Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: DMtMpI+5tlFDcCyZb8u5b94Ezd/xuy2pDDADo/my/Ho=
Subject key identifier: 18:3D:51:79:0F:E8:5B:09:F1:CE:57:5B:82:C2:95:17:9C:33:44:87
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019D37F721BE0207C063FF48080360E30006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 1157
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: Vqd7M+s7OLenry3YgDNSiA+l4GRmWSWLLmMy7KpNN5E=)
2: lJRouhsD89YwjETpjd4P5W7UKig.roa (hash: /VHTdnmw9oRohqnCjEDHZH7S7Q3gjl2OViU5nARXvlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:21:be:02:07:c0:63:ff:48:08:03:60:e3:00:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=183d51790fe85b09f1ce575b82c295179c334487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:17:d5:77:0d:8b:9f:4b:75:72:d2:69:f1:
4b:36:e2:ca:a0:81:cb:58:25:1e:c0:59:d8:0c:45:
7c:74:cc:37:33:80:d7:83:1f:df:80:02:7a:fe:9c:
3b:15:3a:7b:59:fe:c8:58:08:de:4a:29:28:20:f8:
a0:0e:df:54:7a:09:48:ee:ff:cb:12:24:1b:43:de:
7a:05:82:bc:1c:ff:be:4f:3c:f4:ae:c2:47:99:87:
f1:ef:e9:15:11:05:26:6d:24:4a:dc:ee:61:21:5e:
17:41:b2:f9:ef:49:d4:1d:0a:8c:c4:12:e5:50:33:
e4:0a:e6:04:61:28:d0:82:2e:94:9f:4e:bc:c4:39:
7c:bf:0c:07:58:dc:42:48:77:1a:4a:bd:75:51:b0:
d2:a5:dd:3e:8b:db:f7:89:05:c0:92:f9:64:a1:8c:
69:75:cb:ab:37:a4:58:61:7b:ad:d8:e3:55:ac:8d:
60:1c:db:1a:b3:4e:7c:07:86:cf:8b:0c:ce:01:c1:
62:90:24:3f:fe:b6:58:ac:55:9d:98:32:eb:e9:8b:
a4:8e:0f:c4:df:67:c8:e6:e9:3a:b7:c2:cd:37:ac:
e1:1b:cd:3f:35:57:d7:40:5a:25:bd:64:1c:11:5a:
5c:b3:c5:ff:95:35:dc:6a:dd:5c:30:7f:28:a7:66:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:51:79:0F:E8:5B:09:F1:CE:57:5B:82:C2:95:17:9C:33:44:87
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8a:91:38:8e:e8:19:a9:eb:2b:cb:0c:2d:c3:8d:4e:a2:c3:
be:d6:54:52:38:8c:67:6e:ae:89:38:f2:f5:95:7e:fe:fa:17:
81:a4:0b:8a:f6:e0:ff:9d:f2:73:fd:8e:bd:68:be:90:78:2e:
01:0d:f0:e8:ec:57:46:b8:d3:4e:86:84:43:78:d5:ef:b2:53:
46:34:67:11:28:cb:13:95:9a:02:34:69:ea:34:c9:31:47:18:
31:d9:50:5c:2d:7a:de:c0:25:fc:f0:91:ba:30:69:e5:ef:40:
33:87:f1:db:38:3b:15:ed:87:aa:c5:43:41:26:94:ae:d4:81:
c2:c3:65:85:25:5b:69:92:cd:d3:7e:37:8a:71:70:f8:7e:13:
c1:da:ce:b6:e0:e2:4c:0e:61:51:35:87:c1:dd:4b:6b:b2:59:
19:73:2e:79:1e:13:27:9c:63:2f:fb:4e:82:c8:52:62:57:b7:
0e:19:25:07:02:98:88:9c:ae:ed:eb:c6:93:b9:a0:62:45:89:
ab:3e:7c:ca:b1:cf:ca:5f:48:ab:5e:25:b4:47:42:82:77:1a:
83:09:3e:20:20:33:71:bb:d4:40:8f:ae:bb:67:a0:83:d1:dc:
16:c0:58:3b:25:7d:c6:e9:12:1d:23:12:4d:f8:8c:18:1b:3f:
ec:33:07:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yG+AgfAY/9ICANg4wAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDllZjdiZDMwMzI0ZGVkZjcwYmFjZTRiYmRhNTc2MGMz
MjZiMWEwHhcNMjYwMzI5MDUwMDM2WhcNMjYwMzMwMDUwMDM2WjAzMTEwLwYDVQQD
EygxODNkNTE3OTBmZTg1YjA5ZjFjZTU3NWI4MmMyOTUxNzljMzM0NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9EX1XcNi59LdXLSafFLNuLKoIHL
WCUewFnYDEV8dMw3M4DXgx/fgAJ6/pw7FTp7Wf7IWAjeSikoIPigDt9UeglI7v/L
EiQbQ956BYK8HP++Tzz0rsJHmYfx7+kVEQUmbSRK3O5hIV4XQbL570nUHQqMxBLl
UDPkCuYEYSjQgi6Un068xDl8vwwHWNxCSHcaSr11UbDSpd0+i9v3iQXAkvlkoYxp
dcurN6RYYXut2ONVrI1gHNsas058B4bPiwzOAcFikCQ//rZYrFWdmDLr6Yukjg/E
32fI5uk6t8LNN6zhG80/NVfXQFolvWQcEVpcs8X/lTXcat1cMH8op2ZKewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg9UXkP6FsJ8c5XW4LClRecM0SHMB8GA1UdIwQY
MBaAFJfZ73vTAyTe33C6zku9pXYMMmsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUt
ZjgwNWFiM2EzMjdlLzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUtZjgwNWFiM2EzMjdl
LzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIqROI7o
GanrK8sMLcONTqLDvtZUUjiMZ26uiTjy9ZV+/voXgaQLivbg/53yc/2OvWi+kHgu
AQ3w6OxXRrjTToaEQ3jV77JTRjRnESjLE5WaAjRp6jTJMUcYMdlQXC163sAl/PCR
ujBp5e9AM4fx2zg7Fe2HqsVDQSaUrtSBwsNlhSVbaZLN0343inFw+H4TwdrOtuDi
TA5hUTWHwd1La7JZGXMueR4TJ5xjL/tOgshSYle3DhklBwKYiJyu7evGk7mgYkWJ
qz58yrHPyl9Iq14ltEdCgncagwk+ICAzcbvUQI+uu2egg9HcFsBYOyV9xukSHSMS
TfiMGBs/7DMHvw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:05 2026 by rpki-client