Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: V3f8/4s2GKVzjY0xsXEN9Zk1ita17Wo6E0NvfsGWRhM=
Subject key identifier: 58:B9:A4:AE:C5:22:B3:3B:38:5D:5C:E0:09:26:FE:81:63:62:AE:53
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019E1DC6EF04BD78D313F3639C1A57BC4AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 16BE
Signing time: Tue 12 May 2026 20:00:36 +0000
Manifest this update: Tue 12 May 2026 20:00:36 +0000
Manifest next update: Wed 13 May 2026 20:00:36 +0000
Files and hashes: 1: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=)
2: Y5YxvqFSIggg3EQfLZPKszOK6qM.roa (hash: UpM/vZPB1/oJgnqfUPo2gNRHRr3zvsamvafTQyHWibM=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: /+a1rMur/iv/n9fR1+DaA6tuiYRzho/VMTyFXXYeKcM=)
4: w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa (hash: 2ZZ8GWyxnopSnEx+KCqhJpc+c1KzSn/YRlcq0uuBarM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:ef:04:bd:78:d3:13:f3:63:9c:1a:57:bc:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: May 12 20:00:36 2026 GMT
Not After : May 13 20:00:36 2026 GMT
Subject: CN=58b9a4aec522b33b385d5ce00926fe816362ae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:a0:69:1c:5b:e8:84:bc:88:e5:bd:8d:5c:
ea:93:1c:b4:78:c8:d6:bf:97:cd:1b:a4:e5:f4:94:
c5:6f:23:95:ba:6c:ea:da:f3:ba:71:76:6a:61:6e:
12:c9:11:03:02:05:8d:f2:e8:c2:33:7f:4f:c3:f6:
55:2b:c7:a4:d5:55:80:dd:b3:51:e8:b5:2a:b9:99:
9d:d7:39:30:b1:bf:e5:76:f8:5d:58:9a:6a:89:cf:
2e:fd:f1:7d:f3:46:15:20:ac:49:90:95:5f:e1:48:
90:fa:fa:ba:b8:29:53:df:f3:8c:0b:ca:cf:b9:ea:
2d:47:e4:b0:0c:36:cd:1d:29:0e:31:c0:f1:e9:86:
48:3f:a0:e9:2a:d3:92:df:80:0c:d6:f8:67:a2:d7:
f9:65:eb:b8:39:3e:a8:72:1b:98:e2:2e:54:43:cb:
e9:35:89:cf:ae:73:bf:82:9d:ae:3a:d4:b2:ab:69:
d1:20:7d:cd:22:01:4e:a0:43:cd:39:68:7c:b7:b9:
f8:3b:7d:f2:3d:1e:c1:e5:75:38:30:14:09:ce:c8:
8e:20:57:c8:37:eb:58:1d:7a:25:31:2a:34:cb:bc:
d2:ae:4a:a5:c6:5a:c5:ec:ae:40:22:ce:75:e2:d1:
a6:0f:28:5d:b1:19:bb:52:bc:e3:38:a0:2e:da:18:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:A4:AE:C5:22:B3:3B:38:5D:5C:E0:09:26:FE:81:63:62:AE:53
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:57:0b:99:44:51:2a:9e:79:7b:70:b2:dc:74:d8:ec:da:
a9:a2:3a:be:83:eb:17:9b:45:21:d4:3d:43:f3:8f:1e:bf:ef:
83:ac:40:11:36:9e:6a:5c:65:0e:12:7b:67:f7:73:dc:3b:5b:
42:8f:68:22:20:43:16:86:25:70:85:3d:c4:86:dd:be:15:95:
7f:68:7a:a9:b7:4b:60:21:ad:12:99:40:32:15:72:be:87:cc:
a2:a4:83:c5:0a:65:6c:d5:89:d1:f8:d0:f3:3d:b6:71:d2:d7:
ca:80:b6:f9:7b:87:73:8c:0d:67:42:10:80:cb:8d:c4:33:b7:
bc:ad:53:b3:23:a8:c3:b0:85:74:f7:a2:81:79:c3:a5:23:d3:
58:36:f9:23:54:53:b0:69:ab:ec:15:a0:22:94:7e:fe:75:3a:
ce:27:ec:d8:03:98:34:0f:70:e5:0b:e6:fe:06:2e:91:ad:5d:
63:99:60:e1:eb:56:ed:10:f0:50:05:95:dd:87:13:9e:9a:70:
49:cf:36:80:20:50:b3:39:53:29:5c:f6:f1:99:c9:3b:ce:7a:
c9:ae:1c:d3:13:27:13:60:c8:70:87:cc:bf:c9:7a:a9:a2:e7:
0c:21:bd:73:c8:a0:91:ac:b1:f1:03:45:fa:92:99:93:79:3d:
05:7e:9f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxu8EvXjTE/NjnBpXvErgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjYwNTEyMjAwMDM2WhcNMjYwNTEzMjAwMDM2WjAzMTEwLwYDVQQD
Eyg1OGI5YTRhZWM1MjJiMzNiMzg1ZDVjZTAwOTI2ZmU4MTYzNjJhZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A6gaRxb6IS8iOW9jVzqkxy0eMjW
v5fNG6Tl9JTFbyOVumzq2vO6cXZqYW4SyREDAgWN8ujCM39Pw/ZVK8ek1VWA3bNR
6LUquZmd1zkwsb/ldvhdWJpqic8u/fF980YVIKxJkJVf4UiQ+vq6uClT3/OMC8rP
ueotR+SwDDbNHSkOMcDx6YZIP6DpKtOS34AM1vhnotf5Zeu4OT6ochuY4i5UQ8vp
NYnPrnO/gp2uOtSyq2nRIH3NIgFOoEPNOWh8t7n4O33yPR7B5XU4MBQJzsiOIFfI
N+tYHXolMSo0y7zSrkqlxlrF7K5AIs514tGmDyhdsRm7UrzjOKAu2hgMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi5pK7FIrM7OF1c4Akm/oFjYq5TMB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm1XC5lE
USqeeXtwstx02OzaqaI6voPrF5tFIdQ9Q/OPHr/vg6xAETaealxlDhJ7Z/dz3Dtb
Qo9oIiBDFoYlcIU9xIbdvhWVf2h6qbdLYCGtEplAMhVyvofMoqSDxQplbNWJ0fjQ
8z22cdLXyoC2+XuHc4wNZ0IQgMuNxDO3vK1TsyOow7CFdPeigXnDpSPTWDb5I1RT
sGmr7BWgIpR+/nU6zifs2AOYNA9w5Qvm/gYuka1dY5lg4etW7RDwUAWV3YcTnppw
Sc82gCBQszlTKVz28ZnJO856ya4c0xMnE2DIcIfMv8l6qaLnDCG9c8igkayx8QNF
+pKZk3k9BX6f0w==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:49 2026 by rpki-client