Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: Yi6eEztNmHhb2sbtHIBBUWA5HU1p2/tjLDydDd+Vaa4=
Subject key identifier: CB:EB:35:89:A0:A3:95:0D:AA:33:73:F1:1B:01:B3:5A:74:D5:02:E0
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019CADC77C9764B0ACAE7E00CDCEFD93D705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0CB4
Signing time: Mon 02 Mar 2026 09:00:57 +0000
Manifest this update: Mon 02 Mar 2026 09:00:57 +0000
Manifest next update: Tue 03 Mar 2026 09:00:57 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: 1djhr8bKly5NBd4iC3CERkNOrioZ6SpmYzbEcFrxUE8=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7c:97:64:b0:ac:ae:7e:00:cd:ce:fd:93:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Mar 2 09:00:57 2026 GMT
Not After : Mar 3 09:00:57 2026 GMT
Subject: CN=cbeb3589a0a3950daa3373f11b01b35a74d502e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:dd:5e:22:f1:d1:22:22:b8:05:10:51:3c:
78:c0:cd:a9:46:ec:de:1b:30:56:1d:89:fe:26:b5:
b4:d6:0d:dc:9d:f2:d7:49:9b:b4:40:f6:1c:15:a3:
9a:27:7e:9d:9e:fa:49:d4:ee:82:4f:a3:63:56:6c:
9e:23:dc:9b:db:bd:78:67:bc:d1:17:7a:b4:a7:77:
2d:06:cf:e0:0c:bb:42:04:90:fe:52:13:bf:22:32:
aa:7e:44:40:c2:0c:ec:f0:22:e6:a3:b4:a6:ef:85:
a0:30:20:af:a7:0a:e2:bb:eb:e7:13:3f:4b:b4:7b:
18:7a:05:53:76:bd:30:8c:5f:18:62:be:4d:27:88:
c2:95:e9:08:1a:1d:15:27:69:29:1b:4e:4c:99:c8:
cd:a5:73:12:64:a1:e2:48:f7:ec:16:60:9c:bb:90:
db:2c:2c:19:9d:77:10:80:e8:7a:e4:ce:18:97:1b:
26:a4:b5:72:66:6b:85:e8:d1:7f:cd:87:17:03:84:
15:28:66:b7:5c:a8:c9:85:3f:59:03:5f:cc:a1:00:
f8:d3:6a:12:bc:ca:5a:5f:56:3e:93:94:c7:3c:95:
e4:16:7f:3f:17:94:65:e7:40:96:74:11:ee:f9:80:
dc:11:37:57:98:57:93:ab:6f:c0:53:e3:93:73:2a:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:35:89:A0:A3:95:0D:AA:33:73:F1:1B:01:B3:5A:74:D5:02:E0
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1e:47:71:ab:6e:26:8f:08:1c:24:71:7a:b9:99:7c:8c:d7:
24:50:57:78:59:ed:9c:12:c2:0f:99:89:22:4a:b6:ac:54:58:
da:39:42:5b:1a:f4:6c:26:90:d3:6f:1b:ae:f6:f8:c7:d6:3b:
d5:5f:c8:fb:33:a7:2e:a7:18:e6:07:9e:ed:d4:dc:12:d2:52:
d8:ce:b9:ed:ee:40:b6:dc:c2:06:44:a6:dc:b0:12:2f:49:71:
33:56:1c:74:c8:0a:28:f4:03:5f:81:95:10:90:02:b3:22:5f:
60:9e:85:31:81:5d:f9:e6:c1:35:c4:ce:4f:5c:fe:34:44:e7:
81:62:f4:ab:13:e3:b9:d7:c3:53:81:d3:da:04:33:06:85:0f:
70:58:55:4a:2f:31:a7:29:8d:92:7f:87:41:e8:c9:a5:3e:00:
e9:7f:f1:ce:4d:01:47:a0:75:cf:68:57:5f:c1:1e:62:38:97:
16:40:29:31:95:a6:70:76:7a:dc:cd:41:81:3c:eb:4e:53:68:
02:38:03:25:0d:63:c9:34:4c:26:2f:7b:60:6b:ad:51:11:bd:
35:ef:ab:19:b9:d1:78:f6:d3:45:52:b5:06:6d:ce:30:d2:de:
57:3d:79:c8:53:2d:52:52:47:50:40:64:5e:41:18:d3:bf:22:
03:fe:0d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3yXZLCsrn4Azc79k9cFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx
YTg3NWMwHhcNMjYwMzAyMDkwMDU3WhcNMjYwMzAzMDkwMDU3WjAzMTEwLwYDVQQD
EyhjYmViMzU4OWEwYTM5NTBkYWEzMzczZjExYjAxYjM1YTc0ZDUwMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ndXiLx0SIiuAUQUTx4wM2pRuze
GzBWHYn+JrW01g3cnfLXSZu0QPYcFaOaJ36dnvpJ1O6CT6NjVmyeI9yb2714Z7zR
F3q0p3ctBs/gDLtCBJD+UhO/IjKqfkRAwgzs8CLmo7Sm74WgMCCvpwriu+vnEz9L
tHsYegVTdr0wjF8YYr5NJ4jClekIGh0VJ2kpG05MmcjNpXMSZKHiSPfsFmCcu5Db
LCwZnXcQgOh65M4YlxsmpLVyZmuF6NF/zYcXA4QVKGa3XKjJhT9ZA1/MoQD402oS
vMpaX1Y+k5THPJXkFn8/F5Rl50CWdBHu+YDcETdXmFeTq2/AU+OTcyqCbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvrNYmgo5UNqjNz8RsBs1p01QLgMB8GA1UdIwQY
MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt
OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx
LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR5Hcatu
Jo8IHCRxermZfIzXJFBXeFntnBLCD5mJIkq2rFRY2jlCWxr0bCaQ028brvb4x9Y7
1V/I+zOnLqcY5gee7dTcEtJS2M657e5AttzCBkSm3LASL0lxM1YcdMgKKPQDX4GV
EJACsyJfYJ6FMYFd+ebBNcTOT1z+NETngWL0qxPjudfDU4HT2gQzBoUPcFhVSi8x
pymNkn+HQejJpT4A6X/xzk0BR6B1z2hXX8EeYjiXFkApMZWmcHZ63M1BgTzrTlNo
AjgDJQ1jyTRMJi97YGutURG9Ne+rGbnRePbTRVK1Bm3OMNLeVz15yFMtUlJHUEBk
XkEY078iA/4NnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:42 2026 by rpki-client