Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: v63/SGAT8w/bVdjKWfQjSzpmC7ezcvc8g1Ehad7U7yw=
Subject key identifier: 6D:32:86:DC:ED:1A:8E:DA:24:2A:F0:53:39:C2:20:F0:12:78:9D:F4
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 019CAD59B6FFDAA8F9DF14306D15ED4027D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 0576
Signing time: Mon 02 Mar 2026 07:01:03 +0000
Manifest this update: Mon 02 Mar 2026 07:01:03 +0000
Manifest next update: Tue 03 Mar 2026 07:01:03 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: VvWpUZk9o+XjMtvktEjGofS/ufd7x38Mq4u35xk0nEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b6:ff:da:a8:f9:df:14:30:6d:15:ed:40:27:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Mar 2 07:01:03 2026 GMT
Not After : Mar 3 07:01:03 2026 GMT
Subject: CN=6d3286dced1a8eda242af05339c220f012789df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:f8:26:f5:73:98:71:a2:66:b9:e5:a4:d5:
c5:54:5c:fb:1d:6d:3c:fa:99:67:a8:ad:bc:0c:90:
f0:46:90:23:fa:b2:51:94:63:cb:79:f2:42:38:8d:
d0:3a:fd:7e:08:52:fd:dc:fc:4b:39:89:0a:6f:64:
2a:c7:e1:17:49:e6:80:8a:a3:06:b5:06:9d:61:fc:
31:1a:74:8d:59:44:a1:92:2f:4b:46:81:1a:f7:8e:
53:df:e8:e7:2d:fe:1d:9c:15:5e:4c:90:25:cf:82:
7c:09:05:33:0e:e1:67:40:bb:55:c1:43:9d:f2:d5:
2d:eb:32:a0:12:3f:cd:f7:96:21:98:58:58:bf:9f:
0f:3a:45:80:57:74:d6:51:db:c8:a1:bd:3e:f7:1b:
d9:44:53:cf:2c:30:bb:d9:35:7a:91:1a:47:bd:90:
a6:a4:9f:d1:2d:77:55:90:fe:dd:dc:5d:6c:28:d0:
0c:60:32:9d:60:73:d9:28:da:d2:9c:b0:84:9d:ed:
f7:48:4e:22:c8:bd:7c:57:33:88:0b:f5:4a:e4:bf:
7a:a1:18:54:bb:8a:10:57:cf:c2:ce:53:fe:29:ad:
e2:60:66:09:42:43:7b:46:c5:ea:72:6e:ce:ce:ea:
f3:df:9c:76:03:2d:ed:89:d2:1a:8f:7b:c0:3b:85:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:86:DC:ED:1A:8E:DA:24:2A:F0:53:39:C2:20:F0:12:78:9D:F4
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9b:d8:37:2b:eb:2b:67:96:44:e0:60:10:ae:50:c6:77:83:
c2:38:a1:3a:81:1a:42:d2:ed:20:d9:62:3c:17:b1:99:47:17:
57:d6:5f:bb:e5:33:c8:92:69:3f:98:be:bb:72:97:f5:c7:49:
e2:3c:95:d7:c4:52:60:07:7c:07:92:e9:dc:35:2b:4b:65:04:
d7:de:93:b2:04:48:ad:6f:38:7e:9c:00:46:91:df:2a:24:6c:
d3:7b:2e:ac:4e:a4:4b:10:30:dc:ed:62:bd:95:82:d0:3e:f6:
a8:9a:41:0b:89:6b:ae:31:8b:04:4c:fa:8e:68:a7:bc:b9:1f:
e5:c4:19:03:31:ac:a8:5e:7b:e5:bf:70:cd:7e:5b:5d:09:e7:
88:45:37:97:86:41:3a:f9:3c:71:7f:b6:7d:4d:0e:c3:7f:e0:
7b:e1:ef:b9:c5:11:a6:b2:9d:92:23:f7:dc:11:fb:f5:2a:31:
ad:80:9b:2f:80:7d:c0:06:e9:eb:e2:43:0a:6d:2e:4f:63:32:
d1:5e:f7:9c:db:d7:28:8d:2d:17:a9:7f:82:a0:3c:5b:14:2a:
a8:63:1f:64:40:ec:e6:71:40:ee:3d:01:12:0c:73:46:d0:2d:
68:5b:bb:30:0d:3e:48:c7:85:ee:b3:c7:0d:bc:8b:a3:70:08:
e1:0a:5b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWbb/2qj53xQwbRXtQCfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTQ4YmQ2ZjJhZDE1OGU2MjRmZDhlODllOWVmNWYxYmRi
MWQzOWEwHhcNMjYwMzAyMDcwMTAzWhcNMjYwMzAzMDcwMTAzWjAzMTEwLwYDVQQD
Eyg2ZDMyODZkY2VkMWE4ZWRhMjQyYWYwNTMzOWMyMjBmMDEyNzg5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qj4JvVzmHGiZrnlpNXFVFz7HW08
+plnqK28DJDwRpAj+rJRlGPLefJCOI3QOv1+CFL93PxLOYkKb2Qqx+EXSeaAiqMG
tQadYfwxGnSNWUShki9LRoEa945T3+jnLf4dnBVeTJAlz4J8CQUzDuFnQLtVwUOd
8tUt6zKgEj/N95YhmFhYv58POkWAV3TWUdvIob0+9xvZRFPPLDC72TV6kRpHvZCm
pJ/RLXdVkP7d3F1sKNAMYDKdYHPZKNrSnLCEne33SE4iyL18VzOIC/VK5L96oRhU
u4oQV8/CzlP+Ka3iYGYJQkN7RsXqcm7Ozurz35x2Ay3tidIaj3vAO4WHQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0yhtztGo7aJCrwUznCIPASeJ30MB8GA1UdIwQY
MBaAFJeUi9byrRWOYk/Y6J6e9fG9sdOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgt
YTZjNTAwMGM3MTg0LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgtYTZjNTAwMGM3MTg0
LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpvYNyvr
K2eWROBgEK5QxneDwjihOoEaQtLtINliPBexmUcXV9Zfu+UzyJJpP5i+u3KX9cdJ
4jyV18RSYAd8B5Lp3DUrS2UE196TsgRIrW84fpwARpHfKiRs03surE6kSxAw3O1i
vZWC0D72qJpBC4lrrjGLBEz6jminvLkf5cQZAzGsqF575b9wzX5bXQnniEU3l4ZB
Ovk8cX+2fU0Ow3/ge+HvucURprKdkiP33BH79SoxrYCbL4B9wAbp6+JDCm0uT2My
0V73nNvXKI0tF6l/gqA8WxQqqGMfZEDs5nFA7j0BEgxzRtAtaFu7MA0+SMeF7rPH
DbyLo3AI4QpbZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:40 2026 by rpki-client