Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: XwsvLTgvKe7KSZ1q7Yt7W5bdF37RNC8LturNrKaU1LI=
Subject key identifier: F8:55:EA:11:6F:FA:87:AA:A6:B1:1C:32:A6:F7:17:36:2B:13:DC:D1
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019E916F4F87C46B9C6991DC7087E0E3E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 07AB
Signing time: Thu 04 Jun 2026 07:00:51 +0000
Manifest this update: Thu 04 Jun 2026 07:00:51 +0000
Manifest next update: Fri 05 Jun 2026 07:00:51 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: WWACe7vNHNYEDIBnmmTQ5DNgiPgYDiULm+OJV5MhaYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:4f:87:c4:6b:9c:69:91:dc:70:87:e0:e3:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jun 4 07:00:51 2026 GMT
Not After : Jun 5 07:00:51 2026 GMT
Subject: CN=f855ea116ffa87aaa6b11c32a6f717362b13dcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:d4:0a:be:d6:be:e5:e1:b7:c7:13:2a:64:
11:bc:fa:50:48:42:6d:12:61:35:5b:23:c8:c3:48:
b1:6b:68:4b:7e:dc:5d:c5:13:45:10:65:12:fd:a5:
d4:0c:4c:80:f9:bc:b5:41:a5:f0:2a:24:ba:37:06:
d6:f6:b2:5d:62:1b:8f:40:29:ed:98:ec:27:c4:d6:
79:2b:03:69:44:c8:73:c1:48:a2:71:90:63:86:c7:
ff:5d:e3:5d:3e:36:db:d0:69:38:5e:c3:5d:c1:ae:
39:8d:49:45:7b:8c:c1:46:c5:0f:ec:44:1d:d2:d0:
04:3f:21:06:e5:d7:46:cb:6c:f3:58:a4:ce:d9:2c:
10:1d:de:70:68:7e:45:4f:21:b8:89:a2:07:4a:14:
67:93:20:09:e5:23:df:74:af:37:4a:ea:ed:2c:30:
b5:da:ec:50:66:16:80:ab:b7:74:e5:7f:bf:d7:bc:
46:da:95:d4:b2:1e:c8:cb:89:59:6d:60:b7:3a:4d:
b7:c7:c7:aa:cf:29:94:49:a0:6b:a9:d1:75:7e:9f:
7a:8d:e7:39:ab:fc:9a:55:0b:5f:cc:93:07:da:84:
b4:62:2b:70:28:7e:5c:ed:74:12:23:0a:49:1c:aa:
4b:f8:6c:11:3c:05:fa:fa:10:37:88:2d:02:68:56:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:EA:11:6F:FA:87:AA:A6:B1:1C:32:A6:F7:17:36:2B:13:DC:D1
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4e:15:99:08:5a:0e:77:d3:f1:77:9c:4c:de:7a:ca:ca:50:
1a:c2:87:35:bc:fc:82:ef:71:ef:a1:36:35:22:75:d5:52:c7:
f2:8f:09:5b:57:23:6d:e3:6a:da:c5:0e:ee:89:68:7a:66:c8:
34:63:83:11:91:de:56:25:dc:7a:e3:a1:8d:4e:f3:8b:91:9c:
64:94:8d:c1:c0:3e:c2:5f:a0:3f:ea:b5:c3:3b:fa:4c:76:97:
a6:ca:02:37:13:07:36:4e:b7:f5:41:0a:c6:e5:a3:88:2e:ec:
ec:79:05:28:bc:9d:bf:fb:12:1d:18:bc:be:9a:78:18:38:a2:
91:2c:55:ff:f2:ff:fb:ba:0c:33:36:c3:98:34:e0:4e:1e:ad:
1b:73:49:8a:a6:8b:06:7c:cf:90:1c:d5:c8:4b:2d:74:e8:67:
11:74:e6:a9:1d:ed:5a:61:aa:cd:e4:71:24:6a:7e:5c:fb:8c:
48:92:de:68:8f:31:a3:3e:5a:40:ce:b9:b8:83:d2:07:96:9a:
63:20:b0:a2:f7:d0:e4:3c:9a:18:e5:e8:d5:a5:c1:d6:d9:d9:
10:96:bf:d5:77:c9:20:6f:62:98:27:97:a6:10:75:e1:db:d6:
09:41:00:0d:c2:52:17:f1:5f:74:7f:e2:a1:5b:21:f4:bd:e3:
27:a2:9b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rb0+HxGucaZHccIfg4+WEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjYwNjA0MDcwMDUxWhcNMjYwNjA1MDcwMDUxWjAzMTEwLwYDVQQD
EyhmODU1ZWExMTZmZmE4N2FhYTZiMTFjMzJhNmY3MTczNjJiMTNkY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OzUCr7WvuXht8cTKmQRvPpQSEJt
EmE1WyPIw0ixa2hLftxdxRNFEGUS/aXUDEyA+by1QaXwKiS6NwbW9rJdYhuPQCnt
mOwnxNZ5KwNpRMhzwUiicZBjhsf/XeNdPjbb0Gk4XsNdwa45jUlFe4zBRsUP7EQd
0tAEPyEG5ddGy2zzWKTO2SwQHd5waH5FTyG4iaIHShRnkyAJ5SPfdK83SurtLDC1
2uxQZhaAq7d05X+/17xG2pXUsh7Iy4lZbWC3Ok23x8eqzymUSaBrqdF1fp96jec5
q/yaVQtfzJMH2oS0YitwKH5c7XQSIwpJHKpL+GwRPAX6+hA3iC0CaFYetQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhV6hFv+oeqprEcMqb3FzYrE9zRMB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE4VmQha
DnfT8XecTN56yspQGsKHNbz8gu9x76E2NSJ11VLH8o8JW1cjbeNq2sUO7oloembI
NGODEZHeViXceuOhjU7zi5GcZJSNwcA+wl+gP+q1wzv6THaXpsoCNxMHNk639UEK
xuWjiC7s7HkFKLydv/sSHRi8vpp4GDiikSxV//L/+7oMMzbDmDTgTh6tG3NJiqaL
BnzPkBzVyEstdOhnEXTmqR3tWmGqzeRxJGp+XPuMSJLeaI8xoz5aQM65uIPSB5aa
YyCwovfQ5DyaGOXo1aXB1tnZEJa/1XfJIG9imCeXphB14dvWCUEADcJSF/FfdH/i
oVsh9L3jJ6KbBA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:14 2026 by rpki-client