Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: FyDXwx+NXS5i++4+ciOYBdbzy2UAlS7t7f1Hgyxx9zc=
Subject key identifier: 3F:AE:75:01:07:72:6B:64:12:90:06:73:50:DF:01:E8:7D:CE:3D:D2
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019D269644FC884E6F11DE2C2EEB7EC1FC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 163E
Signing time: Wed 25 Mar 2026 20:01:15 +0000
Manifest this update: Wed 25 Mar 2026 20:01:15 +0000
Manifest next update: Thu 26 Mar 2026 20:01:15 +0000
Files and hashes: 1: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=)
2: Y5YxvqFSIggg3EQfLZPKszOK6qM.roa (hash: UpM/vZPB1/oJgnqfUPo2gNRHRr3zvsamvafTQyHWibM=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: QfVxvq05BAkPgUuP7viO4v15oGVV9PAWC7hX/ivCK/0=)
4: w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa (hash: 2ZZ8GWyxnopSnEx+KCqhJpc+c1KzSn/YRlcq0uuBarM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:44:fc:88:4e:6f:11:de:2c:2e:eb:7e:c1:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Mar 25 20:01:15 2026 GMT
Not After : Mar 26 20:01:15 2026 GMT
Subject: CN=3fae750107726b641290067350df01e87dce3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:79:ba:6b:37:7e:85:d5:47:4e:3d:ba:55:
49:aa:74:41:a6:19:c1:06:41:f5:51:bb:d4:cd:d7:
81:e6:bc:51:7d:c7:2c:73:21:8e:df:d8:6b:c7:8f:
1f:de:d6:4b:08:f1:7d:ba:f9:92:19:27:d8:72:76:
08:51:af:d5:dd:ca:78:5d:1f:ba:b5:2e:f3:bc:d3:
e9:db:0d:03:b4:71:b1:9e:16:58:68:87:66:3c:ec:
04:3a:2f:03:fc:e4:5c:3b:4c:79:1f:aa:13:43:8e:
b0:8d:7f:9f:e4:2a:03:d7:87:67:c1:d6:80:2a:62:
db:ba:89:ae:71:c0:61:1d:ac:8b:15:86:db:7e:58:
08:5a:fd:af:74:7e:91:90:20:d3:05:c4:78:b6:05:
c4:be:54:d4:cc:69:ef:a1:66:d5:d9:21:a5:e0:a8:
5e:f2:f3:be:1d:59:09:50:4c:a6:42:fd:20:52:07:
94:ad:06:ed:3d:e6:94:99:06:79:18:bd:8d:0d:55:
78:f5:2a:28:ca:13:1b:2d:a5:94:2d:cc:f2:a0:f2:
82:1f:d6:c4:d0:88:81:14:1b:1e:55:39:a4:f3:80:
b4:9d:22:2e:93:cf:99:f0:79:bb:1a:a7:22:55:ae:
ff:48:3a:19:96:c9:be:48:15:ee:f7:ec:48:66:0d:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:75:01:07:72:6B:64:12:90:06:73:50:DF:01:E8:7D:CE:3D:D2
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:f3:cc:cd:43:52:e9:b3:a9:43:fb:96:09:36:4d:b7:ae:
8f:3d:d2:64:48:86:e5:fd:d7:49:90:5b:c9:a9:79:5d:48:b4:
80:08:20:a4:f2:76:6c:13:d0:2c:49:1e:c9:f0:33:1a:c4:c1:
7a:52:6f:8f:b3:a4:89:ad:e6:b9:f4:7e:7e:e1:ef:a7:c8:34:
fa:f9:44:90:b0:6f:3b:5d:3c:4c:cd:72:96:b1:69:4d:ef:79:
4e:36:a6:6c:61:05:40:9b:2b:2e:2a:b8:02:05:71:c3:8c:5a:
6e:35:ae:c3:d9:1a:48:a6:f6:bd:38:3e:b6:14:c7:5a:dc:c7:
bc:7f:f7:2c:da:69:68:33:28:f2:07:d4:93:38:28:a7:c0:b3:
87:45:52:f1:41:91:e4:08:b3:2d:24:51:61:3f:8a:0c:27:da:
18:3e:d7:b5:79:9d:87:b2:97:8c:0a:d0:d7:3f:17:ca:3a:5c:
a6:d2:ba:d4:3f:53:09:3f:61:5e:bd:f5:58:87:7d:c2:52:bb:
4a:b5:f9:76:64:fe:ca:aa:8a:4d:59:50:37:5f:f1:03:64:81:
ba:00:18:e2:e8:6c:13:97:6d:37:ee:ad:bc:d9:42:f0:06:47:
58:54:f0:23:ad:59:3b:03:71:a1:8a:f0:65:7d:7a:24:97:dc:
ad:4b:09:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlkT8iE5vEd4sLut+wfwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjYwMzI1MjAwMTE1WhcNMjYwMzI2MjAwMTE1WjAzMTEwLwYDVQQD
EygzZmFlNzUwMTA3NzI2YjY0MTI5MDA2NzM1MGRmMDFlODdkY2UzZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnN5ums3foXVR049ulVJqnRBphnB
BkH1UbvUzdeB5rxRfccscyGO39hrx48f3tZLCPF9uvmSGSfYcnYIUa/V3cp4XR+6
tS7zvNPp2w0DtHGxnhZYaIdmPOwEOi8D/ORcO0x5H6oTQ46wjX+f5CoD14dnwdaA
KmLbuomuccBhHayLFYbbflgIWv2vdH6RkCDTBcR4tgXEvlTUzGnvoWbV2SGl4Khe
8vO+HVkJUEymQv0gUgeUrQbtPeaUmQZ5GL2NDVV49SooyhMbLaWULczyoPKCH9bE
0IiBFBseVTmk84C0nSIuk8+Z8Hm7GqciVa7/SDoZlsm+SBXu9+xIZg3dMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+udQEHcmtkEpAGc1DfAeh9zj3SMB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCTzzM1D
UumzqUP7lgk2Tbeujz3SZEiG5f3XSZBbyal5XUi0gAggpPJ2bBPQLEkeyfAzGsTB
elJvj7Okia3mufR+fuHvp8g0+vlEkLBvO108TM1ylrFpTe95TjambGEFQJsrLiq4
AgVxw4xabjWuw9kaSKb2vTg+thTHWtzHvH/3LNppaDMo8gfUkzgop8Czh0VS8UGR
5AizLSRRYT+KDCfaGD7XtXmdh7KXjArQ1z8XyjpcptK61D9TCT9hXr31WId9wlK7
SrX5dmT+yqqKTVlQN1/xA2SBugAY4uhsE5dtN+6tvNlC8AZHWFTwI61ZOwNxoYrw
ZX16JJfcrUsJtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:26 2026 by rpki-client