Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: esqn0ustgpbB9DBP3y83MB6PI7bMOgPnjQEbNxVca/w=
Subject key identifier: C6:29:EC:55:FB:93:04:2C:AF:4B:76:48:5C:AF:50:75:E5:B7:DF:34
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019D2997636CC2B2388E06720A504EF3B11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0313
Signing time: Thu 26 Mar 2026 10:01:20 +0000
Manifest this update: Thu 26 Mar 2026 10:01:20 +0000
Manifest next update: Fri 27 Mar 2026 10:01:20 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: w0mnykc2OxV14tmrfOdNHpUfhBBMBSaKC1y4hiRZtdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:63:6c:c2:b2:38:8e:06:72:0a:50:4e:f3:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Mar 26 10:01:20 2026 GMT
Not After : Mar 27 10:01:20 2026 GMT
Subject: CN=c629ec55fb93042caf4b76485caf5075e5b7df34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:88:6c:7d:0c:4a:f4:41:9b:e8:b4:7e:ae:
13:a7:12:4c:9f:3e:98:88:d6:5a:e5:49:c6:22:c2:
75:4c:3e:f6:ba:bd:09:84:c0:a1:cf:10:b1:1b:07:
b6:b4:1f:5f:ec:b4:ba:df:4c:fb:30:37:2f:7e:a4:
12:45:c4:ec:7e:68:a1:28:7c:70:b1:92:37:aa:25:
bd:9b:a6:0d:6d:4b:d0:e0:ed:fd:0b:db:17:a1:a9:
ff:7e:a5:5f:5a:bf:8d:0b:17:eb:b6:bc:f5:c6:d3:
cf:d3:c3:9b:1e:f6:88:32:24:0e:02:28:c1:b4:30:
dc:3c:58:72:f1:f7:84:16:ab:e3:6c:64:8c:aa:cb:
8d:b1:db:8a:82:84:d9:2d:38:ef:4d:07:a2:41:c5:
fd:10:56:da:9b:44:c1:89:fa:ea:84:9d:a3:b5:a4:
31:60:73:af:1d:a9:33:9b:50:3b:75:11:53:c1:e2:
fe:f4:d6:2d:67:cc:03:6e:7e:90:cc:22:7e:b9:a4:
7a:c3:95:0c:d1:3e:c5:31:e0:18:7f:a8:4a:d4:a1:
cb:fc:ac:c8:8b:40:68:dd:41:dd:dc:a4:da:3b:55:
cf:7c:fb:5e:0d:1d:98:cc:4c:8c:a2:cf:4f:c3:11:
79:cc:6b:04:02:01:eb:14:8e:d7:f1:61:63:5d:86:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:EC:55:FB:93:04:2C:AF:4B:76:48:5C:AF:50:75:E5:B7:DF:34
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:8f:ee:f8:70:3b:c4:b3:4f:9e:d2:34:7e:ce:ef:8e:a0:
fd:ca:9b:13:5a:e0:3a:04:b6:a5:66:5c:b0:2b:85:e2:1c:9a:
7f:3f:97:7e:58:c3:b9:f7:9e:01:f7:19:9e:9e:00:39:a1:52:
7c:88:a8:0f:7c:30:21:bb:ca:3a:4d:5b:c4:2c:b3:64:7b:b9:
00:da:c9:4d:d5:f9:fc:61:a5:ca:b5:20:2a:4a:6f:97:55:c0:
37:68:ce:cb:df:53:14:a6:75:28:fd:77:70:5e:7c:68:91:85:
6b:fe:6d:0e:89:26:52:65:07:d4:7c:61:80:38:92:9e:8c:95:
d2:28:ad:0f:62:61:f2:cd:f3:22:8d:7c:a8:39:a0:ad:df:77:
30:49:16:b9:2d:01:75:62:4c:58:a8:c0:a4:46:46:76:a8:db:
fd:29:ac:ec:bb:a9:b0:59:7e:98:47:ac:4a:bd:c9:df:c0:da:
21:91:b5:31:f0:d9:58:e3:da:cf:31:65:cc:17:c5:13:7e:af:
e7:b9:3c:96:eb:9e:84:a2:1d:1f:4b:9c:d3:df:98:f7:a0:a8:
20:3d:7b:2b:b2:2c:76:32:ee:e0:43:a0:c6:52:dc:c0:b8:0a:
97:b3:2b:9c:98:b3:04:e7:97:14:5a:73:5d:9b:1a:3c:71:0f:
f1:b8:a2:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2NswrI4jgZyClBO87EcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjYwMzI2MTAwMTIwWhcNMjYwMzI3MTAwMTIwWjAzMTEwLwYDVQQD
EyhjNjI5ZWM1NWZiOTMwNDJjYWY0Yjc2NDg1Y2FmNTA3NWU1YjdkZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ+IbH0MSvRBm+i0fq4TpxJMnz6Y
iNZa5UnGIsJ1TD72ur0JhMChzxCxGwe2tB9f7LS630z7MDcvfqQSRcTsfmihKHxw
sZI3qiW9m6YNbUvQ4O39C9sXoan/fqVfWr+NCxfrtrz1xtPP08ObHvaIMiQOAijB
tDDcPFhy8feEFqvjbGSMqsuNsduKgoTZLTjvTQeiQcX9EFbam0TBifrqhJ2jtaQx
YHOvHakzm1A7dRFTweL+9NYtZ8wDbn6QzCJ+uaR6w5UM0T7FMeAYf6hK1KHL/KzI
i0Bo3UHd3KTaO1XPfPteDR2YzEyMos9PwxF5zGsEAgHrFI7X8WFjXYa7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYp7FX7kwQsr0t2SFyvUHXlt980MB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJISP7vhw
O8SzT57SNH7O746g/cqbE1rgOgS2pWZcsCuF4hyafz+XfljDufeeAfcZnp4AOaFS
fIioD3wwIbvKOk1bxCyzZHu5ANrJTdX5/GGlyrUgKkpvl1XAN2jOy99TFKZ1KP13
cF58aJGFa/5tDokmUmUH1HxhgDiSnoyV0iitD2Jh8s3zIo18qDmgrd93MEkWuS0B
dWJMWKjApEZGdqjb/Sms7LupsFl+mEesSr3J38DaIZG1MfDZWOPazzFlzBfFE36v
57k8luuehKIdH0uc09+Y96CoID17K7IsdjLu4EOgxlLcwLgKl7MrnJizBOeXFFpz
XZsaPHEP8biixw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:18 2026 by rpki-client