Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: dLZbwirWqv3cworu0ofLNHLFN1hpTmyHQ7XwgkTu/YQ=
Subject key identifier: 96:8B:D4:DE:86:A9:C8:CE:42:FE:E4:55:1D:33:5D:8E:30:18:73:C5
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019DA3E649B2A3E4C19F926A7CC10BC41025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0730
Signing time: Sun 19 Apr 2026 04:01:11 +0000
Manifest this update: Sun 19 Apr 2026 04:01:11 +0000
Manifest next update: Mon 20 Apr 2026 04:01:11 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: 6Rsrg2Lf/2K8kS3la8JnIsUkSNWZtwam5ASfrxF50R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:49:b2:a3:e4:c1:9f:92:6a:7c:c1:0b:c4:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Apr 19 04:01:11 2026 GMT
Not After : Apr 20 04:01:11 2026 GMT
Subject: CN=968bd4de86a9c8ce42fee4551d335d8e301873c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:ff:1d:86:fb:3b:17:43:3a:ed:aa:13:80:
7f:27:c2:d4:eb:0a:80:50:03:c1:de:dc:20:6d:0d:
d9:93:89:aa:26:d0:6c:4c:63:d1:22:0b:ca:21:5f:
df:b9:9a:2d:14:b2:7d:6a:5f:4b:39:79:ae:db:7d:
7a:56:23:af:b4:e5:b7:a1:ac:d7:ec:17:98:ec:09:
b4:c1:63:ad:17:df:64:41:64:00:ff:ec:29:8d:e1:
13:4b:f0:8f:6d:85:a8:66:0a:89:dc:e0:ac:ab:3b:
78:63:7c:41:46:c4:3c:10:3f:92:bd:fb:e8:94:0a:
d0:93:39:11:4a:46:06:65:6f:f0:61:b1:03:fd:79:
f1:89:70:e5:30:e7:01:bd:8c:44:29:f9:63:86:7c:
d9:a3:a3:45:f8:d1:58:f1:b3:c7:33:65:c1:7d:e3:
70:3f:c0:5f:ff:15:6b:cf:94:ba:d1:e9:2e:0d:6a:
04:3c:c5:84:17:ec:b9:f4:99:a4:7a:41:b3:f8:0b:
7b:b5:1b:ab:cc:87:fc:8f:0d:0e:89:e1:62:db:35:
d0:36:5d:d3:65:85:7e:73:7d:3e:14:e0:d5:52:2f:
9e:97:94:db:97:da:0e:4f:9d:d8:a1:cf:04:a1:55:
85:bc:9f:42:cf:94:b1:d0:bf:d8:bf:a1:c9:ac:8e:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:D4:DE:86:A9:C8:CE:42:FE:E4:55:1D:33:5D:8E:30:18:73:C5
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:28:0d:e9:6c:e8:94:83:ac:9e:b7:54:56:c8:2e:b8:cb:3c:
22:f2:4b:51:1f:c4:1e:dc:95:6f:3a:c5:10:c9:a5:0a:66:ff:
bc:17:a3:73:bb:e4:03:f7:9b:d8:31:f4:0f:f9:de:53:ed:94:
d8:bd:dc:a8:73:1b:c2:55:d0:98:e4:9f:b8:97:26:5a:85:0d:
e2:50:16:a2:0f:5d:9a:98:fb:11:7c:e8:cb:e4:15:e4:44:66:
fd:c4:af:69:19:3d:22:c0:ef:6e:69:28:d3:94:90:97:88:c1:
08:b9:5c:0c:1b:da:a4:09:5c:96:50:56:84:33:80:29:44:f8:
42:28:83:22:c2:3e:ff:33:63:25:9a:75:8d:81:37:88:76:64:
90:c7:cd:4b:8d:c5:07:08:e7:ca:6c:7c:e7:94:06:69:6b:bb:
7e:4e:16:da:53:27:75:91:ab:8c:71:09:de:df:4b:e8:04:af:
0a:af:92:fe:a6:0a:53:9e:d7:33:20:06:f6:47:4a:b6:93:3f:
29:54:5c:b6:60:a0:1b:8c:bb:e0:46:20:07:d5:b2:b2:08:50:
ee:12:d4:56:28:a5:52:a5:9e:d5:62:5a:dd:a7:64:8e:d9:18:
97:23:3e:cf:ba:c1:d2:ba:83:55:54:f4:45:44:91:95:81:c0:
26:20:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:38:51 2026 by rpki-client