Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: WWeQI47u16nlFbq2Hn5WM7itMkqq3Io6mres484TCkY=
Subject key identifier: 6E:E9:76:3E:4E:43:62:E2:87:FA:A3:CB:03:BC:0C:E1:81:85:88:23
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 01A0C5FC10F28F070024A3D45EA6ED2F638D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0941
Signing time: Mon 21 Sep 2026 22:00:25 +0000
Manifest this update: Mon 21 Sep 2026 22:00:25 +0000
Manifest next update: Tue 22 Sep 2026 22:00:25 +0000
Files and hashes: 1: Ul6xnaloPJqarA71Lp8dEgaZCiY.roa (hash: TaAyvUHi9RSjwAuHu0afyte32UNxt8tXqYjbQRr7Gpg=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: tVALi4cr3qw3IaBGdKNHhJJjYpoafG2RS/lBhVX+Uc8=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:10:f2:8f:07:00:24:a3:d4:5e:a6:ed:2f:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Sep 21 22:00:25 2026 GMT
Not After : Sep 22 22:00:25 2026 GMT
Subject: CN=6ee9763e4e4362e287faa3cb03bc0ce181858823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:c8:80:9c:e9:fe:2a:62:2c:a2:46:75:d3:
cb:df:a3:2a:89:ed:5b:53:6b:4e:f3:e5:80:56:9b:
3c:ac:4a:d5:2d:58:94:42:2b:ea:c7:d8:14:79:43:
98:66:d6:49:79:a1:1d:a4:fb:8e:46:c6:9a:80:70:
30:77:48:ea:c3:84:22:a9:04:ac:9f:87:79:66:59:
83:9d:ff:54:9c:8b:22:4c:06:64:69:d8:74:2b:f1:
50:67:83:30:a8:67:b4:05:46:7e:39:e7:e3:76:23:
2e:6b:f8:c6:18:17:cc:97:b9:7c:59:15:69:31:67:
84:95:5a:77:58:b3:70:44:d4:07:e2:f9:d4:38:78:
df:96:55:7a:0d:63:d4:1d:aa:fd:bb:dc:63:4b:0a:
dd:67:b0:f1:52:a1:8f:d2:f6:4d:92:b7:d8:f3:6a:
eb:28:f6:b7:4c:1d:01:5c:a0:96:3a:d3:4e:66:73:
1e:87:60:af:7d:09:dc:55:ea:6a:37:4b:30:d7:01:
79:2c:63:ec:e7:ea:76:cd:2f:02:45:3a:1b:fe:67:
3c:c4:56:3d:f6:fd:67:52:75:aa:58:a9:a6:b9:70:
af:e0:6e:78:a2:6c:25:21:ce:4f:12:91:fb:4a:23:
86:62:01:b5:40:fe:d0:49:7b:60:9b:20:88:74:70:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:76:3E:4E:43:62:E2:87:FA:A3:CB:03:BC:0C:E1:81:85:88:23
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:62:d3:63:40:9f:13:ce:fc:51:ab:d8:7b:b9:70:f4:eb:
85:af:68:60:20:a7:9f:f4:d7:36:15:05:5f:25:51:a2:da:b5:
1e:f1:9e:9c:8c:1b:a5:62:d6:23:46:07:0a:b0:cc:da:11:c0:
36:77:d0:7c:c2:c2:77:99:f3:2c:52:ae:d6:2c:32:0e:9d:9e:
78:5e:76:2f:ea:2a:70:ec:a3:94:43:f0:35:35:ff:7a:2b:72:
43:9c:6f:4f:81:e8:ac:d0:97:7b:02:83:3f:25:36:8e:7e:cf:
72:d4:61:ec:56:c8:f6:8f:75:a3:49:cf:33:c2:eb:7a:44:d3:
26:de:de:c4:af:55:65:b2:83:f9:51:55:99:2a:79:fa:44:90:
55:fb:65:f5:91:f4:88:d9:30:8a:12:2a:67:1f:60:f3:ee:05:
c9:b4:6f:f5:be:c6:a9:61:c4:1c:e7:6d:c0:14:41:b8:c9:37:
2f:65:fc:29:81:f9:b6:b3:5d:3c:d2:a3:76:56:87:70:cb:4b:
98:16:c0:46:c6:d4:1a:b6:a2:5e:e2:4b:9d:ee:1a:b4:a2:af:
13:ab:f2:93:2b:8b:94:f3:72:fb:90:cd:a7:f5:09:26:60:9e:
83:25:00:bf:cb:e2:08:3e:1a:ee:91:ee:36:03:5e:70:cb:e0:
81:1d:0b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/BDyjwcAJKPUXqbtL2ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjYwOTIxMjIwMDI1WhcNMjYwOTIyMjIwMDI1WjAzMTEwLwYDVQQD
Eyg2ZWU5NzYzZTRlNDM2MmUyODdmYWEzY2IwM2JjMGNlMTgxODU4ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/zIgJzp/ipiLKJGddPL36Mqie1b
U2tO8+WAVps8rErVLViUQivqx9gUeUOYZtZJeaEdpPuORsaagHAwd0jqw4QiqQSs
n4d5ZlmDnf9UnIsiTAZkadh0K/FQZ4MwqGe0BUZ+OefjdiMua/jGGBfMl7l8WRVp
MWeElVp3WLNwRNQH4vnUOHjfllV6DWPUHar9u9xjSwrdZ7DxUqGP0vZNkrfY82rr
KPa3TB0BXKCWOtNOZnMeh2CvfQncVepqN0sw1wF5LGPs5+p2zS8CRTob/mc8xFY9
9v1nUnWqWKmmuXCv4G54omwlIc5PEpH7SiOGYgG1QP7QSXtgmyCIdHATIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7pdj5OQ2Lih/qjywO8DOGBhYgjMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgli02NA
nxPO/FGr2Hu5cPTrha9oYCCnn/TXNhUFXyVRotq1HvGenIwbpWLWI0YHCrDM2hHA
NnfQfMLCd5nzLFKu1iwyDp2eeF52L+oqcOyjlEPwNTX/eityQ5xvT4HorNCXewKD
PyU2jn7PctRh7FbI9o91o0nPM8LrekTTJt7exK9VZbKD+VFVmSp5+kSQVftl9ZH0
iNkwihIqZx9g8+4FybRv9b7GqWHEHOdtwBRBuMk3L2X8KYH5trNdPNKjdlaHcMtL
mBbARsbUGraiXuJLne4atKKvE6vykyuLlPNy+5DNp/UJJmCegyUAv8viCD4a7pHu
NgNecMvggR0Lig==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:33:18 2026 by rpki-client