Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: yHjFsV8yI55liuwmIRWfKke0YSMhgz64BCP6/jRbC7k=
Subject key identifier: BD:14:43:5F:A4:71:2D:FF:87:68:6A:DA:FD:A2:B4:C9:60:A1:A2:A4
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 019CAA21CEE2868C63470DBDB312C525BD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 1212
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: Vj6J2hSvblPdyA8kbBPSVUrX/gN94ASY6395N4gSF/k=)
2: y9Rdyj0H9umW1gas2ci_H7vHV80.roa (hash: fMjeZmQWT7xUsWFTIwsY1p7CQr5KOCxJXZGt0dVbHlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ce:e2:86:8c:63:47:0d:bd:b3:12:c5:25:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=bd14435fa4712dff87686adafda2b4c960a1a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:18:ce:e9:e1:6e:0f:c1:c9:8d:71:fa:d4:
6b:cb:37:8a:83:24:75:5d:24:ca:e8:d4:ab:e8:7e:
8b:6b:65:06:a2:bd:ad:58:18:74:2c:e8:95:3b:17:
bb:c6:23:e4:9a:97:73:d0:0f:5d:3d:40:55:a3:73:
77:3e:a4:92:60:99:d9:ee:7f:fe:2a:71:57:cf:98:
37:62:05:33:84:2c:28:a9:21:bb:4b:9b:cf:72:09:
39:24:a1:6b:a3:3a:af:9c:76:7e:55:0c:6e:3d:83:
cd:c9:85:7e:55:f3:0a:ae:e4:63:82:85:ca:bc:65:
09:d0:15:94:5c:4e:84:8d:9c:b0:f2:42:f6:44:33:
44:53:47:21:82:b7:6d:cd:20:0e:ec:d2:d9:e6:38:
c0:f3:7a:16:ba:5d:53:af:90:d4:db:a4:50:bd:d1:
e5:4b:ca:9a:7c:47:20:c6:d7:c2:df:01:17:79:aa:
ef:50:04:a7:29:8f:a9:53:b1:13:88:f8:c4:2a:21:
1c:6d:fc:89:69:3e:2e:07:cd:ff:3c:7d:22:2f:3a:
31:75:8c:16:a2:24:3d:a8:a9:eb:0c:12:18:85:f7:
8b:25:27:87:57:8d:32:24:14:27:8c:99:c8:77:f0:
b6:f1:6a:bf:3b:73:be:4f:3a:23:ec:02:9b:fd:33:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:43:5F:A4:71:2D:FF:87:68:6A:DA:FD:A2:B4:C9:60:A1:A2:A4
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:7b:9d:c8:d8:21:bd:e2:c4:0e:0c:2e:fa:89:ac:0d:7b:
a5:84:2d:62:b4:f5:3e:45:75:41:f0:0d:05:ca:64:70:5d:b1:
5e:73:2d:c4:1b:ab:db:c1:30:ae:d6:10:a9:c8:59:14:27:4c:
3d:f9:a7:be:d2:66:78:ee:7b:37:65:f5:32:b0:c1:bb:f7:65:
68:2c:44:c5:ac:6d:25:6a:ce:91:35:04:63:5e:eb:3b:68:c0:
da:43:3a:b1:e7:09:b9:3b:7f:62:3a:6c:54:22:53:dc:70:63:
fd:e0:92:2a:f2:32:aa:60:ab:35:4b:46:b2:02:2d:d2:98:cc:
11:39:c0:d7:94:cf:ad:bb:e8:06:e9:42:09:18:bb:08:f5:61:
b8:82:37:d2:12:c0:1a:71:28:a9:93:ac:85:4a:6f:06:6a:4e:
9b:e2:61:3a:f3:2b:fe:f2:a9:96:f6:a7:ac:99:1e:fe:02:90:
be:7e:6a:c9:70:37:3f:ce:6c:30:75:2f:f4:f2:b9:0b:49:5a:
bf:4e:a7:38:1d:8a:3a:2b:dc:63:21:67:e7:59:76:c2:63:43:
ab:a5:81:c1:b7:17:18:f3:0a:b0:10:1a:cd:48:43:2a:60:2a:
fe:3d:e3:cd:9e:51:69:cc:a6:bb:81:bd:bd:59:14:14:f6:36:
4c:54:f5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIc7ihoxjRw29sxLFJb15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi
ZTczOGQwHhcNMjYwMzAxMTYwMTA4WhcNMjYwMzAyMTYwMTA4WjAzMTEwLwYDVQQD
EyhiZDE0NDM1ZmE0NzEyZGZmODc2ODZhZGFmZGEyYjRjOTYwYTFhMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0osYzunhbg/ByY1x+tRryzeKgyR1
XSTK6NSr6H6La2UGor2tWBh0LOiVOxe7xiPkmpdz0A9dPUBVo3N3PqSSYJnZ7n/+
KnFXz5g3YgUzhCwoqSG7S5vPcgk5JKFrozqvnHZ+VQxuPYPNyYV+VfMKruRjgoXK
vGUJ0BWUXE6EjZyw8kL2RDNEU0chgrdtzSAO7NLZ5jjA83oWul1Tr5DU26RQvdHl
S8qafEcgxtfC3wEXearvUASnKY+pU7ETiPjEKiEcbfyJaT4uB83/PH0iLzoxdYwW
oiQ9qKnrDBIYhfeLJSeHV40yJBQnjJnId/C28Wq/O3O+Tzoj7AKb/TPkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0UQ1+kcS3/h2hq2v2itMlgoaKkMB8GA1UdIwQY
MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt
MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3
LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmF7ncjY
Ib3ixA4MLvqJrA17pYQtYrT1PkV1QfANBcpkcF2xXnMtxBur28EwrtYQqchZFCdM
PfmnvtJmeO57N2X1MrDBu/dlaCxExaxtJWrOkTUEY17rO2jA2kM6secJuTt/Yjps
VCJT3HBj/eCSKvIyqmCrNUtGsgIt0pjMETnA15TPrbvoBulCCRi7CPVhuII30hLA
GnEoqZOshUpvBmpOm+JhOvMr/vKplvanrJke/gKQvn5qyXA3P85sMHUv9PK5C0la
v06nOB2KOivcYyFn51l2wmNDq6WBwbcXGPMKsBAazUhDKmAq/j3jzZ5Racymu4G9
vVkUFPY2TFT1tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:42 2026 by rpki-client