:6f:06:e2:6d:26:55:f6:8a:96:d3:f3:c6:97:75:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:67:19:D4:01:9C:A1:61:69:3E:21:42:4A:5D:8B:35:EE:3E:25
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:47:a9:a2:51:b7:6b:71:a4:cb:db:ba:b7:ef:bc:d6:1d:64:
1f:8e:1b:44:d1:ac:54:69:b2:68:eb:1a:75:ec:2f:5f:34:89:
e3:38:b6:3c:fd:ca:32:b5:04:36:f5:52:fc:77:d8:f1:8b:dc:
8b:ae:50:c7:d7:2e:25:b7:0a:0d:08:d8:fd:1c:d6:d7:b6:bf:
e1:b6:24:fa:b0:fb:d4:48:16:c3:cb:a2:10:4c:bf:57:8b:a2:
0d:b4:d3:e9:3a:c0:f1:31:ca:b7:4a:24:c7:c9:2f:5a:36:70:
15:b9:dd:44:0d:21:e4:d4:70:c2:88:3a:65:9b:d6:2b:db:50:
27:da:90:31:3e:47:a7:94:fb:0c:ba:e9:8b:cb:f2:0b:ce:e6:
f3:65:0a:74:c7:c7:94:c7:bc:32:c8:ef:c3:f4:12:9d:12:39:
1c:c2:95:d9:72:90:e9:98:85:71:c6:ab:5c:7a:11:d3:0d:bd:
9d:ad:a4:ff:df:8c:61:34:bc:78:3e:76:c4:71:e9:b6:5e:7c:
6d:0b:d0:81:6b:52:ef:12:9b:57:c4:06:68:a6:aa:81:ef:c6:
77:04:14:fb:d7:4e:49:ae:ce:0b:1c:8a:d4:7a:db:e4:48:e2:
e1:c9:a8:6a:75:6f:33:61:d9:d2:aa:e2:11:54:b3:26:6a:7a:
40:99:88:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m9oRM/m3fJvVJ04800ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj
MTZhODUwHhcNMjYwMzI5MDgwMDMwWhcNMjYwMzMwMDgwMDMwWjAzMTEwLwYDVQQD
EyhjOTQxNjcxOWQ0MDE5Y2ExNjE2OTNlMjE0MjRhNWQ4YjM1ZWUzZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttgKyJ6es0bkUN1fIE3q5/HPDn/Q
B+oeYUuJThhWQDpUD+m6oMisvbJ321Ww4LdDNCNZx8arASlenf264e/AWR7ERv4b
dCEAb6KBTV/nZfT7tVYe4nfs5Nf5Am7XbA8WaV/EGuar+mOHkI03A78pVmimvSdz
KzNc561YL/G3q4Zwu+mItfik6ZYvh1uW7sJe6zeebbCZcX3/y6t4DBlMRgdas9HD
Pk6FMInEPF1Wiy8/v2F9xP7BzAFAyHBYWwKvFhwqU68roLRpC7UJ5+CmmFIMD6oT
+/hapgt9RYxmwOgGCKEtbAWfIk/EvJV+Dt8abwbibSZV9oqW0/PGl3VDuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlBZxnUAZyhYWk+IUJKXYs17j4lMB8GA1UdIwQY
MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt
YzNiYjg0NzYwMGNkLzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk
LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUepolG3
a3Gky9u6t++81h1kH44bRNGsVGmyaOsadewvXzSJ4zi2PP3KMrUENvVS/HfY8Yvc
i65Qx9cuJbcKDQjY/RzW17a/4bYk+rD71EgWw8uiEEy/V4uiDbTT6TrA8THKt0ok
x8kvWjZwFbndRA0h5NRwwog6ZZvWK9tQJ9qQMT5Hp5T7DLrpi8vyC87m82UKdMfH
lMe8Msjvw/QSnRI5HMKV2XKQ6ZiFccarXHoR0w29na2k/9+MYTS8eD52xHHptl58
bQvQgWtS7xKbV8QGaKaqge/GdwQU+9dOSa7OCxyK1Hrb5Eji4cmoanVvM2HZ0qri
EVSzJmp6QJmI3A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:04 2026 by rpki-client