Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: Q9/QTrypC/Kb4g/C7Pff4/l5O6GYnhnbzJzQpU/O0Vg=
Subject key identifier: 6B:58:7F:D4:A3:58:9F:5B:56:39:4D:E0:DA:BC:01:62:6A:0E:C4:C4
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019D9A06F5CF7B15C3CCE2E100428A8CA349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1683
Signing time: Fri 17 Apr 2026 06:00:40 +0000
Manifest this update: Fri 17 Apr 2026 06:00:40 +0000
Manifest next update: Sat 18 Apr 2026 06:00:40 +0000
Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: oHQi9S+cFMAFThap7i1LrI2Az3ZBi0r7u5OEn1aAs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f5:cf:7b:15:c3:cc:e2:e1:00:42:8a:8c:a3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Apr 17 06:00:40 2026 GMT
Not After : Apr 18 06:00:40 2026 GMT
Subject: CN=6b587fd4a3589f5b56394de0dabc01626a0ec4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:5b:26:e2:56:df:c8:fd:c8:df:54:2c:66:
ca:f2:b6:d5:af:72:80:0c:00:c1:d9:ef:77:8f:cf:
2d:ce:95:4f:45:a6:25:6f:62:53:9d:19:09:ab:74:
56:fc:c4:d7:b4:74:38:bc:e7:04:a6:2e:c5:e2:c1:
10:23:ac:96:11:c1:44:00:96:75:c1:a2:43:03:25:
b7:10:e9:0d:1d:93:57:fc:34:c0:37:55:75:d0:87:
65:be:89:cf:01:31:45:3f:94:c8:72:8c:87:3f:74:
75:84:62:ee:c6:4b:00:fe:3e:bc:a3:c6:df:d0:00:
96:15:8c:64:2d:31:b4:45:ef:82:b0:bb:16:d5:de:
2a:d6:3e:df:0d:39:b2:16:c4:b2:0a:4b:0e:ce:1e:
d0:aa:ee:22:ca:4d:cd:d2:5c:ea:37:b7:d6:17:a8:
4c:6e:25:a6:08:ad:08:76:75:43:14:10:7e:b7:da:
b7:96:a6:ac:20:20:18:09:4e:d1:5c:1e:12:6a:5d:
eb:93:3c:a7:26:4b:ba:1c:91:2c:68:e6:40:31:27:
da:1a:b7:94:b6:7a:e8:ff:f3:fb:46:ac:22:e8:4a:
81:62:4d:89:5e:f5:ba:6c:ef:13:74:7a:9e:ec:e4:
b4:69:68:cf:fb:3d:99:8c:37:91:df:4a:db:20:f2:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:7F:D4:A3:58:9F:5B:56:39:4D:E0:DA:BC:01:62:6A:0E:C4:C4
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:26:0a:51:96:41:db:69:86:f7:54:9e:1c:6e:d4:19:e9:
5d:64:e3:a0:bb:96:f7:da:27:c5:a4:cd:4e:4d:16:94:eb:21:
fe:fb:07:44:ff:2d:f5:a1:eb:5f:84:75:1a:6e:25:3a:2f:08:
f4:a5:40:9b:af:23:e8:ce:4d:e7:3c:f3:c7:93:29:b5:de:81:
e0:ed:a2:23:16:ae:65:47:7c:1f:3b:d2:a2:bc:06:06:94:51:
d6:6e:55:99:84:64:fa:f8:09:8d:3e:d3:a4:6e:e7:ee:04:90:
1d:ae:d4:08:fb:d0:57:e2:76:86:0c:da:fd:ba:69:92:1b:71:
d1:85:23:1f:5d:c2:ea:d5:f3:57:87:4b:ad:f2:02:84:e3:68:
03:d8:21:d7:83:38:aa:22:fb:ab:22:7c:8f:f4:df:e2:12:0c:
35:5a:18:c4:13:5c:74:95:49:5d:cb:d2:c1:37:ff:2a:8a:71:
94:4b:de:b6:76:b9:0c:60:e8:c3:a6:46:f8:f3:06:bc:8a:0b:
a5:ea:c2:3d:f2:2c:00:69:ac:a8:4a:80:2a:e8:e6:6c:ef:0c:
33:80:b0:24:e5:9e:ad:2a:81:1a:7a:03:3a:14:ca:38:d9:df:
ca:eb:ac:2e:5c:f5:73:f2:30:a2:86:b2:95:1a:fc:66:eb:0e:
95:1c:97:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBvXPexXDzOLhAEKKjKNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz
MTI3YzYwHhcNMjYwNDE3MDYwMDQwWhcNMjYwNDE4MDYwMDQwWjAzMTEwLwYDVQQD
Eyg2YjU4N2ZkNGEzNTg5ZjViNTYzOTRkZTBkYWJjMDE2MjZhMGVjNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlxbJuJW38j9yN9ULGbK8rbVr3KA
DADB2e93j88tzpVPRaYlb2JTnRkJq3RW/MTXtHQ4vOcEpi7F4sEQI6yWEcFEAJZ1
waJDAyW3EOkNHZNX/DTAN1V10IdlvonPATFFP5TIcoyHP3R1hGLuxksA/j68o8bf
0ACWFYxkLTG0Re+CsLsW1d4q1j7fDTmyFsSyCksOzh7Qqu4iyk3N0lzqN7fWF6hM
biWmCK0IdnVDFBB+t9q3lqasICAYCU7RXB4Sal3rkzynJku6HJEsaOZAMSfaGreU
tnro//P7Rqwi6EqBYk2JXvW6bO8TdHqe7OS0aWjP+z2ZjDeR30rbIPKXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtYf9SjWJ9bVjlN4Nq8AWJqDsTEMB8GA1UdIwQY
MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt
OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy
LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXQmClGW
QdtphvdUnhxu1BnpXWTjoLuW99onxaTNTk0WlOsh/vsHRP8t9aHrX4R1Gm4lOi8I
9KVAm68j6M5N5zzzx5Mptd6B4O2iIxauZUd8HzvSorwGBpRR1m5VmYRk+vgJjT7T
pG7n7gSQHa7UCPvQV+J2hgza/bppkhtx0YUjH13C6tXzV4dLrfIChONoA9gh14M4
qiL7qyJ8j/Tf4hIMNVoYxBNcdJVJXcvSwTf/KopxlEvetna5DGDow6ZG+PMGvIoL
perCPfIsAGmsqEqAKujmbO8MM4CwJOWerSqBGnoDOhTKONnfyuusLlz1c/Iwooay
lRr8ZusOlRyXhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:23 2026 by rpki-client