Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: Ltu4FC+HCHcxyqZGnKGp7G9A2KypJdlLFOmX/tOIupY=
Subject key identifier: A0:BE:71:05:EC:AF:AA:B6:37:5C:57:E7:1D:FB:E5:5C:66:E1:EA:49
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019D99CFD94B9C93DEEEC582BE28578C5DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0DA4
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: m1F0Lr82i0vPv/oywN4tHEEsMHrH8j2iaCkPTOei69Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d9:4b:9c:93:de:ee:c5:82:be:28:57:8c:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=a0be7105ecafaab6375c57e71dfbe55c66e1ea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:7a:c2:31:29:98:a5:e9:96:6e:96:88:97:
c9:51:b5:18:84:db:36:ac:09:ab:7d:69:4d:0a:fb:
34:71:69:de:5c:9f:ea:d3:e0:95:4e:43:33:bf:1a:
93:46:a8:5e:52:7a:24:dd:ff:03:bc:1a:a9:68:b4:
26:d1:25:7b:8d:48:f2:c0:f8:fd:4a:e6:86:4e:84:
61:00:5f:5f:ae:bc:cf:98:39:e3:01:3d:a8:e5:6e:
af:f8:50:ef:7f:57:ba:fb:e2:97:b4:19:95:89:57:
e2:cb:03:09:5d:86:e4:9f:cf:1c:f6:c5:40:4e:a0:
10:d7:e4:9f:fe:e2:91:46:61:00:17:63:d7:a8:03:
26:6e:40:b2:3d:c4:c5:38:8a:6e:2e:7b:dd:f8:da:
46:74:b8:ea:0c:c6:80:9f:04:0f:89:07:00:8a:50:
06:e0:c1:87:92:08:52:09:c4:33:7d:76:86:a0:83:
dc:87:f7:98:e2:23:36:e5:f8:e7:2e:b0:15:67:4f:
0d:97:92:d1:c9:61:de:9c:91:4f:f3:fd:76:48:55:
2a:61:ba:47:eb:33:7c:98:b9:ee:ed:7c:9c:2e:8e:
d3:10:bf:00:ae:5c:28:32:3d:96:4e:68:3b:9e:6f:
2a:c5:84:41:25:4d:1f:dc:52:0e:37:34:4e:95:dc:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BE:71:05:EC:AF:AA:B6:37:5C:57:E7:1D:FB:E5:5C:66:E1:EA:49
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:af:d6:44:ae:62:4a:04:98:6b:43:4a:e5:65:07:4a:ad:63:
61:1c:99:4c:9d:ee:53:85:52:ab:f1:a0:6c:e9:2b:7c:7c:8e:
fa:02:c4:d4:7d:1a:f4:9f:dc:6c:8f:55:b6:fb:f7:0f:4b:14:
c4:a2:ed:c1:17:6a:29:6b:43:72:63:a9:33:4b:f6:4f:98:1e:
92:38:56:cd:23:14:75:40:f4:b7:bb:c4:d5:34:cc:12:bb:53:
2f:0f:48:f4:8b:cf:4a:39:b9:f5:aa:9f:14:05:1e:67:79:5b:
dc:7a:68:86:5c:6b:1e:5b:0a:38:45:9b:1b:e5:a6:ee:65:7a:
35:54:19:72:f9:b1:c0:08:17:8f:1d:88:2c:b5:ed:66:38:1f:
34:22:49:cb:65:7c:e9:6a:a1:1f:be:52:60:9d:ee:13:c2:ef:
30:b6:78:c1:5f:57:67:57:32:1c:62:1d:4e:72:2a:e9:f1:eb:
79:42:17:b3:53:43:d3:97:cc:e7:37:03:5e:e1:13:c3:91:dd:
12:31:81:97:de:0f:b1:58:e4:25:f9:0f:20:f1:17:39:45:d3:
5c:0f:ad:0f:2e:4c:0c:47:54:22:ac:1c:be:a7:48:7e:63:e1:
dc:40:91:8d:c0:90:ae:49:a2:45:d6:ca:d6:39:33:c8:01:b5:
28:d6:10:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9lLnJPe7sWCvihXjF3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjYwNDE3MDUwMDI4WhcNMjYwNDE4MDUwMDI4WjAzMTEwLwYDVQQD
EyhhMGJlNzEwNWVjYWZhYWI2Mzc1YzU3ZTcxZGZiZTU1YzY2ZTFlYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14V6wjEpmKXplm6WiJfJUbUYhNs2
rAmrfWlNCvs0cWneXJ/q0+CVTkMzvxqTRqheUnok3f8DvBqpaLQm0SV7jUjywPj9
SuaGToRhAF9frrzPmDnjAT2o5W6v+FDvf1e6++KXtBmViVfiywMJXYbkn88c9sVA
TqAQ1+Sf/uKRRmEAF2PXqAMmbkCyPcTFOIpuLnvd+NpGdLjqDMaAnwQPiQcAilAG
4MGHkghSCcQzfXaGoIPch/eY4iM25fjnLrAVZ08Nl5LRyWHenJFP8/12SFUqYbpH
6zN8mLnu7XycLo7TEL8ArlwoMj2WTmg7nm8qxYRBJU0f3FIONzROldw8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC+cQXsr6q2N1xX5x375Vxm4epJMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6/WRK5i
SgSYa0NK5WUHSq1jYRyZTJ3uU4VSq/GgbOkrfHyO+gLE1H0a9J/cbI9Vtvv3D0sU
xKLtwRdqKWtDcmOpM0v2T5gekjhWzSMUdUD0t7vE1TTMErtTLw9I9IvPSjm59aqf
FAUeZ3lb3HpohlxrHlsKOEWbG+Wm7mV6NVQZcvmxwAgXjx2ILLXtZjgfNCJJy2V8
6WqhH75SYJ3uE8LvMLZ4wV9XZ1cyHGIdTnIq6fHreUIXs1ND05fM5zcDXuETw5Hd
EjGBl94PsVjkJfkPIPEXOUXTXA+tDy5MDEdUIqwcvqdIfmPh3ECRjcCQrkmiRdbK
1jkzyAG1KNYQ4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:40 2026 by rpki-client