Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: 9JSbuF6+1n0ooffZRCFlHDn2eu/u8t/JTn4/dWUuTO8=
Subject key identifier: D3:3F:C2:CB:0F:13:BB:2E:26:14:26:6D:A3:D3:37:D0:8C:AF:8E:44
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 019D97AAA002DDAB37572287B846716FBE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 07AF
Signing time: Thu 16 Apr 2026 19:00:34 +0000
Manifest this update: Thu 16 Apr 2026 19:00:34 +0000
Manifest next update: Fri 17 Apr 2026 19:00:34 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: tl+lqz66LliA4eFeUdzBwwCDz7sDiN2+opICkfiQkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a0:02:dd:ab:37:57:22:87:b8:46:71:6f:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Apr 16 19:00:34 2026 GMT
Not After : Apr 17 19:00:34 2026 GMT
Subject: CN=d33fc2cb0f13bb2e2614266da3d337d08caf8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:f2:0a:c5:36:2e:1a:03:58:9f:24:6c:e2:
76:44:ed:e0:ac:26:0b:67:8d:b3:38:33:80:cd:de:
7c:9c:82:42:38:d9:6a:1a:ca:99:77:52:2e:60:f4:
99:88:3f:0a:76:f0:c5:b8:be:16:8b:56:5a:ee:c8:
5f:4a:91:33:d8:fd:88:e3:9c:fe:8d:69:4d:fd:f0:
a1:b0:f9:99:27:67:eb:57:28:fe:ee:3e:36:48:60:
bf:39:f3:c3:e9:2c:e4:dc:6b:78:60:eb:a3:dd:1e:
17:e1:04:fb:9a:8e:57:ff:36:44:91:1d:b5:1f:2c:
8b:9e:0d:f7:c5:9c:53:1e:46:53:02:53:0c:3e:a0:
9b:a9:35:48:c5:ba:0b:d8:d4:10:85:d1:65:41:7b:
a7:86:25:f7:e4:20:6d:89:73:0c:54:dd:18:85:a9:
04:7e:65:75:66:a3:3b:31:8a:eb:b0:a1:cf:15:84:
a0:0a:a8:dc:f6:9c:51:45:0f:c8:29:6b:75:bc:73:
cd:7e:2a:6f:e8:90:53:a1:37:7b:0d:19:79:6f:a4:
85:71:c5:69:cb:83:ff:74:c8:c5:81:31:2d:aa:7b:
81:eb:1c:f5:74:f2:e7:2b:70:21:4f:27:5b:e8:c5:
a0:27:87:c4:3b:5e:27:00:e0:83:83:19:f8:2f:42:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:C2:CB:0F:13:BB:2E:26:14:26:6D:A3:D3:37:D0:8C:AF:8E:44
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0c:5a:8d:cc:55:09:4e:36:e7:09:17:a5:a7:c4:a4:b7:73:
e8:eb:dd:ef:9b:05:2c:95:5b:3d:31:37:7b:2e:65:db:67:11:
42:7a:95:a9:0d:95:85:af:5a:ef:e8:0a:15:e8:47:98:9e:bc:
99:b3:73:d6:19:89:a0:c2:f7:b2:a2:90:7c:3e:98:9e:a1:40:
66:1d:ad:38:f2:8b:4c:be:bd:f0:f5:3c:d4:a2:7a:83:b8:08:
7d:2a:e7:50:be:b4:03:2d:53:bd:14:26:7e:dd:48:1c:5a:70:
d3:c2:da:e1:76:2c:53:50:dc:30:0b:24:7e:f7:8e:ef:b3:af:
27:ab:79:af:4e:b5:eb:97:4c:ff:5b:ce:56:66:57:e1:0e:9b:
95:f3:e9:04:b7:0b:86:30:39:44:07:13:5a:bb:61:73:e3:9d:
f2:94:0e:37:71:f3:60:23:29:92:fa:0f:f4:3f:2e:5e:52:a0:
4a:06:7d:9f:8c:d9:90:94:13:37:c6:85:2e:22:52:fd:f5:d2:
30:5f:db:8b:ee:96:ac:81:e1:97:32:1b:85:85:73:a2:7e:a5:
5e:fb:09:12:f7:1a:a1:03:02:a6:fb:35:6a:36:c7:8a:f9:45:
40:42:50:98:0c:0a:44:69:aa:cf:fe:28:9c:4c:93:8b:19:b3:
5d:1f:de:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqqAC3as3VyKHuEZxb75VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzhjYzljNTk0YmM4ZThmMTQ1NDU2ZjQxNTY2ZDhjYmQ0
YWFkM2UwHhcNMjYwNDE2MTkwMDM0WhcNMjYwNDE3MTkwMDM0WjAzMTEwLwYDVQQD
EyhkMzNmYzJjYjBmMTNiYjJlMjYxNDI2NmRhM2QzMzdkMDhjYWY4ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHbyCsU2LhoDWJ8kbOJ2RO3grCYL
Z42zODOAzd58nIJCONlqGsqZd1IuYPSZiD8KdvDFuL4Wi1Za7shfSpEz2P2I45z+
jWlN/fChsPmZJ2frVyj+7j42SGC/OfPD6Szk3Gt4YOuj3R4X4QT7mo5X/zZEkR21
HyyLng33xZxTHkZTAlMMPqCbqTVIxboL2NQQhdFlQXunhiX35CBtiXMMVN0YhakE
fmV1ZqM7MYrrsKHPFYSgCqjc9pxRRQ/IKWt1vHPNfipv6JBToTd7DRl5b6SFccVp
y4P/dMjFgTEtqnuB6xz1dPLnK3AhTydb6MWgJ4fEO14nAOCDgxn4L0L8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM/wssPE7suJhQmbaPTN9CMr45EMB8GA1UdIwQY
MBaAFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgt
ZTgwMmNkNmRhNjA4LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgtZTgwMmNkNmRhNjA4
LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAxajcxV
CU425wkXpafEpLdz6Ovd75sFLJVbPTE3ey5l22cRQnqVqQ2Vha9a7+gKFehHmJ68
mbNz1hmJoML3sqKQfD6YnqFAZh2tOPKLTL698PU81KJ6g7gIfSrnUL60Ay1TvRQm
ft1IHFpw08La4XYsU1DcMAskfveO77OvJ6t5r06165dM/1vOVmZX4Q6blfPpBLcL
hjA5RAcTWrthc+Od8pQON3HzYCMpkvoP9D8uXlKgSgZ9n4zZkJQTN8aFLiJS/fXS
MF/bi+6WrIHhlzIbhYVzon6lXvsJEvcaoQMCpvs1ajbHivlFQEJQmAwKRGmqz/4o
nEyTixmzXR/e2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:27 2026 by rpki-client