Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier: Ztaigk4PDFZ/nssr8RWOxlCdW2yXA4YrXcZVGsSrr/8=
Subject key identifier: E2:2F:13:18:1A:64:33:DD:59:4A:25:26:92:3A:20:9E:BB:91:4F:21
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 019CABD9478B8555F3E9E4692B167F4B95BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 3RBCVkBsQ6_V7wN6k9fIFJdSpp8.roa (hash: nfpey2pShwBixsacoxSoNyyC/Cgr+HILJV9+oDPT+a0=)
2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: AO5EnhHBzcpKkR/+Rp+PnY5/JBIn3yUXab525HVO8TA=)
3: Wx0tuGvy7Ik_CwijVq0hyyYCJNE.roa (hash: F7OSj77dk7wzXt/at0+fTmTHxHYJ8OWNXq9VDQhTOcs=)
4: xfyMUvyO8DDhcxSBKaxnnxjvYhc.roa (hash: W6rHIx7iAQO/hl2oAqLrj2UwizqFE2L+eavtuywb88I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:47:8b:85:55:f3:e9:e4:69:2b:16:7f:4b:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=e22f13181a6433dd594a2526923a209ebb914f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:b6:58:bf:ae:28:2b:b4:58:35:df:81:3c:
ad:0d:cb:48:7d:b8:b6:b0:63:6e:f3:a7:10:1a:1c:
2c:fd:1b:15:1d:b8:25:4e:63:72:b8:ec:70:aa:32:
61:64:9d:77:ba:f3:f4:cf:92:57:10:1e:ae:6b:cc:
12:2c:75:c7:64:7b:3a:fb:96:d7:09:ee:d8:ea:1d:
9b:2a:46:03:f3:43:97:60:82:63:06:33:6d:c4:b6:
93:d3:42:c6:c5:d0:0b:6a:3a:57:15:bb:1d:b5:7b:
c8:a9:7f:c3:67:0c:ad:ac:88:11:35:39:74:66:dd:
59:e8:d6:39:8a:cc:81:1e:f6:26:25:d7:87:53:22:
3c:8c:7c:cf:e6:56:4d:20:82:10:cc:01:f4:ea:f2:
be:f5:43:e9:24:22:11:a3:ef:67:07:3d:8d:8c:a0:
fc:e7:62:9b:5f:f1:8d:51:57:e4:63:94:5c:40:ed:
4e:c1:bb:86:ff:c3:c3:30:cf:14:62:99:bd:1c:62:
26:26:35:f9:ca:c6:8f:e6:9a:f6:d6:32:fd:d6:9d:
24:3a:14:e3:08:45:de:72:71:ce:54:94:99:a9:d8:
54:42:8c:4f:fb:0e:67:8e:f1:be:0f:9b:b1:68:1c:
68:e0:67:59:e3:76:d8:1e:7e:2d:86:be:53:c7:4e:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2F:13:18:1A:64:33:DD:59:4A:25:26:92:3A:20:9E:BB:91:4F:21
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:31:ea:18:5c:83:df:b3:bf:8e:10:f2:16:d9:74:f5:56:
e5:62:44:c8:8c:72:f2:d2:65:d6:aa:02:77:10:51:8a:f7:2f:
87:e5:c4:14:3c:6c:95:e0:b1:b6:43:8d:57:69:62:1e:b0:e1:
7b:f0:f5:aa:46:b3:84:91:c4:fa:4d:f1:31:d1:b9:5d:04:41:
4d:50:13:1f:f1:bd:fa:b9:20:82:0d:50:82:bd:9f:37:fc:a3:
fe:f7:03:9a:c4:9d:da:17:fe:50:af:5f:cf:7d:1b:50:66:14:
92:c1:a3:0e:65:f1:d2:df:68:0e:52:51:61:ad:ef:ed:eb:97:
c0:c8:e5:47:d6:32:42:6d:13:f1:b6:b9:e0:94:a0:ce:ad:db:
49:29:aa:45:ad:df:6d:47:47:9b:22:73:cf:e6:5f:5c:18:51:
6f:3a:4e:97:e0:de:2f:29:52:5a:bf:ff:30:5f:c6:29:5b:77:
76:4b:18:04:ba:e6:91:54:b3:d7:f6:b7:fc:f9:df:9e:e9:df:
21:fe:8c:39:d9:a4:54:d9:c0:87:10:84:ae:56:13:9a:5c:7c:
83:46:08:91:66:2a:3e:87:e2:9a:4f:62:6c:0d:1e:d3:f2:8b:
9b:e1:a6:49:b5:8b:1b:6c:0c:6f:a7:8a:2b:91:fa:fb:2f:e3:
d4:26:f1:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2UeLhVXz6eRpKxZ/S5W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTViN2NjYjQwM2QzMGE0NDg1N2Q0N2M1OGNmMTM0NjU0
NmQyODMwHhcNMjYwMzAyMDAwMTA5WhcNMjYwMzAzMDAwMTA5WjAzMTEwLwYDVQQD
EyhlMjJmMTMxODFhNjQzM2RkNTk0YTI1MjY5MjNhMjA5ZWJiOTE0ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbq2WL+uKCu0WDXfgTytDctIfbi2
sGNu86cQGhws/RsVHbglTmNyuOxwqjJhZJ13uvP0z5JXEB6ua8wSLHXHZHs6+5bX
Ce7Y6h2bKkYD80OXYIJjBjNtxLaT00LGxdALajpXFbsdtXvIqX/DZwytrIgRNTl0
Zt1Z6NY5isyBHvYmJdeHUyI8jHzP5lZNIIIQzAH06vK+9UPpJCIRo+9nBz2NjKD8
52KbX/GNUVfkY5RcQO1OwbuG/8PDMM8UYpm9HGImJjX5ysaP5pr21jL91p0kOhTj
CEXecnHOVJSZqdhUQoxP+w5njvG+D5uxaBxo4GdZ43bYHn4thr5Tx05F6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIvExgaZDPdWUolJpI6IJ67kU8hMB8GA1UdIwQY
MBaAFC/lt8y0A9MKRIV9R8WM8TRlRtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzIt
MmI4ZjczNDZmMzUwLzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzItMmI4ZjczNDZmMzUw
LzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYEx6hhc
g9+zv44Q8hbZdPVW5WJEyIxy8tJl1qoCdxBRivcvh+XEFDxsleCxtkONV2liHrDh
e/D1qkazhJHE+k3xMdG5XQRBTVATH/G9+rkggg1Qgr2fN/yj/vcDmsSd2hf+UK9f
z30bUGYUksGjDmXx0t9oDlJRYa3v7euXwMjlR9YyQm0T8ba54JSgzq3bSSmqRa3f
bUdHmyJzz+ZfXBhRbzpOl+DeLylSWr//MF/GKVt3dksYBLrmkVSz1/a3/Pnfnunf
If6MOdmkVNnAhxCErlYTmlx8g0YIkWYqPofimk9ibA0e0/KLm+GmSbWLG2wMb6eK
K5H6+y/j1CbxbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:01 2026 by rpki-client