Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: CYlQxUiQ67RA0ivtPxKHdLwtdFcJ3QSt2K+iBEqJ5SE=
Subject key identifier: E2:A4:6B:23:16:75:99:32:CB:37:C8:5E:B5:D3:E3:4A:56:0B:FC:6E
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019D9850C9FC68DCC25E97E55126D733AEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 072A
Signing time: Thu 16 Apr 2026 22:02:04 +0000
Manifest this update: Thu 16 Apr 2026 22:02:04 +0000
Manifest next update: Fri 17 Apr 2026 22:02:04 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: zZk+8KgGQLpguh/p9sHBIuP7XBtid0YDJn1d6FthLoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:c9:fc:68:dc:c2:5e:97:e5:51:26:d7:33:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Apr 16 22:02:04 2026 GMT
Not After : Apr 17 22:02:04 2026 GMT
Subject: CN=e2a46b2316759932cb37c85eb5d3e34a560bfc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:94:2b:ca:66:cc:cf:9e:d8:7c:69:9b:e6:
86:4f:18:03:7c:07:f5:df:9b:ba:dc:02:d1:9e:e3:
f8:8d:a8:b1:da:b3:8c:31:3d:d7:96:91:2a:fa:ac:
90:e6:6b:cf:56:ae:5f:3f:38:50:da:e4:c6:4a:16:
6f:4d:1a:17:12:d4:0b:6b:7c:21:08:8b:5e:d5:58:
ef:1a:82:5d:53:ee:09:9c:7e:20:d0:93:0b:7e:a6:
c4:a5:fd:2f:4c:e8:3d:2b:e7:97:92:78:be:b0:87:
69:e3:ef:9b:5e:28:d5:a1:c6:1d:b1:a2:35:69:06:
2e:7a:a8:ba:c2:fc:e7:03:30:64:de:ed:63:e4:99:
34:52:f9:3d:b9:c1:29:00:e5:79:e6:0e:5f:9f:6b:
cf:24:3b:8f:65:bb:2b:23:93:0f:66:47:91:8e:39:
e1:a1:df:f1:cf:d7:91:58:90:b2:ec:a9:f4:93:0e:
a2:6d:53:1e:b5:65:d5:b0:22:85:57:5e:88:49:f3:
36:7d:b1:86:a8:fa:66:09:6f:2c:db:d6:bc:7f:c7:
50:21:6b:50:87:77:0e:f1:71:0b:fb:6e:04:5e:b2:
7e:a0:22:15:26:9d:06:eb:31:88:48:4d:59:56:4d:
0f:3f:b6:7f:7f:a7:ad:64:b8:f3:07:63:e7:f8:23:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:6B:23:16:75:99:32:CB:37:C8:5E:B5:D3:E3:4A:56:0B:FC:6E
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:13:6b:01:04:6b:fb:05:17:f9:61:e4:a5:75:cb:ba:2b:75:
68:0c:cf:13:2e:52:e2:dc:19:e5:20:30:23:68:b3:25:bd:d9:
ff:23:39:22:06:ac:35:23:b9:f3:8d:d6:cc:84:82:3d:3b:0c:
da:ea:d3:14:1e:62:d5:2d:64:80:f0:65:40:b2:f4:6d:08:65:
83:a7:41:6c:05:79:36:00:d0:06:fb:cb:8c:90:2a:82:55:ad:
8d:dc:46:d8:6d:0c:c1:cf:c6:6b:90:d1:4d:3d:ad:51:91:f1:
76:19:56:ac:fa:40:30:86:e0:6d:f0:e8:e4:bf:fd:03:19:19:
84:44:1a:8f:10:af:de:db:f4:d0:b8:e6:79:a2:65:07:e1:05:
e5:17:3c:ef:40:a2:10:3b:b4:32:77:f2:ff:3b:f0:de:b5:5e:
76:c7:06:31:13:54:cf:d8:63:52:ec:62:fc:4e:f2:c3:ea:ac:
12:0a:4f:9a:42:d1:16:4a:80:fc:d6:4e:5e:56:00:90:e2:54:
94:3c:9b:52:d3:52:c6:84:8b:df:5f:dc:96:c0:ae:75:27:96:
38:b1:be:87:73:36:fb:42:21:1c:2b:e2:9f:f2:e2:3d:e7:3f:
44:79:0d:9c:35:2b:51:e8:70:8a:81:40:89:16:cc:59:f8:d9:
64:db:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:52 2026 by rpki-client