Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: /2uAOQe8gwt4/4hHyDWmBW1k/pJPoH7AuGyfKr9AVXI=
Subject key identifier: 23:C2:61:D7:6D:D3:32:4E:14:7A:12:CB:5C:BF:A5:6F:FB:C5:EA:F3
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019DCF3E03F447D34CC377DAD4F5CD3E8FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 04C3
Signing time: Mon 27 Apr 2026 14:00:41 +0000
Manifest this update: Mon 27 Apr 2026 14:00:41 +0000
Manifest next update: Tue 28 Apr 2026 14:00:41 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: OrJJiSK7X4PtgBgmPkrlB0V/41lXEI17XiVSWdvoypI=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:03:f4:47:d3:4c:c3:77:da:d4:f5:cd:3e:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Apr 27 14:00:41 2026 GMT
Not After : Apr 28 14:00:41 2026 GMT
Subject: CN=23c261d76dd3324e147a12cb5cbfa56ffbc5eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:19:88:07:5f:29:8b:2d:42:0a:a7:36:29:
85:c1:8f:d7:cc:f6:e0:d3:4c:aa:6f:77:54:9f:8e:
cc:e0:eb:a0:8e:85:37:f6:7f:17:00:b4:67:34:cd:
bb:af:de:df:55:7f:af:93:eb:0c:fc:6c:0e:c0:c5:
0d:7c:f6:90:0d:88:8c:68:f9:bf:6e:96:97:7f:fd:
ee:39:f4:0b:d5:c7:08:08:fb:58:9a:f1:10:f9:ca:
e3:3d:69:9e:00:a2:ed:82:c4:2a:29:54:4b:73:ce:
ee:2c:b2:92:45:37:09:24:d3:9c:bd:ae:17:48:a5:
7b:cf:ec:51:08:8e:19:ee:7d:a7:cd:bc:16:2d:ed:
2f:96:91:64:3e:e4:85:60:6d:1a:79:90:30:fa:28:
ee:21:6f:2a:cb:ec:ec:d7:28:a3:6a:c5:9d:0a:19:
8a:a0:1e:c9:c4:bf:0d:3a:b1:16:ef:a6:79:ec:ef:
fb:47:fb:d6:71:a7:66:e7:5a:80:fc:83:00:e3:c7:
8a:2b:d4:f9:20:4b:4d:af:a4:3d:b6:74:91:5e:18:
a8:88:b9:60:54:80:31:98:27:3b:90:08:53:20:e7:
22:1e:0e:8a:ef:76:92:19:85:5e:a3:c5:5e:7d:80:
8d:4c:ca:09:16:47:d3:4f:83:38:1a:2c:89:a3:91:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:61:D7:6D:D3:32:4E:14:7A:12:CB:5C:BF:A5:6F:FB:C5:EA:F3
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:25:87:c2:21:92:cc:20:33:19:f8:09:ec:e5:ed:0d:03:
70:e3:43:bb:3c:f7:6b:e5:8d:6a:f0:14:f0:f6:2b:13:e2:85:
31:5d:98:37:ce:76:19:c2:d8:55:f8:b2:f8:5e:27:2b:6f:a6:
d7:79:56:6b:07:84:13:49:67:9c:fb:03:99:15:4e:c0:8d:e1:
37:c8:0e:2b:7c:6b:5e:8c:43:72:9b:db:34:43:17:56:09:1f:
d9:37:db:f7:4b:4f:24:a2:7c:39:a9:b7:7f:14:23:32:bb:55:
14:f9:e3:41:82:54:45:33:00:44:b3:e4:f4:ec:f3:c1:7f:1b:
bd:75:76:04:13:ee:dd:87:36:95:06:ba:3b:39:52:fd:44:c0:
4d:1f:ce:7a:d8:e3:8b:3b:fd:6a:5b:2a:84:48:2e:11:ea:d4:
42:8e:83:fd:c2:fa:d1:76:89:09:34:94:37:13:84:56:5b:ec:
df:3b:f6:db:09:70:7d:c6:78:8b:b4:56:28:7f:d0:f1:9f:62:
63:37:b0:dd:42:02:ac:70:bb:ba:51:22:00:5d:f1:85:ea:b7:
5e:fc:a4:10:9e:fd:f7:45:dd:c9:7d:60:34:6d:08:22:1f:f5:
f9:da:28:e3:eb:ef:db:4f:a2:12:07:21:c4:4d:47:ae:be:51:
79:7a:5e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPgP0R9NMw3fa1PXNPo+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw
OGJmNDkwHhcNMjYwNDI3MTQwMDQxWhcNMjYwNDI4MTQwMDQxWjAzMTEwLwYDVQQD
EygyM2MyNjFkNzZkZDMzMjRlMTQ3YTEyY2I1Y2JmYTU2ZmZiYzVlYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiAZiAdfKYstQgqnNimFwY/XzPbg
00yqb3dUn47M4OugjoU39n8XALRnNM27r97fVX+vk+sM/GwOwMUNfPaQDYiMaPm/
bpaXf/3uOfQL1ccICPtYmvEQ+crjPWmeAKLtgsQqKVRLc87uLLKSRTcJJNOcva4X
SKV7z+xRCI4Z7n2nzbwWLe0vlpFkPuSFYG0aeZAw+ijuIW8qy+zs1yijasWdChmK
oB7JxL8NOrEW76Z57O/7R/vWcadm51qA/IMA48eKK9T5IEtNr6Q9tnSRXhioiLlg
VIAxmCc7kAhTIOciHg6K73aSGYVeo8VefYCNTMoJFkfTT4M4GiyJo5Hs2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPCYddt0zJOFHoSy1y/pW/7xerzMB8GA1UdIwQY
MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt
OGMzZGNjNDU5MDI2LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2
LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7wlh8Ih
kswgMxn4Cezl7Q0DcONDuzz3a+WNavAU8PYrE+KFMV2YN852GcLYVfiy+F4nK2+m
13lWaweEE0lnnPsDmRVOwI3hN8gOK3xrXoxDcpvbNEMXVgkf2Tfb90tPJKJ8Oam3
fxQjMrtVFPnjQYJURTMARLPk9OzzwX8bvXV2BBPu3Yc2lQa6OzlS/UTATR/Oetjj
izv9alsqhEguEerUQo6D/cL60XaJCTSUNxOEVlvs3zv22wlwfcZ4i7RWKH/Q8Z9i
Yzew3UICrHC7ulEiAF3xheq3XvykEJ7990XdyX1gNG0IIh/1+doo4+vv20+iEgch
xE1Hrr5ReXpeVg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:44 2026 by rpki-client