
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: wwbeKY0n0ebTmiH3ijQ0bx315m79JXNJ2XDzX6LUWt0=
Subject key identifier: 76:1F:D4:4C:D2:57:92:00:EA:BF:25:08:6E:5B:C4:5C:95:66:BC:A7
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 019D26965A6CE00BAF832BB9CAB69C572F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0DE0
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: kXskCgYmUOFLhC89sy7RctNdb9mc+9q0Ywyw6HsCBzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5a:6c:e0:0b:af:83:2b:b9:ca:b6:9c:57:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=761fd44cd2579200eabf25086e5bc45c9566bca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a1:8a:4c:36:99:72:79:35:68:28:3e:fc:99:
ad:30:27:a3:34:33:5e:0e:5b:90:13:55:e8:7a:49:
2c:05:bd:6c:db:f4:84:13:ea:d1:a1:a2:de:a5:cb:
ca:cb:8f:dd:e3:ce:49:e1:52:fd:f6:b0:63:e5:38:
12:7d:74:4f:6e:59:b1:11:1a:29:62:43:35:56:ef:
36:76:4c:1f:db:f1:75:0b:aa:8a:52:6f:b7:bd:f4:
aa:62:e1:5b:75:a7:d3:65:25:e9:d1:8d:2c:60:5e:
71:b2:f7:e5:ed:44:bc:1f:60:38:4c:a7:61:71:8a:
c4:24:ea:c7:b1:d7:7f:04:13:bd:d7:06:3f:03:b9:
52:07:c5:12:69:c7:37:a4:35:2a:10:a9:fb:c4:7c:
5b:af:41:9f:43:57:5f:9d:85:ff:e7:45:43:f8:e4:
52:83:cb:6f:0d:03:f0:b3:75:be:71:50:f9:dd:97:
af:77:00:fd:4d:c5:b6:82:6d:78:36:be:c8:e4:71:
c0:67:17:1d:52:45:45:5c:a8:c4:85:df:95:3d:4e:
4d:5c:a0:d3:46:d6:94:04:e4:20:25:e3:4e:6b:2e:
e3:6d:81:61:a8:b9:b6:c7:f0:67:42:f0:cd:40:fb:
6e:56:b5:66:1e:ca:cc:2b:52:cc:6d:26:72:d4:7b:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1F:D4:4C:D2:57:92:00:EA:BF:25:08:6E:5B:C4:5C:95:66:BC:A7
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:54:31:28:dd:94:c3:15:3a:43:51:bb:22:99:70:c1:a0:
7d:3a:79:f4:65:7f:d6:f0:56:2a:ec:34:38:e2:bd:25:ac:f7:
31:b2:f5:04:fa:b6:54:20:cf:a7:aa:c5:df:20:8e:a4:56:19:
82:21:d0:c9:9c:89:e3:b7:15:61:57:32:fe:5e:6b:5a:e8:00:
8c:1d:e0:c4:cb:38:75:98:dc:05:b4:5e:90:cd:1c:d5:d3:15:
45:d3:71:1a:24:02:67:fa:cd:74:ef:42:3e:7d:df:f1:7b:71:
69:56:b8:aa:18:9e:74:b8:53:9b:d4:41:60:36:5d:fc:c3:c8:
ff:5d:20:c3:36:99:d5:05:18:43:51:1f:96:e8:ae:43:b1:12:
2c:25:22:be:77:bd:b6:eb:02:e8:62:09:da:0c:15:42:60:7e:
da:21:8e:55:26:8f:7c:e7:ff:7e:3a:00:69:46:47:e9:54:2e:
59:2a:67:0e:c5:a6:46:e7:6e:76:ab:66:03:22:67:52:d9:3e:
64:83:f7:ac:a0:66:e8:d4:ea:31:7a:8e:5c:aa:29:18:95:71:
9e:6c:8c:66:bc:3c:44:db:af:14:3d:7f:ba:a0:7b:9d:a4:39:
f7:5c:15:f4:51:b4:46:bb:a7:30:61:a8:c7:1a:93:c5:a6:b1:
4e:16:e9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllps4Auvgyu5yracVy88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx
YzdmNzUwHhcNMjYwMzI1MjAwMTIwWhcNMjYwMzI2MjAwMTIwWjAzMTEwLwYDVQQD
Eyg3NjFmZDQ0Y2QyNTc5MjAwZWFiZjI1MDg2ZTViYzQ1Yzk1NjZiY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96GKTDaZcnk1aCg+/JmtMCejNDNe
DluQE1XoekksBb1s2/SEE+rRoaLepcvKy4/d485J4VL99rBj5TgSfXRPblmxERop
YkM1Vu82dkwf2/F1C6qKUm+3vfSqYuFbdafTZSXp0Y0sYF5xsvfl7US8H2A4TKdh
cYrEJOrHsdd/BBO91wY/A7lSB8USacc3pDUqEKn7xHxbr0GfQ1dfnYX/50VD+ORS
g8tvDQPws3W+cVD53ZevdwD9TcW2gm14Nr7I5HHAZxcdUkVFXKjEhd+VPU5NXKDT
RtaUBOQgJeNOay7jbYFhqLm2x/BnQvDNQPtuVrVmHsrMK1LMbSZy1HuhFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYf1EzSV5IA6r8lCG5bxFyVZrynMB8GA1UdIwQY
MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt
YTM4ZTFlY2E0ZmQ0LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0
LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQVUMSjd
lMMVOkNRuyKZcMGgfTp59GV/1vBWKuw0OOK9Jaz3MbL1BPq2VCDPp6rF3yCOpFYZ
giHQyZyJ47cVYVcy/l5rWugAjB3gxMs4dZjcBbRekM0c1dMVRdNxGiQCZ/rNdO9C
Pn3f8XtxaVa4qhiedLhTm9RBYDZd/MPI/10gwzaZ1QUYQ1EfluiuQ7ESLCUivne9
tusC6GIJ2gwVQmB+2iGOVSaPfOf/fjoAaUZH6VQuWSpnDsWmRududqtmAyJnUtk+
ZIP3rKBm6NTqMXqOXKopGJVxnmyMZrw8RNuvFD1/uqB7naQ591wV9FG0RrunMGGo
xxqTxaaxThbp1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:46 2026 by rpki-client