Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: GEQJ6MBCT0nENtnDGYkmTDH/TC1Yu14KpDcgOF/19UU=
Subject key identifier: 5B:B2:99:FC:A5:03:2F:AE:5A:18:43:DE:D0:F3:20:C9:62:B8:B8:46
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019D31F5A4033BB91DA6CE73570C2E386866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 06F5
Signing time: Sat 28 Mar 2026 01:01:15 +0000
Manifest this update: Sat 28 Mar 2026 01:01:15 +0000
Manifest next update: Sun 29 Mar 2026 01:01:15 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: 72BqvsyfH1t08C8ZpreGFEbXTh46tuFhaXi52fSpxGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:a4:03:3b:b9:1d:a6:ce:73:57:0c:2e:38:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Mar 28 01:01:15 2026 GMT
Not After : Mar 29 01:01:15 2026 GMT
Subject: CN=5bb299fca5032fae5a1843ded0f320c962b8b846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:d9:3f:b1:77:b5:ff:9b:25:41:b5:66:a7:
b3:51:19:3f:c1:20:3e:3a:59:93:3f:6b:62:b1:8f:
ca:c5:99:df:4d:72:dd:99:79:b8:3e:ba:c1:3e:0e:
6f:74:2f:fd:66:90:17:e0:e5:56:ed:30:4b:50:3d:
42:8a:66:5c:19:56:5b:ec:49:f5:17:26:8d:4f:99:
43:9e:35:4c:e7:87:fc:dc:98:83:13:cc:ea:23:99:
63:f5:64:88:aa:e7:44:e2:8a:5d:6f:d5:dc:c8:69:
44:84:05:4e:bc:2f:fd:c9:de:ac:7d:9a:0f:90:ed:
2f:30:52:e2:ab:58:2b:f0:b7:b6:a4:4c:9b:fe:6b:
f0:9a:f7:f7:14:44:6d:00:86:c9:00:ee:44:e9:47:
62:33:fd:29:83:3a:48:5e:b4:c4:57:b5:2f:51:91:
59:2b:e8:e0:b0:7c:de:93:e6:ea:87:8c:d8:89:15:
8e:ca:2e:27:09:c3:ea:ab:9b:6d:39:ff:14:04:e8:
f7:c0:8c:85:e1:e4:97:1f:b7:00:52:8a:0e:7c:77:
b7:2e:2d:bf:75:ca:66:ac:7d:ef:eb:bf:60:b2:c5:
a3:bd:1f:f5:95:65:61:f8:31:73:3b:48:b2:b2:46:
9f:b9:d6:ba:a1:0f:ee:8f:ed:d0:aa:79:a4:52:ee:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:99:FC:A5:03:2F:AE:5A:18:43:DE:D0:F3:20:C9:62:B8:B8:46
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:54:b3:ea:14:5f:40:75:59:12:61:a3:6a:11:82:01:e8:f5:
48:7d:f5:23:f8:c8:1e:2a:27:4a:e2:77:9c:8b:c0:fd:4b:6b:
b7:86:d5:57:11:33:43:96:5b:0e:f2:87:36:7a:da:c2:f7:9b:
b6:fc:c9:e1:c1:6e:7c:f6:f3:67:78:c2:85:bb:ec:af:9f:be:
43:d0:29:bc:a0:2a:14:50:34:02:ed:4b:3c:96:e6:65:e9:c1:
59:46:cb:f9:66:a4:f3:4b:2e:a3:50:26:bc:bb:df:1e:1b:b4:
49:22:6b:cd:d7:02:6a:d9:05:4b:24:6a:f3:63:00:b4:15:27:
0a:e9:d8:cc:57:24:ea:dc:67:51:22:73:fb:b1:37:23:c9:a2:
8e:14:18:27:ed:aa:09:78:ff:77:ae:7f:62:2b:f7:bb:0d:c6:
7a:e2:f9:3a:3c:ff:3b:b2:3e:52:a8:86:30:d0:c7:25:b8:9c:
60:d5:cc:b6:81:61:6d:52:4d:cb:b2:f5:21:6d:12:58:26:91:
c4:dd:c5:14:2c:56:7a:1a:fa:eb:06:0f:63:af:2f:da:ed:d6:
5d:fd:80:b3:bb:ee:73:ee:4f:85:7f:07:c8:b0:63:bd:0f:d4:
e0:b6:1b:e8:a1:e8:2b:12:98:7c:f3:67:23:52:13:d9:87:70:
e5:a3:0e:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9aQDO7kdps5zVwwuOGhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjYwMzI4MDEwMTE1WhcNMjYwMzI5MDEwMTE1WjAzMTEwLwYDVQQD
Eyg1YmIyOTlmY2E1MDMyZmFlNWExODQzZGVkMGYzMjBjOTYyYjhiODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3TZP7F3tf+bJUG1ZqezURk/wSA+
OlmTP2tisY/KxZnfTXLdmXm4PrrBPg5vdC/9ZpAX4OVW7TBLUD1CimZcGVZb7En1
FyaNT5lDnjVM54f83JiDE8zqI5lj9WSIqudE4opdb9XcyGlEhAVOvC/9yd6sfZoP
kO0vMFLiq1gr8Le2pEyb/mvwmvf3FERtAIbJAO5E6UdiM/0pgzpIXrTEV7UvUZFZ
K+jgsHzek+bqh4zYiRWOyi4nCcPqq5ttOf8UBOj3wIyF4eSXH7cAUooOfHe3Li2/
dcpmrH3v679gssWjvR/1lWVh+DFzO0iyskafuda6oQ/uj+3QqnmkUu55OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuymfylAy+uWhhD3tDzIMliuLhGMB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1Sz6hRf
QHVZEmGjahGCAej1SH31I/jIHionSuJ3nIvA/Utrt4bVVxEzQ5ZbDvKHNnrawveb
tvzJ4cFufPbzZ3jChbvsr5++Q9ApvKAqFFA0Au1LPJbmZenBWUbL+Wak80suo1Am
vLvfHhu0SSJrzdcCatkFSyRq82MAtBUnCunYzFck6txnUSJz+7E3I8mijhQYJ+2q
CXj/d65/Yiv3uw3GeuL5Ojz/O7I+UqiGMNDHJbicYNXMtoFhbVJNy7L1IW0SWCaR
xN3FFCxWehr66wYPY68v2u3WXf2As7vuc+5PhX8HyLBjvQ/U4LYb6KHoKxKYfPNn
I1IT2Ydw5aMOfQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:08 2026 by rpki-client