Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: QQf63u0cCrmo/HJbgkL6h9WfQ0ygYRVJQ4laC+52B/o=
Subject key identifier: EE:D4:8C:8E:A1:3E:C7:92:9A:05:AE:0E:89:5F:88:06:03:EE:08:D4
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019D265F02A572024C6048AB80AA8163FA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 1555
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: 8nXIbFghhbIgt8n2cEDxOIHgcvk.roa (hash: OLo/fVN4422Me1580uumZYkNJ6C1/oum8x+PWUvjDZ4=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: ulVmICAlGYw1YpXHNyeC7XgCpkvhH98mO/m/ox7++EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:02:a5:72:02:4c:60:48:ab:80:aa:81:63:fa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=eed48c8ea13ec7929a05ae0e895f880603ee08d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:63:f9:85:fe:2a:2c:d4:97:68:1e:4c:33:
ff:a3:73:08:fc:3c:97:90:e4:da:54:da:6f:ea:af:
5c:28:18:ec:c9:e0:ad:d1:1f:82:72:c3:d2:96:cf:
9c:6a:14:56:b0:18:5d:4a:5e:90:89:3f:bf:45:f4:
06:42:21:80:18:0b:e1:dd:c4:ee:56:4b:3c:08:0f:
b6:41:38:58:56:41:36:c0:28:48:d5:a8:f6:d7:e8:
48:3c:cc:55:57:f4:24:6b:08:28:77:e0:35:cd:ac:
e4:10:53:1c:47:43:c1:c1:05:5d:1b:6a:d4:0a:76:
e7:ea:bd:fe:67:14:53:4b:b6:74:68:16:d7:db:33:
f1:fa:a8:a8:7c:64:17:3a:a7:e8:66:aa:d6:45:54:
04:63:08:5b:7e:a7:7f:fe:84:be:dc:bd:31:f9:af:
b3:5b:a8:b4:f0:5c:8c:24:73:c9:1c:44:e7:09:b2:
a1:4a:2f:78:e3:eb:49:5b:b0:aa:42:37:27:0a:ab:
c5:ca:18:25:81:b2:19:55:9f:ba:4b:45:0a:c7:28:
fa:d0:d8:24:33:cc:c9:6d:5f:39:3c:fd:41:f8:42:
59:e7:ab:03:df:4e:f5:48:36:e9:40:7e:5a:9a:c5:
ca:fa:d8:80:57:a8:46:4d:2e:e0:8c:7e:e4:4b:13:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:8C:8E:A1:3E:C7:92:9A:05:AE:0E:89:5F:88:06:03:EE:08:D4
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:68:02:9d:0c:23:bb:68:a7:04:1a:ee:51:c1:e8:33:3d:
9f:44:23:a1:fa:df:ec:34:a5:0b:75:ce:75:5b:32:da:8b:e5:
b5:87:71:c5:5a:4d:f0:39:99:05:ff:ef:35:d4:59:23:90:06:
28:ed:a3:24:00:c3:3f:a1:aa:3d:35:b4:02:da:a5:f3:80:b2:
eb:a5:4f:f4:0f:7f:da:21:7d:15:2b:b1:6d:5a:0d:5e:c1:c2:
a0:ff:e7:06:08:22:e4:5b:ed:37:49:96:ef:fd:66:57:30:61:
c8:34:5e:c3:9e:98:17:bc:33:e0:c7:91:17:03:3a:1d:27:5d:
00:5e:d3:f0:20:11:e2:cd:fe:82:db:8a:53:54:08:b3:5c:1e:
00:66:42:7f:d2:c0:5b:07:71:71:52:d3:39:cb:a5:86:62:3a:
0d:70:7f:f0:53:3e:3c:07:37:eb:64:f4:e4:1d:cc:fc:91:a6:
59:26:16:f2:a9:e0:fe:9e:33:1c:6d:f5:b5:a8:90:2b:6e:8b:
db:40:13:6e:ea:94:58:e0:1d:66:67:36:9e:f1:63:f5:86:64:
ed:60:72:4b:4c:23:a7:5c:ff:aa:32:cc:54:35:4d:3d:f6:a9:
d4:4f:73:6c:96:62:7c:49:36:b4:6c:c6:8d:12:7c:49:16:10:
15:26:e1:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwKlcgJMYEirgKqBY/pFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWVmZDZjNDc3ODA2YmQ2YjQ1MjY3NTU4ZDY4MjhmZWVj
NjFlYTYwHhcNMjYwMzI1MTkwMDUzWhcNMjYwMzI2MTkwMDUzWjAzMTEwLwYDVQQD
EyhlZWQ0OGM4ZWExM2VjNzkyOWEwNWFlMGU4OTVmODgwNjAzZWUwOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznRj+YX+KizUl2geTDP/o3MI/DyX
kOTaVNpv6q9cKBjsyeCt0R+CcsPSls+cahRWsBhdSl6QiT+/RfQGQiGAGAvh3cTu
Vks8CA+2QThYVkE2wChI1aj21+hIPMxVV/Qkawgod+A1zazkEFMcR0PBwQVdG2rU
Cnbn6r3+ZxRTS7Z0aBbX2zPx+qiofGQXOqfoZqrWRVQEYwhbfqd//oS+3L0x+a+z
W6i08FyMJHPJHETnCbKhSi944+tJW7CqQjcnCqvFyhglgbIZVZ+6S0UKxyj60Ngk
M8zJbV85PP1B+EJZ56sD3071SDbpQH5amsXK+tiAV6hGTS7gjH7kSxNEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7UjI6hPseSmgWuDolfiAYD7gjUMB8GA1UdIwQY
MBaAFJRe/WxHeAa9a0UmdVjWgo/uxh6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUt
YmM0MjQzNDlhMTZlLzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUtYmM0MjQzNDlhMTZl
LzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxVoAp0M
I7topwQa7lHB6DM9n0Qjofrf7DSlC3XOdVsy2ovltYdxxVpN8DmZBf/vNdRZI5AG
KO2jJADDP6GqPTW0Atql84Cy66VP9A9/2iF9FSuxbVoNXsHCoP/nBggi5FvtN0mW
7/1mVzBhyDRew56YF7wz4MeRFwM6HSddAF7T8CAR4s3+gtuKU1QIs1weAGZCf9LA
WwdxcVLTOculhmI6DXB/8FM+PAc362T05B3M/JGmWSYW8qng/p4zHG31taiQK26L
20ATbuqUWOAdZmc2nvFj9YZk7WByS0wjp1z/qjLMVDVNPfap1E9zbJZifEk2tGzG
jRJ8SRYQFSbhNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:42 2026 by rpki-client