Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: Y8f9QYC8O91eQINxkIPTlLPV653wTUp8w5LAltNAkaw=
Subject key identifier: 81:6C:BA:49:60:0E:2E:6E:BE:45:DA:6B:0A:2C:E1:0D:CD:98:7E:82
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019E1D90B8157929FD25F4AA709E5FC739EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 076F
Signing time: Tue 12 May 2026 19:01:24 +0000
Manifest this update: Tue 12 May 2026 19:01:24 +0000
Manifest next update: Wed 13 May 2026 19:01:24 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: nGR2LXrN1Sn0ZLim77R3WfHT+PnWv9rPKmYwOgFczwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b8:15:79:29:fd:25:f4:aa:70:9e:5f:c7:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: May 12 19:01:24 2026 GMT
Not After : May 13 19:01:24 2026 GMT
Subject: CN=816cba49600e2e6ebe45da6b0a2ce10dcd987e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:9e:41:52:ae:e9:95:16:82:63:cf:d4:fb:
e1:53:bf:70:84:23:24:0f:b9:27:6a:e9:81:8f:55:
4f:6f:dd:6f:e5:f2:ff:06:2f:7d:9e:4e:f3:20:27:
6d:27:40:ee:e0:84:1c:5b:54:2f:f0:b9:2e:d3:19:
81:f0:55:d9:94:26:a0:15:64:84:a4:04:e0:e6:19:
e3:ab:32:b5:a5:aa:ba:66:fc:c6:b1:68:8a:63:eb:
4f:63:4d:0c:ad:ba:7a:ff:37:a8:68:cb:e8:7a:73:
79:25:cf:a4:e2:ab:49:89:68:f7:b9:96:21:d6:e6:
85:9e:66:cd:b7:a5:fe:4b:71:a5:35:d9:a3:40:21:
91:f0:47:d4:f4:d1:d5:0c:33:e9:42:98:0f:73:95:
db:cf:35:b7:48:6b:31:10:39:5b:a4:d7:13:14:b6:
0e:29:67:f4:ad:f1:b7:bb:32:96:09:0f:f5:64:2a:
df:5b:74:ee:d3:d0:f9:8a:3c:d0:70:b5:97:0a:4b:
55:7f:ff:ea:bb:69:bb:c6:7e:7c:d3:db:f0:e5:96:
59:45:7a:5c:4a:8f:3a:fa:87:ed:37:64:6c:3c:36:
cf:7e:10:bc:8b:9a:4c:f0:f5:53:95:92:a0:4a:63:
4a:5a:65:b6:f0:d2:2e:30:3a:fd:0e:1f:f5:46:a6:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:BA:49:60:0E:2E:6E:BE:45:DA:6B:0A:2C:E1:0D:CD:98:7E:82
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:e1:2e:b4:ff:63:96:0f:9e:56:12:e4:1e:91:04:83:85:
3c:83:6c:04:e3:4c:c2:fd:23:79:f7:a7:4c:50:9b:49:c9:e1:
b0:0d:f8:91:b9:13:ef:b3:80:da:ce:5d:da:d1:78:72:d9:1a:
72:fa:8e:96:d8:ce:66:8f:60:f2:3b:b5:75:16:a2:db:e4:e9:
bb:77:1f:b1:8e:21:42:28:f8:82:f7:fe:22:4a:03:40:02:7d:
12:d4:e2:d3:09:25:95:bd:b8:3c:f8:d3:34:f7:e3:0a:17:df:
9c:92:5c:15:3d:a8:38:11:19:81:58:cf:89:ba:a5:32:14:5b:
27:60:f6:cb:78:21:93:31:a1:85:7c:f3:a8:3d:c6:a5:60:6f:
49:4d:6f:bd:27:34:f0:09:96:9c:05:3e:79:80:2e:5f:93:aa:
30:c6:50:19:c2:ff:2e:73:29:ce:0d:a1:b8:b0:d0:70:42:67:
ee:7a:02:69:58:da:36:74:37:ec:a4:2f:91:fd:cf:23:25:f4:
40:78:10:3f:c2:f7:de:d9:38:2a:d5:ca:ac:dd:93:23:61:e6:
0e:72:93:9d:e4:4f:4b:38:44:ed:74:6e:71:23:18:f2:54:9b:
7e:03:6b:5a:2d:95:25:a1:77:57:4f:b6:c6:2e:d6:95:cb:5d:
3f:0e:f4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLgVeSn9JfSqcJ5fxznqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjYwNTEyMTkwMTI0WhcNMjYwNTEzMTkwMTI0WjAzMTEwLwYDVQQD
Eyg4MTZjYmE0OTYwMGUyZTZlYmU0NWRhNmIwYTJjZTEwZGNkOTg3ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliCeQVKu6ZUWgmPP1PvhU79whCMk
D7knaumBj1VPb91v5fL/Bi99nk7zICdtJ0Du4IQcW1Qv8Lku0xmB8FXZlCagFWSE
pATg5hnjqzK1paq6ZvzGsWiKY+tPY00Mrbp6/zeoaMvoenN5Jc+k4qtJiWj3uZYh
1uaFnmbNt6X+S3GlNdmjQCGR8EfU9NHVDDPpQpgPc5XbzzW3SGsxEDlbpNcTFLYO
KWf0rfG3uzKWCQ/1ZCrfW3Tu09D5ijzQcLWXCktVf//qu2m7xn5809vw5ZZZRXpc
So86+oftN2RsPDbPfhC8i5pM8PVTlZKgSmNKWmW28NIuMDr9Dh/1Rqbc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFsuklgDi5uvkXaawos4Q3NmH6CMB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/7hLrT/
Y5YPnlYS5B6RBIOFPINsBONMwv0jefenTFCbScnhsA34kbkT77OA2s5d2tF4ctka
cvqOltjOZo9g8ju1dRai2+Tpu3cfsY4hQij4gvf+IkoDQAJ9EtTi0wkllb24PPjT
NPfjChffnJJcFT2oOBEZgVjPibqlMhRbJ2D2y3ghkzGhhXzzqD3GpWBvSU1vvSc0
8AmWnAU+eYAuX5OqMMZQGcL/LnMpzg2huLDQcEJn7noCaVjaNnQ37KQvkf3PIyX0
QHgQP8L33tk4KtXKrN2TI2HmDnKTneRPSzhE7XRucSMY8lSbfgNrWi2VJaF3V0+2
xi7WlctdPw70Sw==
-----END CERTIFICATE-----
Generated at Tue May 12 23:35:11 2026 by rpki-client