Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: abs3itbuJ6K3aoeMtJ9eg6YMkRsEIGKBooYHmt5/V8Y=
Subject key identifier: 9F:98:8F:82:26:95:95:31:DF:3D:6D:D0:F3:E6:6D:43:90:E9:D9:79
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 019D38D2958866BF3D01D8C3BDA3CB753CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: PpZCWs8TpYB9nuAygw0FfqctmMMz9325uFxAoK7kIKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:88:66:bf:3d:01:d8:c3:bd:a3:cb:75:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=9f988f8226959531df3d6dd0f3e66d4390e9d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:fa:76:e4:37:39:ce:3b:8f:c6:b2:3a:e8:
21:5d:cf:16:ee:87:07:12:bd:ee:73:02:bc:75:72:
ba:1c:5a:5d:c5:0f:9a:60:23:93:e3:11:f0:6e:31:
fa:8f:21:8d:8b:50:eb:90:c5:75:54:78:26:c5:f7:
d8:14:65:32:ee:e8:7f:6a:36:0c:3c:6d:2e:af:dd:
6f:09:d2:f2:5b:31:9c:43:27:37:ce:1a:65:4c:04:
4d:63:73:1e:f7:2e:f2:d1:84:4a:fe:73:db:f2:44:
61:25:eb:e4:a0:fe:8c:13:20:28:f3:3c:7b:51:c8:
2c:72:0b:ae:66:ed:7a:f8:2c:2b:b6:e4:16:31:81:
ba:69:b1:9e:86:95:2d:b8:d1:7a:a0:69:64:b0:b5:
e1:ae:8f:67:78:d4:e8:fc:f1:43:dc:14:5b:cc:b4:
2a:31:36:15:71:8d:d1:b2:df:70:a0:6e:50:76:a0:
88:5b:46:4f:d7:94:98:f2:b7:ce:a0:8a:37:c0:28:
39:19:4a:cf:23:ef:94:f8:ee:ff:f3:d0:ee:bd:cb:
3a:b0:30:2e:68:81:7d:fb:47:99:da:24:57:c2:a0:
32:eb:c4:a2:10:b7:3c:a6:cb:37:4d:22:02:9a:e7:
22:c0:e6:3e:79:9c:3f:57:df:97:2a:5f:d1:cf:90:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:8F:82:26:95:95:31:DF:3D:6D:D0:F3:E6:6D:43:90:E9:D9:79
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:e8:ca:68:e0:03:e3:69:17:1d:b1:5e:0b:44:4e:ec:fd:
d6:6f:31:54:7c:3b:98:32:3f:6c:14:1a:96:ae:ce:2c:23:ef:
9b:ee:cd:aa:fe:19:e6:c4:ba:73:17:94:98:bb:97:a6:92:45:
e2:21:89:00:a1:97:f6:43:1b:44:d2:4e:d0:96:47:2a:b1:01:
c5:f4:7b:6b:85:87:6e:17:8c:cc:1d:a7:d9:3b:cf:b4:28:54:
07:e5:86:75:79:23:f8:b7:8b:2c:e4:93:2a:90:bb:a6:42:f1:
e6:42:e3:59:4d:1b:65:e3:a3:5c:e8:84:21:53:fc:01:d6:b3:
d9:c0:e4:d0:53:e9:ca:ee:21:ce:93:af:59:c6:b2:a7:b7:da:
84:f4:7a:b6:7a:a4:ee:08:e7:69:65:0f:fd:66:7f:9a:5e:05:
f8:54:78:b8:ae:d4:78:92:a0:7d:9b:aa:0b:fa:4a:f6:aa:52:
c6:cb:8f:15:13:73:6b:8f:3f:0a:ae:33:a6:db:63:ea:cb:bb:
0e:b6:a8:fd:bc:40:12:16:75:d2:13:d9:e5:37:83:91:fd:46:
05:6e:d8:5e:d0:a3:02:6d:e2:94:a9:f6:e0:fc:2f:70:d2:90:
a6:be:25:86:c7:98:14:b7:99:41:55:a6:ba:ce:8e:af:3c:71:
2f:62:15:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040pWIZr89AdjDvaPLdTyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZGVjNjcwYjc4MGMzYmY5NDAxZWYxYzExNWExZDg3ZmU4
ZjdjN2EwHhcNMjYwMzI5MDkwMDE4WhcNMjYwMzMwMDkwMDE4WjAzMTEwLwYDVQQD
Eyg5Zjk4OGY4MjI2OTU5NTMxZGYzZDZkZDBmM2U2NmQ0MzkwZTlkOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5f6duQ3Oc47j8ayOughXc8W7ocH
Er3ucwK8dXK6HFpdxQ+aYCOT4xHwbjH6jyGNi1DrkMV1VHgmxffYFGUy7uh/ajYM
PG0ur91vCdLyWzGcQyc3zhplTARNY3Me9y7y0YRK/nPb8kRhJevkoP6MEyAo8zx7
UcgscguuZu16+CwrtuQWMYG6abGehpUtuNF6oGlksLXhro9neNTo/PFD3BRbzLQq
MTYVcY3Rst9woG5QdqCIW0ZP15SY8rfOoIo3wCg5GUrPI++U+O7/89Duvcs6sDAu
aIF9+0eZ2iRXwqAy68SiELc8pss3TSICmuciwOY+eZw/V9+XKl/Rz5DEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+Yj4ImlZUx3z1t0PPmbUOQ6dl5MB8GA1UdIwQY
MBaAFC/exnC3gMO/lAHvHBFaHYf+j3x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQt
YWIxZDhlOTg0NGFmLzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQtYWIxZDhlOTg0NGFm
LzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZroymjg
A+NpFx2xXgtETuz91m8xVHw7mDI/bBQalq7OLCPvm+7Nqv4Z5sS6cxeUmLuXppJF
4iGJAKGX9kMbRNJO0JZHKrEBxfR7a4WHbheMzB2n2TvPtChUB+WGdXkj+LeLLOST
KpC7pkLx5kLjWU0bZeOjXOiEIVP8Adaz2cDk0FPpyu4hzpOvWcayp7fahPR6tnqk
7gjnaWUP/WZ/ml4F+FR4uK7UeJKgfZuqC/pK9qpSxsuPFRNza48/Cq4zpttj6su7
Drao/bxAEhZ10hPZ5TeDkf1GBW7YXtCjAm3ilKn24PwvcNKQpr4lhseYFLeZQVWm
us6OrzxxL2IVrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:49 2026 by rpki-client