Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: 8FCzk5MQmXboFli3BD3+qjI07FL1H5eqcaaUXCPKHzw=
Subject key identifier: 28:C8:C9:A7:30:7E:C7:91:38:C2:4F:F0:24:6E:BC:A2:5B:DE:06:BE
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019CAA217F7544B84D91E71FC9C2DCD5166E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 07F9
Signing time: Sun 01 Mar 2026 16:00:47 +0000
Manifest this update: Sun 01 Mar 2026 16:00:47 +0000
Manifest next update: Mon 02 Mar 2026 16:00:47 +0000
Files and hashes: 1: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (hash: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: dMkzzogfUgm+LKDP+iSnG/XHDwbacZR0s6aPthGslj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7f:75:44:b8:4d:91:e7:1f:c9:c2:dc:d5:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Mar 1 16:00:47 2026 GMT
Not After : Mar 2 16:00:47 2026 GMT
Subject: CN=28c8c9a7307ec79138c24ff0246ebca25bde06be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:48:23:a7:d3:8a:ac:e4:9a:f7:d1:e1:09:
9c:d3:3b:d1:65:96:64:49:4c:54:e7:b9:85:5b:62:
3c:13:29:3e:aa:d8:8a:8c:a1:e3:e5:dc:ea:da:5b:
00:b3:85:1b:5b:57:a5:49:b9:a8:0c:d7:06:f0:a5:
56:2a:23:e2:36:81:1d:1a:be:e9:3f:78:fc:16:45:
51:6c:56:ab:2d:9e:61:8a:7e:60:85:b0:19:32:8d:
06:49:28:ed:40:65:06:ec:6d:f9:e4:0b:61:69:e3:
a5:f8:3b:b3:ba:2e:c1:33:11:40:d7:74:7d:90:4d:
b0:c2:a8:e8:78:5c:14:0f:39:23:8b:05:e5:21:18:
f8:f5:9d:3c:df:6d:cc:11:95:2a:ec:02:37:aa:c5:
ae:f6:f8:3e:9d:90:32:3a:58:45:61:45:02:b8:cd:
3e:0a:55:3d:c8:ed:4b:82:92:47:f5:47:db:a7:79:
ef:05:a9:f4:08:ee:c6:55:96:a0:ed:27:9b:bd:83:
5c:a3:ef:a3:5e:cc:d7:1d:d0:d1:fe:15:85:85:2b:
46:c6:0f:19:7d:b9:f8:7a:25:4f:38:10:8f:0a:26:
3c:43:82:35:8d:04:bf:f3:b0:85:a9:c5:47:55:6a:
4d:a1:57:0c:b1:2f:d9:43:ea:b6:8b:4e:e9:b5:64:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:C9:A7:30:7E:C7:91:38:C2:4F:F0:24:6E:BC:A2:5B:DE:06:BE
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9e:f2:e4:6d:6d:23:a6:98:8e:46:26:5c:a4:a5:f8:a1:d8:
39:a2:75:97:5e:1d:9c:ce:56:4d:12:88:ea:5e:9e:ba:81:2a:
51:27:86:3d:9f:08:c7:e2:94:40:16:e5:d1:94:d4:c7:26:89:
b1:cf:44:af:ed:40:f7:8f:f4:e1:9d:3a:72:33:ce:4c:74:09:
7a:93:af:ec:3a:9e:1d:99:8b:a8:a9:bf:91:a3:ce:05:6f:c3:
d3:d6:4d:e9:79:6f:f5:d4:6c:a7:58:4e:4a:e0:ea:b7:28:d1:
a7:00:b0:68:b3:11:8c:a5:93:2e:f1:98:1a:21:24:5b:c0:81:
c1:c5:f0:56:f4:3b:23:47:48:c6:61:fd:91:01:73:9c:f3:18:
3e:40:52:ef:44:fc:30:b3:ff:47:c1:06:d2:85:07:27:28:97:
88:7b:49:99:63:aa:e4:12:6a:da:2b:ff:82:5f:8d:56:87:00:
e1:11:9e:ab:4d:6c:fc:b2:36:b7:e4:61:43:02:e8:e0:5a:bc:
16:d9:6e:c4:fa:d5:f3:e3:65:19:54:ad:c3:4a:9a:76:45:18:
a6:ab:23:8d:b0:c1:39:41:34:a5:65:a4:70:91:b7:2b:b2:09:
1f:48:4e:1f:17:15:43:d7:0d:bb:92:76:8e:5b:92:4c:4e:f7:
1c:d5:77:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIX91RLhNkecfycLc1RZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh
NDA4OGMwHhcNMjYwMzAxMTYwMDQ3WhcNMjYwMzAyMTYwMDQ3WjAzMTEwLwYDVQQD
EygyOGM4YzlhNzMwN2VjNzkxMzhjMjRmZjAyNDZlYmNhMjViZGUwNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRII6fTiqzkmvfR4Qmc0zvRZZZk
SUxU57mFW2I8Eyk+qtiKjKHj5dzq2lsAs4UbW1elSbmoDNcG8KVWKiPiNoEdGr7p
P3j8FkVRbFarLZ5hin5ghbAZMo0GSSjtQGUG7G355AthaeOl+Duzui7BMxFA13R9
kE2wwqjoeFwUDzkjiwXlIRj49Z08323MEZUq7AI3qsWu9vg+nZAyOlhFYUUCuM0+
ClU9yO1LgpJH9Ufbp3nvBan0CO7GVZag7SebvYNco++jXszXHdDR/hWFhStGxg8Z
fbn4eiVPOBCPCiY8Q4I1jQS/87CFqcVHVWpNoVcMsS/ZQ+q2i07ptWSlBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjIyacwfseROMJP8CRuvKJb3ga+MB8GA1UdIwQY
MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt
Yzg4NmZiNmIzYmNkLzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk
LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN57y5G1t
I6aYjkYmXKSl+KHYOaJ1l14dnM5WTRKI6l6euoEqUSeGPZ8Ix+KUQBbl0ZTUxyaJ
sc9Er+1A94/04Z06cjPOTHQJepOv7DqeHZmLqKm/kaPOBW/D09ZN6Xlv9dRsp1hO
SuDqtyjRpwCwaLMRjKWTLvGYGiEkW8CBwcXwVvQ7I0dIxmH9kQFznPMYPkBS70T8
MLP/R8EG0oUHJyiXiHtJmWOq5BJq2iv/gl+NVocA4RGeq01s/LI2t+RhQwLo4Fq8
FtluxPrV8+NlGVStw0qadkUYpqsjjbDBOUE0pWWkcJG3K7IJH0hOHxcVQ9cNu5J2
jluSTE73HNV3WQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:08 2026 by rpki-client