Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: 6v7V3IJc3XcoDOzh/N6W3IClHWq+5SZVWliIkT7qxcQ=
Subject key identifier: 62:6E:04:8C:43:51:FE:05:0C:82:27:DB:F2:4B:96:F3:48:A7:17:D6
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019D27DFA16BDF509EC4B552DBA2F32ADCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 119F
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: K1yzaA2LKv6WrPfYON-LGHn3q18.roa (hash: e3dzwnCmJbGlroDSJANi3J5QVo/VvZgQAmatunxEAZo=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: dyHomAC2VU2zP3E6rWCF5n92A+Vygb1w0c5MBTLw/40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a1:6b:df:50:9e:c4:b5:52:db:a2:f3:2a:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=626e048c4351fe050c8227dbf24b96f348a717d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:81:21:7a:a4:85:13:e9:8b:4e:e8:a7:b1:
98:bd:f2:62:4b:ac:4d:c3:47:e7:7c:e8:01:1b:2e:
3b:80:4e:de:b3:a1:32:f3:f8:33:45:e0:b5:13:3c:
00:0e:e2:e0:82:99:a1:59:c1:2a:27:68:2d:c5:7a:
cd:99:a3:d6:ff:ec:42:0b:15:65:4a:45:a7:a9:5c:
87:fe:04:c2:be:6d:f3:cb:fb:3e:50:44:f4:6b:9a:
83:0d:0b:91:1c:ee:18:7a:eb:c5:b5:f8:01:c1:e5:
75:f5:8e:28:eb:8b:9a:9c:6f:68:5a:34:b4:f8:d7:
b6:6e:0f:3a:18:f8:e5:5b:9c:6a:81:d4:16:36:32:
1a:fd:d3:36:09:9b:d8:0c:2b:2e:9a:45:d1:fb:d0:
bc:ed:33:52:08:45:f6:ad:97:aa:60:bc:58:11:f8:
67:58:57:96:0a:5d:78:27:21:af:1e:eb:a8:5b:21:
ab:00:93:96:62:e1:60:86:a6:ec:d1:6c:eb:3f:6f:
09:38:8c:72:75:3f:32:4e:a9:fe:05:30:56:69:cf:
19:db:d2:7f:38:5a:b5:b2:35:7d:c9:8e:bd:5a:e7:
08:eb:00:ad:be:de:10:1d:82:57:32:de:95:50:f5:
ae:7f:7d:90:09:66:4a:72:ec:7c:9a:fa:75:16:cf:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:04:8C:43:51:FE:05:0C:82:27:DB:F2:4B:96:F3:48:A7:17:D6
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cb:d5:d9:a1:29:e6:30:53:b5:df:6d:6d:ca:0a:ef:32:09:
07:5c:49:a0:36:6d:66:ea:82:3a:34:ad:ad:b6:10:2e:10:68:
af:af:14:0b:50:9a:2e:cd:0a:d7:a3:b7:12:34:39:31:b8:dd:
aa:7d:e5:15:92:6d:19:e0:69:34:25:39:e7:4a:07:05:a2:e5:
51:15:b8:0b:d0:5a:ed:3a:63:5f:ee:2a:8e:e7:16:ba:ab:81:
4f:4d:63:54:39:1f:cd:45:78:ef:5b:a0:a4:c7:13:c6:db:b1:
80:04:41:86:5c:40:a5:64:4a:71:bd:b8:9a:f2:13:29:99:62:
a9:e5:3d:31:37:2f:c4:75:54:23:9b:a6:66:15:b0:39:04:d3:
dc:03:f0:61:11:09:16:67:09:66:82:65:55:b2:1a:18:8c:9d:
1a:f8:1a:3e:0f:fb:80:a1:28:e4:59:0f:fc:85:a3:16:36:79:
c5:9c:7c:62:e9:b3:4c:e9:a5:b4:76:53:72:81:7b:98:fe:8e:
aa:69:22:fa:22:6c:60:b1:b6:1a:08:c4:66:4a:ff:9c:e4:a4:
d8:bf:21:f8:a0:65:9f:d6:60:a6:b3:d1:73:1c:8d:77:2b:a7:
5d:30:fe:9c:56:35:e9:09:40:a1:f0:41:b4:7f:b4:d2:12:6e:
39:23:25:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36Fr31CexLVS26LzKtzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw
OGMzODUwHhcNMjYwMzI2MDIwMTAwWhcNMjYwMzI3MDIwMTAwWjAzMTEwLwYDVQQD
Eyg2MjZlMDQ4YzQzNTFmZTA1MGM4MjI3ZGJmMjRiOTZmMzQ4YTcxN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttKBIXqkhRPpi07op7GYvfJiS6xN
w0fnfOgBGy47gE7es6Ey8/gzReC1EzwADuLggpmhWcEqJ2gtxXrNmaPW/+xCCxVl
SkWnqVyH/gTCvm3zy/s+UET0a5qDDQuRHO4YeuvFtfgBweV19Y4o64uanG9oWjS0
+Ne2bg86GPjlW5xqgdQWNjIa/dM2CZvYDCsumkXR+9C87TNSCEX2rZeqYLxYEfhn
WFeWCl14JyGvHuuoWyGrAJOWYuFghqbs0WzrP28JOIxydT8yTqn+BTBWac8Z29J/
OFq1sjV9yY69WucI6wCtvt4QHYJXMt6VUPWuf32QCWZKcux8mvp1Fs/CxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJuBIxDUf4FDIIn2/JLlvNIpxfWMB8GA1UdIwQY
MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt
MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz
LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcvV2aEp
5jBTtd9tbcoK7zIJB1xJoDZtZuqCOjStrbYQLhBor68UC1CaLs0K16O3EjQ5Mbjd
qn3lFZJtGeBpNCU550oHBaLlURW4C9Ba7TpjX+4qjucWuquBT01jVDkfzUV471ug
pMcTxtuxgARBhlxApWRKcb24mvITKZliqeU9MTcvxHVUI5umZhWwOQTT3APwYREJ
FmcJZoJlVbIaGIydGvgaPg/7gKEo5FkP/IWjFjZ5xZx8YumzTOmltHZTcoF7mP6O
qmki+iJsYLG2GgjEZkr/nOSk2L8h+KBln9ZgprPRcxyNdyunXTD+nFY16QlAofBB
tH+00hJuOSMl1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:02 2026 by rpki-client