Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: o5R1vGtB/clptNKbTRcYYgtTktunfmCdvp4tXBHZZcU=
Subject key identifier: 25:71:76:0D:4D:4A:DA:6C:41:C8:F4:0D:71:70:D9:7B:3E:50:5F:5F
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 019D2816C8D2D89DC32C660BC49AD936767E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 065F
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa (hash: loHuoVuquEI4tAT3rW7VS3mainPoNo4WAoOqCbKbYJk=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: PaprmyLYxY6tMnG64t3wcxEX659yv0Js+jgsAF9+KQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c8:d2:d8:9d:c3:2c:66:0b:c4:9a:d9:36:76:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=2571760d4d4ada6c41c8f40d7170d97b3e505f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:47:20:5b:99:f5:9d:aa:69:3a:ae:e3:71:
76:5c:95:43:60:f7:7f:3d:aa:86:69:7a:13:8a:2d:
ff:78:81:68:f6:d6:de:91:9d:ee:55:20:34:c3:e0:
2f:34:5c:89:b8:8c:ce:06:b6:03:da:26:f8:7a:5a:
9f:f6:d5:d9:44:f1:07:1b:74:75:ed:54:6e:0e:7f:
d8:a7:ae:63:ff:69:67:91:bf:33:05:82:93:6c:a9:
85:bd:e5:77:b3:00:49:bc:ad:27:2a:38:a4:72:1b:
7b:81:e6:33:1d:1b:43:a3:6e:7b:55:de:de:de:68:
c8:7c:5f:91:bc:41:48:8c:05:32:c2:6b:41:58:16:
30:4f:82:e7:3f:73:5f:06:4d:f0:b8:a4:fc:fc:9c:
86:45:81:68:98:9e:20:f2:b5:8b:79:8a:a1:1d:80:
06:36:f2:59:b2:82:3c:07:40:8c:c4:ad:76:de:c9:
8e:10:9b:8c:46:8c:a3:d5:a7:e7:b7:77:38:e0:b6:
25:1f:0a:24:a5:e8:81:d7:8d:05:cb:9a:75:9e:4f:
c9:c9:cc:56:6e:7f:04:f4:f1:17:b9:7e:40:eb:00:
a7:e4:6a:8d:6d:81:db:92:6d:42:c0:d4:85:13:de:
0b:24:43:11:bc:85:68:7c:08:97:d7:76:ae:d7:4f:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:71:76:0D:4D:4A:DA:6C:41:C8:F4:0D:71:70:D9:7B:3E:50:5F:5F
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:5f:e8:7c:c7:8f:ab:37:dd:ad:cc:8a:b9:17:b1:b8:a8:
8b:43:3f:8d:90:21:15:e8:2d:0c:84:ae:f8:74:2c:50:d2:56:
15:e6:d1:f3:11:f1:2c:9c:e8:5e:3d:f6:5e:f6:93:9d:27:0d:
fe:62:ce:f5:fb:63:15:9f:13:90:af:3a:3f:0d:92:25:3e:9e:
88:19:11:0d:a9:70:77:a7:f0:46:31:c2:dd:4c:b8:7c:1e:91:
3e:e8:d3:ae:08:e2:d1:66:59:24:3d:85:06:b6:72:03:32:33:
6d:7f:4f:f8:ab:8c:a9:5c:5d:7f:4c:f0:e0:60:cf:60:6c:92:
a1:69:83:a3:f1:25:0c:d9:40:9d:ee:b6:56:90:6d:7a:9f:17:
59:ca:92:e4:26:f4:46:99:9e:da:08:22:32:5c:b1:77:8e:a2:
d3:e7:f1:23:ff:05:c2:ad:c9:e3:86:2e:e2:b3:8a:87:15:e2:
fc:eb:2a:49:61:50:70:11:1c:15:94:50:c8:79:95:93:e4:d4:
8e:4a:56:d5:83:9a:63:b2:68:bd:3e:6f:f5:31:ca:8a:95:bc:
97:48:a4:81:ab:10:ea:e3:44:1c:4e:3b:0d:f0:6c:94:d5:8d:
be:04:fb:dc:1f:45:5f:66:98:f8:15:fe:c2:a7:1f:85:08:96:
ed:f4:ea:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsjS2J3DLGYLxJrZNnZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh
NjE3MTcwHhcNMjYwMzI2MDMwMTE0WhcNMjYwMzI3MDMwMTE0WjAzMTEwLwYDVQQD
EygyNTcxNzYwZDRkNGFkYTZjNDFjOGY0MGQ3MTcwZDk3YjNlNTA1ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8pHIFuZ9Z2qaTqu43F2XJVDYPd/
PaqGaXoTii3/eIFo9tbekZ3uVSA0w+AvNFyJuIzOBrYD2ib4elqf9tXZRPEHG3R1
7VRuDn/Yp65j/2lnkb8zBYKTbKmFveV3swBJvK0nKjikcht7geYzHRtDo257Vd7e
3mjIfF+RvEFIjAUywmtBWBYwT4LnP3NfBk3wuKT8/JyGRYFomJ4g8rWLeYqhHYAG
NvJZsoI8B0CMxK123smOEJuMRoyj1afnt3c44LYlHwokpeiB140Fy5p1nk/JycxW
bn8E9PEXuX5A6wCn5GqNbYHbkm1CwNSFE94LJEMRvIVofAiX13au108nGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVxdg1NStpsQcj0DXFw2Xs+UF9fMB8GA1UdIwQY
MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt
N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0
LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeZf6HzH
j6s33a3MirkXsbioi0M/jZAhFegtDISu+HQsUNJWFebR8xHxLJzoXj32XvaTnScN
/mLO9ftjFZ8TkK86Pw2SJT6eiBkRDalwd6fwRjHC3Uy4fB6RPujTrgji0WZZJD2F
BrZyAzIzbX9P+KuMqVxdf0zw4GDPYGySoWmDo/ElDNlAne62VpBtep8XWcqS5Cb0
Rpme2ggiMlyxd46i0+fxI/8Fwq3J44Yu4rOKhxXi/OsqSWFQcBEcFZRQyHmVk+TU
jkpW1YOaY7JovT5v9THKipW8l0ikgasQ6uNEHE47DfBslNWNvgT73B9FX2aY+BX+
wqcfhQiW7fTqIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:21 2026 by rpki-client