Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: unZQDVB049PPJeL/erzxHz3fyEJML/c5C+R5ETeQqpQ=
Subject key identifier: 9A:EA:0D:88:4D:FA:CB:04:18:64:63:46:D0:85:B2:39:79:8B:F3:91
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019CAAFCFAD9A94E02408F5BF48F5ADC5D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: LUa32G1HgUVhUSsPqtD/UJIhGBNuNaZkxCVPnYQJs2k=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fa:d9:a9:4e:02:40:8f:5b:f4:8f:5a:dc:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=9aea0d884dfacb0418646346d085b239798bf391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:cc:fe:17:b6:b6:ac:d9:71:0a:bd:34:56:
0e:73:55:c9:4f:89:39:7e:39:68:f5:76:85:5b:ab:
93:cf:f0:47:d9:cf:17:3b:24:1c:04:31:76:a6:70:
e2:9c:c7:89:9c:b3:59:36:19:62:d3:cc:b3:25:22:
ad:0e:57:9c:ab:75:66:16:fc:29:ec:9a:9f:91:ed:
27:cf:e3:9f:8e:ed:12:45:74:92:e1:00:c9:d5:21:
5b:0a:6f:ce:c0:4e:5d:7f:49:81:72:36:80:d5:2e:
ab:a5:12:9a:bc:d4:97:3e:ac:63:3e:3b:20:8e:65:
d2:f3:ca:d5:32:60:48:e9:ca:cb:b6:84:d9:58:9d:
99:ac:23:49:a4:34:22:9a:5f:9a:7b:ec:a7:a8:f1:
40:ee:e2:78:2d:9a:b9:c1:3d:ec:73:07:fc:4f:1c:
de:53:97:c8:6d:6f:69:14:52:fb:f5:63:4c:f0:7c:
a4:90:62:ac:85:fa:bc:0b:f6:f5:79:bc:c9:e3:5d:
2d:05:7a:2d:c3:bd:16:28:d8:7a:a0:1e:0d:d6:83:
a6:b9:8c:a5:e4:c6:26:e6:18:8a:db:53:9e:66:aa:
7a:49:25:aa:82:d8:ee:2c:27:0a:4d:0e:69:45:fb:
6a:fe:61:eb:cd:f5:f9:a7:2a:f1:0b:fb:1f:8f:99:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:0D:88:4D:FA:CB:04:18:64:63:46:D0:85:B2:39:79:8B:F3:91
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8b:84:9d:8e:46:0e:eb:bc:fe:27:bf:6b:50:4e:51:37:db:
0d:7e:48:72:51:a7:48:a9:e1:c5:c4:2f:ec:0d:3c:9c:88:d6:
84:9d:79:36:8e:d0:6d:83:3b:89:43:f4:9c:1c:16:03:23:c9:
58:91:98:48:f3:4c:eb:1d:8d:67:20:f5:fd:91:ca:b6:b3:66:
f1:a9:6e:f6:3d:51:76:ac:96:49:1e:e0:68:7f:bd:33:4b:cd:
4d:91:42:07:8c:86:8b:e9:42:5a:84:ed:f5:e3:e0:00:71:b9:
65:00:39:d4:2b:df:27:cb:9a:b7:e6:5c:be:02:d1:14:75:2f:
c2:7a:b2:8c:ce:02:37:87:e3:68:0c:23:54:56:53:39:27:b0:
51:d3:29:9f:60:f1:93:ca:ca:7e:0d:3b:82:86:20:89:b4:7d:
17:e8:eb:21:0c:d3:9f:ef:21:0d:38:a0:7a:d7:27:f1:09:37:
14:da:50:30:7e:95:1b:86:7b:27:81:3f:1a:61:15:30:a6:ef:
66:8f:b9:99:f5:8a:b8:6c:a6:ae:2a:81:40:ed:a0:b7:33:0b:
9c:09:ca:1a:6a:49:c1:95:a2:a5:f6:93:96:8d:b3:1e:8e:e7:
05:e6:ea:49:25:11:14:ee:47:df:d5:67:a3:3e:f9:94:96:d6:
d0:af:dc:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/PrZqU4CQI9b9I9a3F06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwMzAxMjAwMDMxWhcNMjYwMzAyMjAwMDMxWjAzMTEwLwYDVQQD
Eyg5YWVhMGQ4ODRkZmFjYjA0MTg2NDYzNDZkMDg1YjIzOTc5OGJmMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbrM/he2tqzZcQq9NFYOc1XJT4k5
fjlo9XaFW6uTz/BH2c8XOyQcBDF2pnDinMeJnLNZNhli08yzJSKtDlecq3VmFvwp
7Jqfke0nz+Ofju0SRXSS4QDJ1SFbCm/OwE5df0mBcjaA1S6rpRKavNSXPqxjPjsg
jmXS88rVMmBI6crLtoTZWJ2ZrCNJpDQiml+ae+ynqPFA7uJ4LZq5wT3scwf8Txze
U5fIbW9pFFL79WNM8HykkGKshfq8C/b1ebzJ410tBXotw70WKNh6oB4N1oOmuYyl
5MYm5hiK21OeZqp6SSWqgtjuLCcKTQ5pRftq/mHrzfX5pyrxC/sfj5kliwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrqDYhN+ssEGGRjRtCFsjl5i/ORMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYuEnY5G
Duu8/ie/a1BOUTfbDX5IclGnSKnhxcQv7A08nIjWhJ15No7QbYM7iUP0nBwWAyPJ
WJGYSPNM6x2NZyD1/ZHKtrNm8alu9j1RdqyWSR7gaH+9M0vNTZFCB4yGi+lCWoTt
9ePgAHG5ZQA51CvfJ8uat+ZcvgLRFHUvwnqyjM4CN4fjaAwjVFZTOSewUdMpn2Dx
k8rKfg07goYgibR9F+jrIQzTn+8hDTigetcn8Qk3FNpQMH6VG4Z7J4E/GmEVMKbv
Zo+5mfWKuGymriqBQO2gtzMLnAnKGmpJwZWipfaTlo2zHo7nBebqSSURFO5H39Vn
oz75lJbW0K/crg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:14 2026 by rpki-client