Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: Z+fps4POUNa/CS9/ljMw+hyToAGB82dltJc7Pb2TMuE=
Subject key identifier: 49:FC:31:DA:E1:58:E8:B3:A7:45:12:04:72:71:4D:35:1E:1A:7A:96
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 019D3977C4FFFAFE21F7DE67532B8125463D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 071F
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: UTPn7sDyIDaf0ipM77C87Kdh1RA.roa (hash: yJkUEolTOzyU/wbxz5ChhzuCMevnkgv8qFIuytCOr7E=)
2: Y86nHrN-bbG9H8afnIR7ras_Ma0.roa (hash: hrk5zm3StPI0sBpuzLM9Lwz+1Pf71xxcm0cAPnW+R0k=)
3: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: oWewTkTFTbG/kDYqglktpOinFOvtGV4FI+F4DCnGq6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c4:ff:fa:fe:21:f7:de:67:53:2b:81:25:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=49fc31dae158e8b3a745120472714d351e1a7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:4c:2e:8d:df:15:e1:9f:32:cb:1a:7b:d6:
6e:cb:3c:ba:c3:06:1c:22:0d:fe:62:9a:3e:7f:f9:
c6:1f:81:b0:1a:8d:68:d6:e7:33:35:a2:75:a0:cb:
d5:bd:6f:12:9c:8d:73:79:bb:f3:b6:4b:69:a6:0f:
0a:00:6a:99:56:cd:bd:bd:c6:73:e5:3b:0c:73:8d:
eb:62:4c:e9:75:cc:22:4c:6c:df:62:50:0b:f5:56:
21:f4:11:51:46:90:9e:32:7d:bd:5c:f3:30:78:25:
5d:fd:15:69:87:9c:db:bc:f7:0b:57:54:3b:eb:22:
0b:34:4c:91:25:3b:f8:0d:ea:b4:06:95:3e:c7:89:
63:f8:2d:cf:75:9d:6d:31:87:7f:4e:6d:d8:1b:32:
6d:a6:2d:81:b0:6b:44:1e:fc:04:fb:d6:43:2d:9a:
a9:10:6e:5a:82:c0:de:b7:ba:f6:cc:ea:4a:9d:b9:
56:18:ec:90:90:4b:ac:77:c5:8d:6e:23:95:c9:5b:
4e:2a:aa:75:3e:de:28:4e:69:6a:a4:e7:af:f7:ee:
13:83:0f:e1:2c:e3:55:09:c7:ff:3f:e7:88:08:1a:
a2:4e:c2:63:97:dc:06:b0:01:16:0d:bd:60:69:44:
b8:0c:ab:c7:86:aa:24:7f:40:5d:86:fb:7e:5d:bb:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:31:DA:E1:58:E8:B3:A7:45:12:04:72:71:4D:35:1E:1A:7A:96
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1d:d9:8d:9d:a4:1d:36:d9:a6:95:86:83:1a:93:c9:9e:19:
ce:60:99:dd:5a:e7:a9:27:b1:6d:47:e9:cc:e4:af:fa:67:05:
21:18:3a:6b:3e:93:03:c3:70:1d:9e:92:f7:b6:98:4b:ac:b3:
60:40:e1:f2:ca:8e:aa:77:9e:70:cb:7b:3d:87:e9:75:4b:78:
56:91:84:68:7e:84:ca:d2:e7:7f:97:ab:e0:77:4e:20:85:ed:
89:b9:21:d3:8d:6a:d6:e7:b3:4c:e1:f7:98:b0:dd:b7:8d:b2:
0d:dd:ba:3f:d2:85:25:1b:2b:35:c9:f1:96:4a:36:a9:cb:fd:
d2:8d:5e:29:37:8e:30:9b:2f:4b:a3:c7:3e:80:0e:1d:7f:b4:
9b:e6:12:4e:7b:7d:3c:1d:ec:b3:3f:36:02:be:af:fb:db:1e:
f5:52:25:fc:95:7c:65:55:83:9f:23:cd:1c:22:b4:59:34:fe:
17:d9:fd:10:16:08:19:86:0a:db:a5:23:fa:4a:6d:ad:75:4c:
ce:e1:b2:df:68:7c:19:c6:d4:ae:52:e4:a8:f7:e5:a1:d6:ac:
7b:0f:45:6a:6e:63:93:3d:28:ae:9c:14:6e:8c:8c:f3:ef:51:
b6:28:3b:94:41:bd:9e:6e:a5:a1:2e:c8:71:52:dc:b4:ea:36:
41:1d:09:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d8T/+v4h995nUyuBJUY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi
MjAwNjMwHhcNMjYwMzI5MTIwMDQzWhcNMjYwMzMwMTIwMDQzWjAzMTEwLwYDVQQD
Eyg0OWZjMzFkYWUxNThlOGIzYTc0NTEyMDQ3MjcxNGQzNTFlMWE3YTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/JMLo3fFeGfMssae9Zuyzy6wwYc
Ig3+Ypo+f/nGH4GwGo1o1uczNaJ1oMvVvW8SnI1zebvztktppg8KAGqZVs29vcZz
5TsMc43rYkzpdcwiTGzfYlAL9VYh9BFRRpCeMn29XPMweCVd/RVph5zbvPcLV1Q7
6yILNEyRJTv4Deq0BpU+x4lj+C3PdZ1tMYd/Tm3YGzJtpi2BsGtEHvwE+9ZDLZqp
EG5agsDet7r2zOpKnblWGOyQkEusd8WNbiOVyVtOKqp1Pt4oTmlqpOev9+4Tgw/h
LONVCcf/P+eICBqiTsJjl9wGsAEWDb1gaUS4DKvHhqokf0Bdhvt+Xbu6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn8MdrhWOizp0USBHJxTTUeGnqWMB8GA1UdIwQY
MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt
ZjkwYWU5OTY2NDI4LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4
LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh3ZjZ2k
HTbZppWGgxqTyZ4ZzmCZ3VrnqSexbUfpzOSv+mcFIRg6az6TA8NwHZ6S97aYS6yz
YEDh8sqOqneecMt7PYfpdUt4VpGEaH6EytLnf5er4HdOIIXtibkh041q1uezTOH3
mLDdt42yDd26P9KFJRsrNcnxlko2qcv90o1eKTeOMJsvS6PHPoAOHX+0m+YSTnt9
PB3ssz82Ar6v+9se9VIl/JV8ZVWDnyPNHCK0WTT+F9n9EBYIGYYK26Uj+kptrXVM
zuGy32h8GcbUrlLkqPflodasew9Fam5jkz0orpwUboyM8+9Rtig7lEG9nm6loS7I
cVLctOo2QR0JAg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:25 2026 by rpki-client