Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: 6NPELmC3oYfVnS815CrfIOLirHk25Eef8yDfOg7Fe4A=
Subject key identifier: 0F:BB:0B:8F:33:4C:11:0A:0F:B9:B6:2C:6A:35:C7:D5:37:27:09:B0
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 019CABD969CCB80527DD430D4CAA3EDDE8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1885
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: PiDSMx6MSQq47bCim3Gg5SQkRu4n0e93Wb0xQKQ2q9E=)
3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:69:cc:b8:05:27:dd:43:0d:4c:aa:3e:dd:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=0fbb0b8f334c110a0fb9b62c6a35c7d5372709b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:c5:e5:79:e3:ed:24:e1:a7:50:b0:2c:90:
d7:86:cc:c2:e0:71:5f:fe:12:54:bb:8f:ac:e0:62:
cc:a8:87:7a:68:dd:92:fd:53:fa:bb:49:71:7a:f2:
e5:9c:4d:d2:df:96:08:71:5f:de:e9:ac:dd:3a:05:
df:6e:c6:3b:83:69:65:46:86:a8:93:ce:21:6b:98:
7e:ae:6a:dc:fc:a2:f6:cf:ff:63:79:be:78:a2:f0:
0b:26:77:f0:fd:e9:fa:8d:eb:c3:7b:52:33:6d:7c:
00:bc:ad:80:16:2f:c0:cc:4b:35:47:74:0a:80:ce:
4e:91:a1:cb:bc:54:d0:91:81:68:85:1c:a5:59:af:
5b:e8:65:19:7f:b7:5b:8a:9b:99:9b:c9:ea:ec:75:
8e:40:1e:d1:9f:fd:a7:bc:92:b1:9a:d2:b4:fa:54:
fb:b1:30:55:51:c3:89:fd:1d:78:da:78:01:2a:43:
d6:81:39:23:61:c4:96:06:7c:fc:fb:8e:e3:49:7a:
9f:76:0b:b8:61:f4:94:26:34:a5:55:c5:76:5d:d7:
43:6f:a8:09:0e:30:90:1a:8b:e5:bd:e7:9b:42:55:
b2:7d:e6:77:62:67:80:48:4e:e7:9c:27:8e:34:87:
36:0d:0b:e4:33:05:8c:39:f9:60:21:ec:d0:8d:ca:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:0B:8F:33:4C:11:0A:0F:B9:B6:2C:6A:35:C7:D5:37:27:09:B0
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:c9:ca:5a:a9:30:da:36:36:4f:3f:73:f4:19:7e:60:96:
3f:3f:f8:9a:5c:dd:48:b6:87:44:9d:7f:76:0b:b9:ad:c0:f5:
6c:78:f0:12:b9:b4:22:3c:68:02:f6:0d:47:9d:cc:e7:0a:be:
f6:6b:e8:cf:94:fe:d0:c9:72:77:85:55:17:f7:85:55:56:a7:
3d:d9:4e:84:7e:66:2b:8e:80:cb:9c:cc:3b:d5:06:e9:dd:a4:
7f:a8:fa:6a:03:2e:d3:04:d7:35:d1:c6:86:e4:0f:e1:ac:16:
4f:25:77:2d:f1:63:00:0e:44:26:64:a7:a8:4b:a5:5c:97:a9:
a4:9d:e6:fd:cd:d9:ac:be:ba:8a:6a:14:d6:79:fc:78:3a:f3:
b2:d0:18:2b:2f:45:d8:40:f2:54:9c:b1:2d:00:98:3d:7f:5f:
3b:f3:7b:47:7b:ff:e6:6e:b3:1e:2a:af:5a:57:87:82:da:59:
49:cf:43:31:c2:3d:f0:22:03:0d:9a:8a:ba:df:79:ab:ea:5e:
da:9b:52:85:68:d7:e8:b0:c6:85:8f:61:26:32:e3:33:9b:1d:
23:ad:a2:5b:0d:50:16:19:33:9e:3d:d9:fb:04:42:ca:5b:e9:
8d:af:70:d9:da:50:48:16:56:ef:f1:13:4f:fb:5b:b3:6d:c2:
17:99:aa:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2WnMuAUn3UMNTKo+3ejYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjYwMzAyMDAwMTE4WhcNMjYwMzAzMDAwMTE4WjAzMTEwLwYDVQQD
EygwZmJiMGI4ZjMzNGMxMTBhMGZiOWI2MmM2YTM1YzdkNTM3MjcwOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9jF5Xnj7SThp1CwLJDXhszC4HFf
/hJUu4+s4GLMqId6aN2S/VP6u0lxevLlnE3S35YIcV/e6azdOgXfbsY7g2llRoao
k84ha5h+rmrc/KL2z/9jeb54ovALJnfw/en6jevDe1IzbXwAvK2AFi/AzEs1R3QK
gM5OkaHLvFTQkYFohRylWa9b6GUZf7dbipuZm8nq7HWOQB7Rn/2nvJKxmtK0+lT7
sTBVUcOJ/R142ngBKkPWgTkjYcSWBnz8+47jSXqfdgu4YfSUJjSlVcV2XddDb6gJ
DjCQGovlveebQlWyfeZ3YmeASE7nnCeONIc2DQvkMwWMOflgIezQjcqDRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+7C48zTBEKD7m2LGo1x9U3JwmwMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFfJylqp
MNo2Nk8/c/QZfmCWPz/4mlzdSLaHRJ1/dgu5rcD1bHjwErm0IjxoAvYNR53M5wq+
9mvoz5T+0Mlyd4VVF/eFVVanPdlOhH5mK46Ay5zMO9UG6d2kf6j6agMu0wTXNdHG
huQP4awWTyV3LfFjAA5EJmSnqEulXJeppJ3m/c3ZrL66imoU1nn8eDrzstAYKy9F
2EDyVJyxLQCYPX9fO/N7R3v/5m6zHiqvWleHgtpZSc9DMcI98CIDDZqKut95q+pe
2ptShWjX6LDGhY9hJjLjM5sdI62iWw1QFhkznj3Z+wRCylvpja9w2dpQSBZW7/ET
T/tbs23CF5mqLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:59 2026 by rpki-client