Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: UCU6b7rr1ao7ZtEHGS2XO5uLY0ZrzvbrxKfrngZwq+0=
Subject key identifier: 2E:FD:2A:EB:A4:D8:9C:10:E7:67:2F:3E:85:58:DE:F0:C3:05:66:D0
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019CABD978F55686BC7D046CEF52F58EF591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0720
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: M0pDr4Clch3V01pm4pja2RrFX_Q.roa (hash: FaCDNXQloqHAn9HCQuN4XRRX7eJlA+OA81nG9S2/sLs=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: 3bWw4Z85ls2FjgQAzfYPPDkmHRAr9f1bux9W+nnNQjo=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:78:f5:56:86:bc:7d:04:6c:ef:52:f5:8e:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=2efd2aeba4d89c10e7672f3e8558def0c30566d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:a8:28:0e:88:c6:a3:3b:72:ae:e0:dc:01:
e6:3b:2c:b7:d0:74:2f:24:01:65:2d:50:5c:cf:08:
f4:6d:b6:9f:64:c4:0c:72:17:9c:b3:84:55:f8:6f:
37:dc:37:43:25:73:72:0a:dd:63:7f:b0:84:80:fd:
44:2e:a7:e1:38:82:b9:e0:a0:86:b8:1d:65:17:00:
50:ae:df:94:dc:b6:ae:ef:0e:7d:e9:3b:93:12:a7:
08:07:ba:53:6d:e7:b7:b9:9c:55:eb:9d:79:a5:e7:
50:72:42:ab:24:36:5f:b3:2f:bc:83:73:9b:7e:26:
e9:5a:e1:96:d0:f9:1d:6d:98:83:ba:ce:af:52:8f:
01:ce:4a:5c:90:bb:b7:b0:a9:43:91:22:77:57:05:
f7:23:90:ff:0d:89:37:9b:69:6e:15:69:7e:23:e2:
12:5c:33:83:f7:b0:92:75:ef:96:66:83:23:5a:2b:
b9:62:73:63:62:b5:d6:eb:6a:1c:7a:c5:65:41:55:
42:08:65:d7:08:57:e2:7a:53:90:6f:1a:8f:88:e8:
0f:26:1f:39:ff:1b:b7:89:dc:ae:36:4c:ec:cb:8f:
48:f8:7f:69:f1:58:8d:8d:80:b5:1b:88:50:9d:fe:
e7:c0:ea:86:c4:ad:11:cc:43:cd:93:d7:74:f4:26:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:2A:EB:A4:D8:9C:10:E7:67:2F:3E:85:58:DE:F0:C3:05:66:D0
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:8e:90:1b:19:97:d1:5e:b4:1c:25:1c:b1:a7:7a:2c:9b:
ba:e7:ec:96:0b:a0:ad:56:61:47:78:d0:15:4e:e2:ef:41:66:
44:40:1a:65:4e:52:03:3b:4b:3d:8c:71:b5:e3:fb:b0:0d:b4:
73:ba:00:e9:25:88:13:9f:60:e8:33:b2:89:42:9d:57:f1:a8:
bd:58:3e:75:a0:61:33:1f:93:02:27:9a:0a:a3:ad:11:e9:5a:
48:89:04:b1:59:cd:57:73:fa:86:fe:f5:45:19:df:b3:c6:d7:
6d:e7:e9:85:bb:21:2d:8e:3a:d1:5e:4e:1b:fd:7c:6f:64:83:
c4:13:02:93:ef:a6:6f:7e:f5:db:80:17:33:27:83:51:75:93:
d0:af:a2:d9:32:80:5c:65:d7:e8:8e:43:ad:5f:2a:dd:45:6f:
4e:d0:01:db:11:38:f6:6c:2e:f6:82:22:2f:30:15:56:25:dc:
c3:41:c8:9d:86:5e:60:20:d5:eb:1e:be:ac:53:c5:60:11:d1:
2d:29:e8:67:06:bd:9e:40:0c:78:12:c1:8f:b3:ab:e3:22:27:
5b:16:e6:48:3b:6f:0c:8a:95:51:b8:80:6a:6d:fd:6e:ad:c9:
ca:4a:f9:75:53:ef:d0:b7:97:b1:f1:82:75:1f:c4:0e:09:c5:
16:17:f1:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Xj1Voa8fQRs71L1jvWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
EygyZWZkMmFlYmE0ZDg5YzEwZTc2NzJmM2U4NTU4ZGVmMGMzMDU2NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt2oKA6IxqM7cq7g3AHmOyy30HQv
JAFlLVBczwj0bbafZMQMchecs4RV+G833DdDJXNyCt1jf7CEgP1ELqfhOIK54KCG
uB1lFwBQrt+U3Lau7w596TuTEqcIB7pTbee3uZxV6515pedQckKrJDZfsy+8g3Ob
fibpWuGW0PkdbZiDus6vUo8BzkpckLu3sKlDkSJ3VwX3I5D/DYk3m2luFWl+I+IS
XDOD97CSde+WZoMjWiu5YnNjYrXW62ocesVlQVVCCGXXCFfielOQbxqPiOgPJh85
/xu3idyuNkzsy49I+H9p8ViNjYC1G4hQnf7nwOqGxK0RzEPNk9d09CYW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC79Kuuk2JwQ52cvPoVY3vDDBWbQMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk6OkBsZ
l9FetBwlHLGneiybuufslgugrVZhR3jQFU7i70FmREAaZU5SAztLPYxxteP7sA20
c7oA6SWIE59g6DOyiUKdV/GovVg+daBhMx+TAieaCqOtEelaSIkEsVnNV3P6hv71
RRnfs8bXbefphbshLY460V5OG/18b2SDxBMCk++mb37124AXMyeDUXWT0K+i2TKA
XGXX6I5DrV8q3UVvTtAB2xE49mwu9oIiLzAVViXcw0HInYZeYCDV6x6+rFPFYBHR
LSnoZwa9nkAMeBLBj7Or4yInWxbmSDtvDIqVUbiAam39bq3Jykr5dVPv0LeXsfGC
dR/EDgnFFhfxNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:32 2026 by rpki-client