Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: YNqvICDF0YBXdm22smFHSxrlq759gbQr74r+R2txDW4=
Subject key identifier: A5:31:87:94:9D:1B:C6:5F:3E:91:BE:38:E1:EA:D1:DF:18:DF:C9:4B
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019D9AAC348205B05C5CB94974377FAE9991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: dafncBGMaA+YXjhKhQObELJevUuUH4aaUHuVoFNay54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:34:82:05:b0:5c:5c:b9:49:74:37:7f:ae:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=a53187949d1bc65f3e91be38e1ead1df18dfc94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:4f:42:5c:f5:52:38:3c:da:db:54:e7:38:
2e:61:73:62:c7:7e:8a:02:22:2e:82:3a:9a:98:61:
ae:64:84:c2:42:96:a2:b9:fb:ab:04:41:f4:09:82:
8c:e2:99:01:79:56:59:c3:02:c6:d9:db:15:d4:a6:
30:37:35:5e:0f:29:60:29:a5:6e:07:58:8a:e2:b0:
22:2a:99:d0:f5:dd:c5:e2:f4:9e:ea:7f:ea:d8:7d:
c7:2c:21:49:8c:46:09:34:53:17:e4:1a:17:cf:fb:
f2:5c:0c:56:0d:ef:58:ee:ab:bb:0f:4e:61:fb:56:
52:94:bf:fe:fa:8b:98:33:13:5b:b6:c2:5a:de:cb:
34:88:89:d5:a0:a5:70:02:ac:d4:4e:01:54:95:39:
6e:ec:fc:94:0c:b6:3a:0b:2f:b8:12:57:11:5f:e2:
67:68:cd:76:c3:6f:96:44:b6:3b:1e:8f:4f:36:05:
47:ee:e1:cb:ee:cb:74:81:79:d2:21:22:40:2e:c4:
31:44:74:1e:bd:e6:ff:81:80:81:11:e4:a0:f0:8d:
35:15:6d:62:a8:79:24:ee:f6:ca:ac:90:6e:be:2b:
36:8b:ea:c5:37:24:17:75:8f:dc:81:cf:93:01:3d:
a7:ac:90:ae:43:60:ab:3c:bc:65:02:49:a9:4d:86:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:31:87:94:9D:1B:C6:5F:3E:91:BE:38:E1:EA:D1:DF:18:DF:C9:4B
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:83:a1:b5:e0:32:a4:fc:55:cd:15:c6:21:e9:08:67:ad:
e3:48:53:96:8f:67:60:df:d1:26:19:10:9a:2a:55:cf:c1:25:
a1:af:0e:5c:27:1b:04:75:e0:65:fa:ab:a5:1e:81:bc:1f:27:
75:37:06:eb:a8:c0:a5:84:d2:fe:c0:e7:55:ce:ff:02:6b:15:
1d:11:cd:6a:ab:af:ff:fe:4c:79:56:52:10:7d:58:20:bf:75:
ad:19:f3:7c:65:f9:46:73:1d:93:7f:c1:45:de:58:c2:34:2c:
a5:07:13:0f:36:63:af:a2:ed:57:57:82:4a:ae:f7:2f:92:77:
20:97:9a:25:bd:97:86:c7:3b:dd:43:db:b8:cf:2c:9e:37:a0:
e3:e1:f6:ac:d1:05:f3:af:6c:b6:bc:de:b0:c4:1a:52:71:f1:
3a:24:4e:0c:98:76:55:63:2b:ef:50:51:b8:f3:7e:9f:fa:35:
2b:7f:67:c2:e3:03:87:8c:d3:d0:bc:34:0a:2f:c4:16:be:63:
23:89:b0:60:5e:c0:85:12:fc:e3:21:c1:21:1b:7f:c7:2d:62:
74:35:60:99:d4:2e:b1:61:ca:c7:d8:1d:d6:9a:a3:56:d9:75:
76:b9:32:61:49:6f:f3:0d:2e:7c:c4:72:57:50:1c:ef:c3:6b:
5b:92:65:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDSCBbBcXLlJdDd/rpmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl
YmU5MDUwHhcNMjYwNDE3MDkwMTA5WhcNMjYwNDE4MDkwMTA5WjAzMTEwLwYDVQQD
EyhhNTMxODc5NDlkMWJjNjVmM2U5MWJlMzhlMWVhZDFkZjE4ZGZjOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFlPQlz1Ujg82ttU5zguYXNix36K
AiIugjqamGGuZITCQpaiufurBEH0CYKM4pkBeVZZwwLG2dsV1KYwNzVeDylgKaVu
B1iK4rAiKpnQ9d3F4vSe6n/q2H3HLCFJjEYJNFMX5BoXz/vyXAxWDe9Y7qu7D05h
+1ZSlL/++ouYMxNbtsJa3ss0iInVoKVwAqzUTgFUlTlu7PyUDLY6Cy+4ElcRX+Jn
aM12w2+WRLY7Ho9PNgVH7uHL7st0gXnSISJALsQxRHQeveb/gYCBEeSg8I01FW1i
qHkk7vbKrJBuvis2i+rFNyQXdY/cgc+TAT2nrJCuQ2CrPLxlAkmpTYYQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUxh5SdG8ZfPpG+OOHq0d8Y38lLMB8GA1UdIwQY
MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt
Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4
LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitqDobXg
MqT8Vc0VxiHpCGet40hTlo9nYN/RJhkQmipVz8Eloa8OXCcbBHXgZfqrpR6BvB8n
dTcG66jApYTS/sDnVc7/AmsVHRHNaquv//5MeVZSEH1YIL91rRnzfGX5RnMdk3/B
Rd5YwjQspQcTDzZjr6LtV1eCSq73L5J3IJeaJb2Xhsc73UPbuM8snjeg4+H2rNEF
869strzesMQaUnHxOiRODJh2VWMr71BRuPN+n/o1K39nwuMDh4zT0Lw0Ci/EFr5j
I4mwYF7AhRL84yHBIRt/xy1idDVgmdQusWHKx9gd1pqjVtl1drkyYUlv8w0ufMRy
V1Ac78NrW5JlCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:25 2026 by rpki-client