Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: rIeiik0k4KI4m+SOyH/zReWicTTLGb1mSq1VFZJ7VjI=
Subject key identifier: F6:AE:78:8A:A6:E8:DA:FC:E6:C8:B7:36:7E:A4:9A:32:24:04:63:99
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 019D27A9229BC0C0D8DC7E6C72A70836A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 0775
Signing time: Thu 26 Mar 2026 01:01:28 +0000
Manifest this update: Thu 26 Mar 2026 01:01:28 +0000
Manifest next update: Fri 27 Mar 2026 01:01:28 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: QWapLEBvsKtaAH9YoHoU5BjX1WKOtmeoUtBSiqfmPEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:22:9b:c0:c0:d8:dc:7e:6c:72:a7:08:36:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Mar 26 01:01:28 2026 GMT
Not After : Mar 27 01:01:28 2026 GMT
Subject: CN=f6ae788aa6e8dafce6c8b7367ea49a3224046399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:9d:df:6c:dd:2e:41:48:b6:35:68:e7:d5:
70:09:61:01:71:c4:e3:de:12:05:43:2d:6e:26:c7:
8d:6a:eb:76:32:09:c6:da:e2:da:21:34:5f:ef:d9:
c7:97:8d:73:81:04:e8:71:e9:8d:ec:36:6a:69:82:
19:29:70:d5:5a:8a:7f:63:fa:84:b7:d8:05:8d:5b:
c7:87:cb:7c:c7:e5:0e:51:0d:9f:57:d8:42:55:a3:
f4:b6:2f:dc:9c:1f:af:63:99:e5:10:2f:fd:bd:5a:
40:44:b4:80:4e:8e:04:c1:48:26:a7:24:48:cf:dd:
be:d5:38:1e:6c:38:4f:bd:df:2a:d4:e5:88:8d:3d:
6a:ae:4e:1e:41:6a:7d:bb:4a:39:dc:ef:0b:03:82:
5c:cf:f1:7f:d9:74:ed:09:d8:89:b9:9c:d0:a0:a3:
66:b1:e3:2f:a2:3b:e4:ed:92:ae:58:a2:2a:16:20:
2b:e7:b8:25:c4:24:43:e3:7a:c0:57:20:0d:2d:51:
43:92:14:df:d8:c4:78:25:22:7c:b0:b2:ba:ac:1f:
79:ac:cb:6d:0f:ed:62:cc:ca:8d:12:f6:04:0b:6f:
35:0c:13:0f:56:a8:fa:00:dd:d4:95:1a:20:29:96:
f9:ce:b0:88:d0:91:9e:a0:65:69:38:80:33:00:72:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:78:8A:A6:E8:DA:FC:E6:C8:B7:36:7E:A4:9A:32:24:04:63:99
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:57:5d:29:19:8e:8c:b6:74:76:1e:6f:d9:ff:98:de:7c:7a:
c2:66:af:ac:63:33:f5:f9:cb:2f:4c:a1:10:ed:8c:1e:91:3f:
75:37:7e:99:42:57:06:35:e9:ef:ba:0f:23:bd:38:8d:03:8e:
70:ef:16:21:d0:4f:21:46:d8:e3:3e:44:17:70:32:3d:7b:9c:
8e:11:95:74:f8:dd:fd:7a:9f:13:2f:cf:1c:4a:7f:c5:eb:2e:
6f:90:d6:2a:f7:57:02:4b:06:70:c3:ea:46:8e:0e:64:69:94:
51:d9:77:1d:1e:f9:e2:5a:60:2e:cd:d6:63:00:9f:2c:bd:e0:
24:40:9a:83:2e:78:03:d6:a6:74:d7:18:94:8c:22:9e:41:2d:
02:a2:07:0d:5a:cd:4c:22:fd:1a:df:ae:2f:9d:ce:80:fd:66:
e0:d2:99:12:0f:6d:4e:bd:3d:66:6e:aa:e3:39:c4:a4:ec:cf:
f3:07:6c:26:4e:7e:5f:6a:32:c7:49:0e:70:d1:68:3c:2d:04:
ee:39:1b:b6:4b:92:a5:ec:d3:ec:ae:02:24:ee:da:f9:4f:52:
6e:cc:95:8e:3a:d9:71:20:dd:1a:5d:72:61:b2:db:35:9d:88:
32:90:25:09:56:27:78:a2:3e:15:66:8e:52:a0:24:52:74:ef:
78:50:12:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSKbwMDY3H5scqcINqXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzhjYzljNTk0YmM4ZThmMTQ1NDU2ZjQxNTY2ZDhjYmQ0
YWFkM2UwHhcNMjYwMzI2MDEwMTI4WhcNMjYwMzI3MDEwMTI4WjAzMTEwLwYDVQQD
EyhmNmFlNzg4YWE2ZThkYWZjZTZjOGI3MzY3ZWE0OWEzMjI0MDQ2Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Od32zdLkFItjVo59VwCWEBccTj
3hIFQy1uJseNaut2MgnG2uLaITRf79nHl41zgQTocemN7DZqaYIZKXDVWop/Y/qE
t9gFjVvHh8t8x+UOUQ2fV9hCVaP0ti/cnB+vY5nlEC/9vVpARLSATo4EwUgmpyRI
z92+1TgebDhPvd8q1OWIjT1qrk4eQWp9u0o53O8LA4Jcz/F/2XTtCdiJuZzQoKNm
seMvojvk7ZKuWKIqFiAr57glxCRD43rAVyANLVFDkhTf2MR4JSJ8sLK6rB95rMtt
D+1izMqNEvYEC281DBMPVqj6AN3UlRogKZb5zrCI0JGeoGVpOIAzAHKa1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaueIqm6Nr85si3Nn6kmjIkBGOZMB8GA1UdIwQY
MBaAFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgt
ZTgwMmNkNmRhNjA4LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgtZTgwMmNkNmRhNjA4
LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1ddKRmO
jLZ0dh5v2f+Y3nx6wmavrGMz9fnLL0yhEO2MHpE/dTd+mUJXBjXp77oPI704jQOO
cO8WIdBPIUbY4z5EF3AyPXucjhGVdPjd/XqfEy/PHEp/xesub5DWKvdXAksGcMPq
Ro4OZGmUUdl3HR754lpgLs3WYwCfLL3gJECagy54A9amdNcYlIwinkEtAqIHDVrN
TCL9Gt+uL53OgP1m4NKZEg9tTr09Zm6q4znEpOzP8wdsJk5+X2oyx0kOcNFoPC0E
7jkbtkuSpezT7K4CJO7a+U9SbsyVjjrZcSDdGl1yYbLbNZ2IMpAlCVYneKI+FWaO
UqAkUnTveFASOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:50 2026 by rpki-client