Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: MDTKlELoo2rOM0Kfip2AXgK35i0hN2Xb/0l07w3e7h8=
Subject key identifier: 9F:F1:6D:73:74:50:3F:AA:05:A2:A0:E3:32:0E:7F:C9:61:E9:30:29
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 019D9A3E9BE3A93AF80C2D4726045FC39345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 04A2
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: ReyHSx5OaAHEAN_31kdMwxjhNUA.roa (hash: FJpHlOJWbKJBBURtI4JmCkNfG/SkO9cYxdgcfQETxWo=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: QTMi7oQizO6O4XQvq2jpjZqF/rzHWYPOsmIEgxkTga4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9b:e3:a9:3a:f8:0c:2d:47:26:04:5f:c3:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=9ff16d7374503faa05a2a0e3320e7fc961e93029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:e0:50:ec:42:fe:a6:65:82:3a:ae:16:84:
20:e2:b7:d7:ff:d4:64:31:9f:17:26:cc:2e:99:d1:
6f:3a:2a:af:f3:75:0c:e1:77:be:d4:7b:42:2a:d7:
0f:30:a2:e7:72:d0:87:fb:84:2e:4c:47:e4:cb:71:
eb:d6:94:86:53:04:87:5d:c6:bd:42:07:f5:b0:75:
9b:76:b3:9e:98:09:d1:3c:58:50:eb:df:5a:a0:d8:
3d:20:af:5d:4f:84:19:10:88:59:5d:aa:ee:ee:cf:
73:4b:53:81:15:3d:59:09:82:5d:d4:73:ae:f8:64:
97:2b:45:1d:92:c2:57:b0:1a:2d:18:ae:73:16:ae:
7a:62:2f:fb:a3:ae:cf:6c:a6:35:44:1b:48:99:db:
4d:3e:f9:27:88:58:ff:5f:88:a0:de:ff:71:15:d3:
55:0e:6d:4c:99:4c:a1:f3:79:fb:69:3a:bb:95:16:
83:af:0a:eb:5e:ac:84:4b:52:a5:15:1f:d6:74:26:
60:ae:eb:15:ee:47:85:db:f8:62:a6:00:93:c2:25:
a8:ce:7f:d7:45:60:ba:b4:c4:5c:d3:8d:05:4b:c4:
e3:b4:bf:16:b7:86:06:9a:7e:78:01:7a:70:b4:d3:
91:bf:aa:a1:c4:4f:fd:e1:a4:c2:7c:c1:15:59:0d:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:6D:73:74:50:3F:AA:05:A2:A0:E3:32:0E:7F:C9:61:E9:30:29
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:fa:3d:da:7d:45:8b:7a:4a:43:b3:a6:4b:3f:94:c1:e2:
b0:c3:3b:16:3c:e9:00:4b:0a:e8:bf:84:ec:c7:9d:a7:84:a7:
f9:a5:3b:c1:43:b4:59:22:c4:fe:7c:9e:47:fa:67:85:c0:a2:
26:a2:e0:9e:01:fd:8c:1c:f2:13:53:c2:39:82:a4:00:0e:70:
e1:4c:b9:83:2a:1b:e8:86:db:bc:52:9e:6a:c0:ae:21:16:9a:
14:e0:1c:c6:b2:74:62:51:3c:27:c8:1e:75:bd:e2:55:41:69:
ea:ff:aa:8a:80:62:26:65:63:30:4d:d3:48:a6:c3:bf:19:64:
bb:e0:f2:8a:82:66:97:06:8d:ba:3d:07:78:60:0f:b6:b1:7e:
c6:7c:bd:64:27:ee:eb:89:a8:78:e2:7d:61:5b:4d:78:94:da:
b1:aa:54:81:0f:09:01:5b:9a:ea:37:33:3a:1e:b7:b6:36:33:
80:07:b9:61:59:86:dc:d7:d1:f4:52:4d:9e:f7:40:46:fd:f8:
ab:85:68:0e:7f:69:5d:b2:8f:37:44:c7:c7:52:55:2e:be:d1:
c1:fe:32:c2:99:a1:bf:11:99:cb:f0:e1:2c:b6:a4:fb:68:e0:
db:bc:a3:1f:46:21:f4:95:2b:ce:1c:55:19:d0:f3:ca:f7:79:
27:b4:62:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPpvjqTr4DC1HJgRfw5NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Y2NjMGVjZGNlYjdjNGRhOTEyZTFkNzkyYmQxNmU2MjJh
ZjRhNDYwHhcNMjYwNDE3MDcwMTI3WhcNMjYwNDE4MDcwMTI3WjAzMTEwLwYDVQQD
Eyg5ZmYxNmQ3Mzc0NTAzZmFhMDVhMmEwZTMzMjBlN2ZjOTYxZTkzMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhDgUOxC/qZlgjquFoQg4rfX/9Rk
MZ8XJswumdFvOiqv83UM4Xe+1HtCKtcPMKLnctCH+4QuTEfky3Hr1pSGUwSHXca9
Qgf1sHWbdrOemAnRPFhQ699aoNg9IK9dT4QZEIhZXaru7s9zS1OBFT1ZCYJd1HOu
+GSXK0UdksJXsBotGK5zFq56Yi/7o67PbKY1RBtImdtNPvkniFj/X4ig3v9xFdNV
Dm1MmUyh83n7aTq7lRaDrwrrXqyES1KlFR/WdCZgrusV7keF2/hipgCTwiWozn/X
RWC6tMRc040FS8TjtL8Wt4YGmn54AXpwtNORv6qhxE/94aTCfMEVWQ0GMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/xbXN0UD+qBaKg4zIOf8lh6TApMB8GA1UdIwQY
MBaAFJfMwOzc63xNqRLh15K9FuYir0pGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAt
OTNkMTdhMjljMGE5LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAtOTNkMTdhMjljMGE5
LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROf6Pdp9
RYt6SkOzpks/lMHisMM7FjzpAEsK6L+E7Medp4Sn+aU7wUO0WSLE/nyeR/pnhcCi
JqLgngH9jBzyE1PCOYKkAA5w4Uy5gyob6IbbvFKeasCuIRaaFOAcxrJ0YlE8J8ge
db3iVUFp6v+qioBiJmVjME3TSKbDvxlku+DyioJmlwaNuj0HeGAPtrF+xny9ZCfu
64moeOJ9YVtNeJTasapUgQ8JAVua6jczOh63tjYzgAe5YVmG3NfR9FJNnvdARv34
q4VoDn9pXbKPN0THx1JVLr7Rwf4ywpmhvxGZy/DhLLak+2jg27yjH0Yh9JUrzhxV
GdDzyvd5J7RiMw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:54 2026 by rpki-client