Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: NKpKNZefflDdiwjfO5c0j4FPJ4w06+dV+ShzOXGJ/8I=
Subject key identifier: 7E:E5:88:23:88:3C:A5:D4:DC:07:28:D9:AF:7F:E4:28:93:17:A6:B0
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019D27A89A4C74C40741CC4402A25D38BEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0B96
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: HVLQTZWFcHWU41lvxD0ndEE4u7QSyBAFeVdZltjY/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9a:4c:74:c4:07:41:cc:44:02:a2:5d:38:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=7ee58823883ca5d4dc0728d9af7fe4289317a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:44:b3:19:ea:10:b0:f2:18:48:c4:84:ce:
36:e0:e2:63:dd:6b:bc:85:73:71:f8:f2:af:bd:19:
1e:1e:e5:93:37:06:df:01:7f:95:b6:9d:3c:8a:86:
97:34:86:35:22:17:ac:c8:ec:59:08:e8:a0:cb:79:
5e:11:1e:7d:1d:e6:b8:29:e1:49:82:31:50:8d:75:
76:63:4c:30:80:33:5c:8f:f5:2f:26:d3:11:38:7b:
3b:bc:88:cc:f6:77:98:2f:74:25:33:c9:f9:b1:06:
f3:93:23:7b:88:12:eb:97:bd:a6:02:11:05:75:f7:
0c:b2:dc:43:a5:64:32:cc:a9:a2:63:6b:ff:0b:ed:
06:b9:41:dc:4d:1e:88:a8:44:22:2c:62:65:79:ab:
e7:7a:03:44:b8:f6:b4:93:1d:14:a1:bd:6e:15:d4:
e8:94:29:0c:5a:bb:52:e0:80:0a:22:ae:66:3e:6d:
16:88:8e:fc:ef:c4:ef:6c:e8:07:4a:a9:bf:ab:26:
8d:54:b3:48:45:ef:14:98:d5:5f:47:6d:8c:47:f9:
e2:77:8c:9b:ed:7c:15:25:d5:84:70:3d:b4:fc:80:
c1:a6:2e:f2:50:7f:3a:50:c5:f1:ae:cf:e3:0f:4f:
2d:32:1a:3a:89:78:b7:28:d0:1b:15:44:ce:db:40:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E5:88:23:88:3C:A5:D4:DC:07:28:D9:AF:7F:E4:28:93:17:A6:B0
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:69:eb:f6:d1:3f:59:16:d4:55:ec:88:77:c8:0b:00:4a:
85:dd:ec:bc:f2:16:fd:2e:5d:3a:69:5c:79:28:fe:38:50:df:
20:b7:25:24:3f:74:15:55:52:13:28:23:8b:cc:60:84:e0:a1:
09:3d:da:07:4a:6f:ca:c3:23:a8:a9:01:fd:72:42:36:b5:2b:
a9:85:2f:d0:9b:64:5b:a3:ca:a6:aa:84:22:63:dc:39:3a:84:
ec:83:28:be:96:09:40:ee:28:d8:c4:bf:e7:1c:02:6e:bd:09:
56:e4:22:ba:67:19:c2:6c:e1:ae:b9:1f:4a:45:6a:98:ec:be:
47:c6:08:a7:d9:b0:4a:03:5a:1c:77:b2:da:d0:97:42:83:ee:
1a:8d:3e:5c:4a:c0:94:f6:e6:cd:61:67:6c:3b:4d:34:c9:ff:
ab:0e:55:fe:d1:53:ff:81:e2:86:9e:36:a3:b0:e1:ee:c7:61:
8d:34:4d:c8:4e:18:eb:de:60:aa:b0:0d:3b:d9:0e:44:6a:3f:
14:86:61:cb:92:24:31:eb:58:ad:c1:78:c6:34:45:34:f5:ed:
77:4b:f4:2b:9e:b5:65:20:f3:8a:b9:b7:5a:3c:a1:54:8e:7a:
8c:93:0d:08:c9:fa:43:57:63:09:75:73:36:52:3b:14:34:94:
13:b5:6d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJpMdMQHQcxEAqJdOL7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjYwMzI2MDEwMDU0WhcNMjYwMzI3MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3ZWU1ODgyMzg4M2NhNWQ0ZGMwNzI4ZDlhZjdmZTQyODkzMTdhNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobpEsxnqELDyGEjEhM424OJj3Wu8
hXNx+PKvvRkeHuWTNwbfAX+Vtp08ioaXNIY1IhesyOxZCOigy3leER59Hea4KeFJ
gjFQjXV2Y0wwgDNcj/UvJtMROHs7vIjM9neYL3QlM8n5sQbzkyN7iBLrl72mAhEF
dfcMstxDpWQyzKmiY2v/C+0GuUHcTR6IqEQiLGJleavnegNEuPa0kx0Uob1uFdTo
lCkMWrtS4IAKIq5mPm0WiI7878TvbOgHSqm/qyaNVLNIRe8UmNVfR22MR/nid4yb
7XwVJdWEcD20/IDBpi7yUH86UMXxrs/jD08tMho6iXi3KNAbFUTO20CsSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7liCOIPKXU3Aco2a9/5CiTF6awMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNRp6/bR
P1kW1FXsiHfICwBKhd3svPIW/S5dOmlceSj+OFDfILclJD90FVVSEygji8xghOCh
CT3aB0pvysMjqKkB/XJCNrUrqYUv0JtkW6PKpqqEImPcOTqE7IMovpYJQO4o2MS/
5xwCbr0JVuQiumcZwmzhrrkfSkVqmOy+R8YIp9mwSgNaHHey2tCXQoPuGo0+XErA
lPbmzWFnbDtNNMn/qw5V/tFT/4Hihp42o7Dh7sdhjTRNyE4Y695gqrANO9kORGo/
FIZhy5IkMetYrcF4xjRFNPXtd0v0K561ZSDzirm3WjyhVI56jJMNCMn6Q1djCXVz
NlI7FDSUE7VtrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:09 2026 by rpki-client