Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: AjrHHMZI9MouX2QEcCievWpuFQ+E/AOj+Pzop/Na7Lo=
Subject key identifier: 47:0B:0F:AB:39:7A:D6:7C:16:C0:B1:B8:D2:6F:E3:3E:78:E3:B4:36
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 019CABD930284968097D82FB7BAB4B806479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 08A0
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: IHQGYZycBDyAVTPAum8XIrj47kQ.roa (hash: S11IX6oJmfauUmzmopL+w4IEvy2f52JVhN8t0Q5+tAM=)
2: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: +KZ6iXxGUj2wH8I4HlCjeUpVnwgT4N3o12OH1N7trTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:30:28:49:68:09:7d:82:fb:7b:ab:4b:80:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=470b0fab397ad67c16c0b1b8d26fe33e78e3b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:25:a4:51:19:1f:f4:14:2f:d5:49:a3:62:
a7:05:48:9c:85:4c:db:44:58:8d:1f:b2:86:7d:5a:
fd:d4:93:c3:54:95:a9:27:a8:23:36:a4:dc:b8:66:
35:4e:f8:74:4b:3f:2c:b8:01:02:a4:e8:cd:12:63:
d3:24:d8:f8:f8:f5:59:f6:f2:e6:3b:8b:41:db:54:
43:39:92:66:0f:3e:de:cd:2e:7e:a0:f6:c4:e2:fc:
c9:1b:16:a7:d0:a3:3e:c5:07:c3:95:fa:44:15:1d:
0b:f3:35:d7:2b:6c:b1:c3:14:df:d6:f1:9d:ce:14:
28:01:ac:d0:88:47:da:29:f2:59:75:d2:7d:45:b5:
47:85:89:21:9f:28:08:ef:29:07:22:a6:f1:1f:b6:
7c:64:83:e6:b1:02:9f:49:cb:4e:ac:9e:19:18:38:
61:6a:1e:ed:43:7d:d3:c8:1d:f4:ad:24:b6:5e:07:
97:fe:d2:c6:17:d2:41:ec:cf:5f:6e:9c:be:b6:0e:
5a:57:1b:07:ad:92:29:5c:71:8d:63:0d:85:aa:03:
da:8c:1e:78:30:e2:a9:e2:38:7f:52:92:32:e9:82:
cd:a4:65:05:cf:19:26:d6:1c:76:f7:95:5a:aa:39:
af:65:b8:60:24:02:ca:46:d2:ec:f6:b3:6f:2b:fb:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0B:0F:AB:39:7A:D6:7C:16:C0:B1:B8:D2:6F:E3:3E:78:E3:B4:36
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:cf:0e:93:ad:75:72:40:c1:d0:b6:a9:7d:58:d4:09:85:
fe:4d:d8:8f:aa:b5:bb:e8:70:b0:84:31:f2:03:e3:c3:db:b7:
9a:e8:0f:3c:01:24:1d:e3:26:9d:c0:5b:f0:23:23:5b:89:20:
c7:7c:28:04:f2:3a:e5:cb:87:c5:4b:93:cf:68:44:98:5f:08:
3c:d1:f4:90:26:c1:de:ef:8a:86:ff:1b:7d:ae:42:03:dd:d6:
34:fb:e4:59:26:a4:85:6d:31:34:bd:5e:30:11:4d:f4:3e:8f:
af:a3:1e:9f:2e:f7:ca:87:5e:cc:ef:dd:b7:74:96:44:34:71:
dc:bf:b9:9d:f9:91:06:29:7b:44:61:6a:2f:68:15:c2:9f:47:
be:8a:b5:9b:54:ee:cc:cd:9b:56:95:34:92:de:b3:b7:a8:09:
bf:dc:38:33:87:5b:46:bd:98:d1:22:d8:fa:f4:f0:c5:19:a6:
c2:b2:c6:63:e9:8c:54:49:b0:d1:17:ce:5d:b7:0d:f4:72:62:
b6:1a:ac:cb:21:52:4c:8e:81:7b:26:89:5c:3c:0e:0a:ad:83:
1c:89:8e:d4:81:ad:59:03:a1:b9:98:95:5f:48:a6:87:7c:9a:
0a:2a:ea:5d:14:c6:d7:0b:80:37:36:e1:e9:98:06:6a:c7:28:
21:27:a0:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2TAoSWgJfYL7e6tLgGR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz
ZDI5M2UwHhcNMjYwMzAyMDAwMTAzWhcNMjYwMzAzMDAwMTAzWjAzMTEwLwYDVQQD
Eyg0NzBiMGZhYjM5N2FkNjdjMTZjMGIxYjhkMjZmZTMzZTc4ZTNiNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI8lpFEZH/QUL9VJo2KnBUichUzb
RFiNH7KGfVr91JPDVJWpJ6gjNqTcuGY1Tvh0Sz8suAECpOjNEmPTJNj4+PVZ9vLm
O4tB21RDOZJmDz7ezS5+oPbE4vzJGxan0KM+xQfDlfpEFR0L8zXXK2yxwxTf1vGd
zhQoAazQiEfaKfJZddJ9RbVHhYkhnygI7ykHIqbxH7Z8ZIPmsQKfSctOrJ4ZGDhh
ah7tQ33TyB30rSS2XgeX/tLGF9JB7M9fbpy+tg5aVxsHrZIpXHGNYw2FqgPajB54
MOKp4jh/UpIy6YLNpGUFzxkm1hx295VaqjmvZbhgJALKRtLs9rNvK/sS0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcLD6s5etZ8FsCxuNJv4z5447Q2MB8GA1UdIwQY
MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt
YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4
LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITDPDpOt
dXJAwdC2qX1Y1AmF/k3Yj6q1u+hwsIQx8gPjw9u3mugPPAEkHeMmncBb8CMjW4kg
x3woBPI65cuHxUuTz2hEmF8IPNH0kCbB3u+Khv8bfa5CA93WNPvkWSakhW0xNL1e
MBFN9D6Pr6Meny73yodezO/dt3SWRDRx3L+5nfmRBil7RGFqL2gVwp9Hvoq1m1Tu
zM2bVpU0kt6zt6gJv9w4M4dbRr2Y0SLY+vTwxRmmwrLGY+mMVEmw0RfOXbcN9HJi
thqsyyFSTI6BeyaJXDwOCq2DHImO1IGtWQOhuZiVX0imh3yaCirqXRTG1wuANzbh
6ZgGascoISeg0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:25 2026 by rpki-client