Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: /+oatd5rSJFgd+x6gBSStwG5baxg+1vDMpH+sq+92r4=
Subject key identifier: F0:06:FF:8F:74:7C:6C:24:9C:2B:CB:45:A9:EE:6E:2B:52:80:E1:20
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019D3940E4A5DD6625778710FD13967C5BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0D72
Signing time: Sun 29 Mar 2026 11:00:47 +0000
Manifest this update: Sun 29 Mar 2026 11:00:47 +0000
Manifest next update: Mon 30 Mar 2026 11:00:47 +0000
Files and hashes: 1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: fqjdXqe4bxdZNkcIbOIyWKvW9wqdgeItZ1JtWnMPM5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e4:a5:dd:66:25:77:87:10:fd:13:96:7c:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Mar 29 11:00:47 2026 GMT
Not After : Mar 30 11:00:47 2026 GMT
Subject: CN=f006ff8f747c6c249c2bcb45a9ee6e2b5280e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:56:e4:df:3e:a5:5e:ea:c4:f2:b1:b7:77:
66:47:65:c2:af:d5:6b:6f:fe:bf:08:43:10:fe:13:
0a:ca:39:dc:d7:9d:73:fc:45:5a:bb:87:68:0d:7f:
17:46:da:c0:e4:59:8e:f9:ba:29:7a:fb:bf:e8:40:
6a:04:4f:34:13:72:25:8e:7a:99:aa:2c:1a:d1:79:
c9:df:94:4e:ae:51:ae:72:86:1b:c5:fe:fa:7c:83:
5f:11:42:8a:40:1f:3f:bf:4d:4b:38:0e:67:b2:0e:
b7:32:68:af:c3:65:ca:09:26:60:fb:82:1c:02:11:
18:87:64:e1:63:c4:bd:ba:dd:4b:52:b1:d8:9a:40:
38:1f:c4:d6:07:a6:37:94:c4:05:38:05:d5:6b:f1:
e4:4d:40:ec:33:64:40:13:5c:84:65:c9:7b:cf:20:
08:3e:aa:4f:9a:6f:ce:3c:09:83:dd:99:29:02:81:
ab:15:d9:f3:79:a3:54:6d:f3:db:f7:e7:c7:99:11:
a3:13:c1:ee:29:f6:3c:2b:d3:d0:d6:15:0b:e7:1f:
2c:51:f5:6b:57:80:f9:56:10:35:46:d3:c7:44:10:
ad:74:ac:b4:df:e4:02:ac:ba:03:61:88:38:4a:d1:
7e:5c:a0:d2:99:70:3e:db:04:5e:74:a2:84:84:dc:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:FF:8F:74:7C:6C:24:9C:2B:CB:45:A9:EE:6E:2B:52:80:E1:20
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:b5:a2:33:da:0e:24:7d:cf:fd:79:0a:96:86:88:99:cf:
ba:08:c9:fe:aa:32:fd:91:d0:6b:6c:66:4a:10:c0:9a:b2:b1:
f8:e2:e0:15:1c:15:39:bb:d4:f2:54:d4:7f:62:99:78:de:b2:
47:6d:bb:af:ff:7d:a8:c0:41:2f:4e:4d:18:ec:9b:c6:27:7f:
fe:22:88:45:f1:b8:7c:9d:0e:74:9e:ac:34:09:f3:c2:e3:e0:
04:5a:cf:51:e3:ee:2a:24:8a:05:cc:8a:db:ee:b4:63:46:87:
dd:92:9c:32:d7:88:fb:5b:17:8c:90:23:79:25:9f:36:42:e3:
70:54:64:6d:54:0d:7d:f0:dc:53:71:f4:dc:3c:6b:2d:02:13:
0d:59:b2:01:ca:69:13:1e:d2:ff:a7:a3:b2:71:2c:c8:38:09:
c7:24:4f:f7:fb:ac:2c:c9:86:cd:29:35:81:31:c3:a4:af:3d:
0c:f9:cf:50:56:16:fe:dd:3d:51:7c:bb:8c:0d:f4:90:8b:3a:
e0:9f:ed:73:02:e9:9b:4b:6b:69:15:88:13:9c:10:75:e4:37:
79:fd:ab:29:8e:d7:f8:4c:ba:ad:6d:9b:74:e9:23:9a:84:62:
49:89:26:c7:30:d2:06:d7:cd:1d:cd:11:62:59:47:78:c3:e9:
52:67:40:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOSl3WYld4cQ/ROWfFvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjYwMzI5MTEwMDQ3WhcNMjYwMzMwMTEwMDQ3WjAzMTEwLwYDVQQD
EyhmMDA2ZmY4Zjc0N2M2YzI0OWMyYmNiNDVhOWVlNmUyYjUyODBlMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky9W5N8+pV7qxPKxt3dmR2XCr9Vr
b/6/CEMQ/hMKyjnc151z/EVau4doDX8XRtrA5FmO+bopevu/6EBqBE80E3IljnqZ
qiwa0XnJ35ROrlGucoYbxf76fINfEUKKQB8/v01LOA5nsg63Mmivw2XKCSZg+4Ic
AhEYh2ThY8S9ut1LUrHYmkA4H8TWB6Y3lMQFOAXVa/HkTUDsM2RAE1yEZcl7zyAI
PqpPmm/OPAmD3ZkpAoGrFdnzeaNUbfPb9+fHmRGjE8HuKfY8K9PQ1hUL5x8sUfVr
V4D5VhA1RtPHRBCtdKy03+QCrLoDYYg4StF+XKDSmXA+2wRedKKEhNyhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAG/490fGwknCvLRanubitSgOEgMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEe1ojPa
DiR9z/15CpaGiJnPugjJ/qoy/ZHQa2xmShDAmrKx+OLgFRwVObvU8lTUf2KZeN6y
R227r/99qMBBL05NGOybxid//iKIRfG4fJ0OdJ6sNAnzwuPgBFrPUePuKiSKBcyK
2+60Y0aH3ZKcMteI+1sXjJAjeSWfNkLjcFRkbVQNffDcU3H03DxrLQITDVmyAcpp
Ex7S/6ejsnEsyDgJxyRP9/usLMmGzSk1gTHDpK89DPnPUFYW/t09UXy7jA30kIs6
4J/tcwLpm0traRWIE5wQdeQ3ef2rKY7X+Ey6rW2bdOkjmoRiSYkmxzDSBtfNHc0R
YllHeMPpUmdAVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:44 2026 by rpki-client