Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: oII+CEkeU7PsEKcgzeUmfh3Mp62Mgmm1Tob10E0iL/I=
Subject key identifier: 86:64:28:F4:CA:DD:68:47:02:FB:A4:64:43:29:5B:D5:55:F5:C1:2F
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019D2928E7A2CE5577CBF498DB962D6EC056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0AD4
Signing time: Thu 26 Mar 2026 08:00:39 +0000
Manifest this update: Thu 26 Mar 2026 08:00:39 +0000
Manifest next update: Fri 27 Mar 2026 08:00:39 +0000
Files and hashes: 1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: FiphquQAJtfN/uWK7PAliLpwnEpzMBcg/dOVHUlr1zk=)
2: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (hash: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e7:a2:ce:55:77:cb:f4:98:db:96:2d:6e:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Mar 26 08:00:39 2026 GMT
Not After : Mar 27 08:00:39 2026 GMT
Subject: CN=866428f4cadd684702fba46443295bd555f5c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:d4:36:c3:93:b2:e3:4f:c4:95:a6:fb:04:
a0:11:a5:de:60:76:78:79:fb:12:a1:1f:df:08:bf:
ef:76:d2:0a:d3:41:44:5d:d1:85:81:48:ec:55:e7:
aa:1b:cb:96:2e:c7:dd:23:3a:0a:09:b1:77:23:16:
15:55:21:45:3e:24:d6:33:47:30:fe:73:07:83:47:
4e:e6:3e:56:b3:71:04:ad:6c:09:9b:c0:32:c1:ba:
13:93:c7:49:79:49:5e:03:bc:94:08:78:8b:1e:fd:
46:81:ed:f6:e3:9a:84:04:ae:09:51:47:97:a0:95:
d4:f6:4a:c0:e9:41:aa:7b:89:65:6d:09:90:b4:b7:
51:18:20:d2:62:89:a8:97:af:36:ee:11:49:86:d2:
bf:25:7f:cc:36:2f:39:c9:96:07:a1:95:eb:9a:e8:
73:93:b8:9a:38:42:94:d3:45:64:a2:5b:e9:bd:08:
79:6a:cd:74:79:4e:a5:41:74:d4:c2:f6:67:55:d5:
37:32:32:30:6f:a1:75:0c:41:c2:54:dd:98:ac:ff:
f9:5f:a2:e3:2e:a4:c0:7b:19:40:3b:61:4b:e5:e4:
73:d4:f5:27:0a:a9:60:3e:ba:22:0a:69:0a:ca:e2:
bd:67:86:66:60:11:88:e0:9c:2c:14:a5:97:16:72:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:28:F4:CA:DD:68:47:02:FB:A4:64:43:29:5B:D5:55:F5:C1:2F
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:52:39:f6:a6:f4:17:f2:50:2d:fc:67:4a:53:48:45:32:
37:c8:43:88:2b:79:c7:ca:96:0f:c8:3d:3b:1e:ec:9a:2e:f2:
c9:a1:9b:89:73:3b:8f:c9:d1:ad:57:37:96:fc:43:da:a1:49:
7d:53:07:bd:f3:04:bb:ec:77:80:72:fa:94:a5:7f:31:21:e9:
74:76:09:09:61:95:16:42:ea:ab:a6:92:b1:96:43:35:44:f0:
ea:7e:18:da:9a:cd:2c:bd:41:35:0b:73:83:b9:6b:28:a3:86:
ee:5f:09:39:15:78:f5:5f:2f:55:51:8b:d8:51:bc:09:e7:a7:
ae:e6:71:91:d6:54:de:78:bf:99:a1:02:f8:08:13:eb:7d:7b:
a0:19:56:8f:fb:22:74:a4:86:12:57:57:ff:1c:b8:fd:5a:71:
71:a0:ed:6c:fc:52:93:34:39:9c:63:8a:89:ce:96:23:e1:4b:
2e:ef:f0:43:d4:71:74:c4:9c:65:b3:ad:c3:ee:c1:7b:a8:c8:
31:0c:89:af:3a:24:4c:07:f8:4d:f2:69:bc:25:87:e5:cf:4f:
0e:be:37:8a:71:ed:6f:32:3e:92:69:2b:00:45:5d:04:ff:78:
2e:77:f6:71:23:be:cd:49:22:93:eb:09:ee:7f:68:1a:df:9e:
48:17:55:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKOeizlV3y/SY25YtbsBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm
YWUyOTEwHhcNMjYwMzI2MDgwMDM5WhcNMjYwMzI3MDgwMDM5WjAzMTEwLwYDVQQD
Eyg4NjY0MjhmNGNhZGQ2ODQ3MDJmYmE0NjQ0MzI5NWJkNTU1ZjVjMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SDUNsOTsuNPxJWm+wSgEaXeYHZ4
efsSoR/fCL/vdtIK00FEXdGFgUjsVeeqG8uWLsfdIzoKCbF3IxYVVSFFPiTWM0cw
/nMHg0dO5j5Ws3EErWwJm8AywboTk8dJeUleA7yUCHiLHv1Gge3245qEBK4JUUeX
oJXU9krA6UGqe4llbQmQtLdRGCDSYomol6827hFJhtK/JX/MNi85yZYHoZXrmuhz
k7iaOEKU00VkolvpvQh5as10eU6lQXTUwvZnVdU3MjIwb6F1DEHCVN2YrP/5X6Lj
LqTAexlAO2FL5eRz1PUnCqlgProiCmkKyuK9Z4ZmYBGI4JwsFKWXFnIKRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZkKPTK3WhHAvukZEMpW9VV9cEvMB8GA1UdIwQY
MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt
NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky
LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0hSOfam
9BfyUC38Z0pTSEUyN8hDiCt5x8qWD8g9Ox7smi7yyaGbiXM7j8nRrVc3lvxD2qFJ
fVMHvfMEu+x3gHL6lKV/MSHpdHYJCWGVFkLqq6aSsZZDNUTw6n4Y2prNLL1BNQtz
g7lrKKOG7l8JORV49V8vVVGL2FG8CeenruZxkdZU3ni/maEC+AgT6317oBlWj/si
dKSGEldX/xy4/VpxcaDtbPxSkzQ5nGOKic6WI+FLLu/wQ9RxdMScZbOtw+7Be6jI
MQyJrzokTAf4TfJpvCWH5c9PDr43inHtbzI+kmkrAEVdBP94Lnf2cSO+zUkik+sJ
7n9oGt+eSBdVvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:53 2026 by rpki-client