Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: jjnChOR+vvM6tklc7kJWTJYr6h0vOPsVafZLjpPbMfo=
Subject key identifier: B4:CA:E1:18:ED:F1:DE:F9:14:02:8C:9A:76:0D:F8:ED:1E:AC:82:44
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 019D2A04F36A3C34A5003775D42F9F366CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 0717
Signing time: Thu 26 Mar 2026 12:01:00 +0000
Manifest this update: Thu 26 Mar 2026 12:01:00 +0000
Manifest next update: Fri 27 Mar 2026 12:01:00 +0000
Files and hashes: 1: UTPn7sDyIDaf0ipM77C87Kdh1RA.roa (hash: yJkUEolTOzyU/wbxz5ChhzuCMevnkgv8qFIuytCOr7E=)
2: Y86nHrN-bbG9H8afnIR7ras_Ma0.roa (hash: hrk5zm3StPI0sBpuzLM9Lwz+1Pf71xxcm0cAPnW+R0k=)
3: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: Ufj8HrWjCsvmnhznO4q1yiORrg0LJzEI7rUjVnwe4cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f3:6a:3c:34:a5:00:37:75:d4:2f:9f:36:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Mar 26 12:01:00 2026 GMT
Not After : Mar 27 12:01:00 2026 GMT
Subject: CN=b4cae118edf1def914028c9a760df8ed1eac8244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:61:f4:9c:a2:61:c5:12:12:cf:f7:87:d5:
95:3b:07:a0:41:a5:03:49:c8:8f:67:4c:38:83:67:
05:55:37:14:42:5a:3f:16:3b:71:6e:af:86:40:4d:
65:13:5f:e7:7d:bd:a8:1d:cb:9a:17:75:39:a8:3a:
c4:3b:c1:5a:2a:a5:96:25:3c:7f:e0:fa:6c:fb:06:
50:5e:d2:83:e1:32:f5:4f:c0:fa:e7:58:7d:71:1e:
7b:e3:09:bf:4c:a3:95:ae:9b:99:29:2d:10:40:23:
3c:ef:b3:c7:5d:49:2a:f2:84:f3:df:d4:2c:39:47:
f9:e7:cb:66:95:5c:4b:41:5f:d8:6b:32:7b:97:09:
fa:bc:de:23:18:8e:98:62:51:f7:13:00:ef:80:f5:
23:11:b8:08:58:5d:15:ae:12:de:7b:d0:ed:ca:9d:
7d:c8:31:e3:ac:6a:3f:fc:47:9d:36:2a:20:b4:27:
6f:d6:34:d8:a8:c8:70:dd:12:58:95:7b:92:64:4c:
19:4a:aa:19:5e:09:8e:74:4b:f3:81:7c:3b:69:90:
38:73:ca:a5:2b:cf:75:a5:77:f8:11:c7:27:f5:33:
56:b9:34:24:92:ad:d7:b6:70:ea:3b:2a:b7:a6:42:
6e:34:4a:b4:17:e6:13:93:96:e0:97:22:07:34:38:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:E1:18:ED:F1:DE:F9:14:02:8C:9A:76:0D:F8:ED:1E:AC:82:44
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:12:9f:61:2b:43:f6:3b:0f:18:41:5d:cf:bd:b8:93:9d:
ca:a0:2e:eb:b2:e8:a6:b0:f5:73:45:3c:35:47:e6:8d:d1:e2:
dd:e8:1c:f4:8f:07:53:5e:06:26:e7:2d:65:18:5a:29:f1:51:
9d:29:d1:48:a8:5b:8c:f0:dd:1b:76:76:c9:7e:1c:de:c6:07:
45:87:a0:ee:23:d0:8b:37:6c:6b:95:45:ba:a2:35:b1:cc:a7:
46:f6:4a:cf:7c:a6:91:93:f7:f9:fb:f5:c7:24:85:d9:c3:10:
52:1a:bc:16:b6:8e:6c:12:b5:3b:8c:f6:40:5f:a0:9d:00:86:
aa:a7:bd:ae:4b:48:84:75:eb:86:36:c7:e7:e5:72:21:c1:81:
fa:ad:9c:62:84:78:a6:22:43:63:84:fd:27:2b:3c:3e:ac:32:
5b:65:f6:c1:19:1d:39:4f:34:ae:58:d1:35:ea:ff:12:93:bf:
60:4d:95:af:60:35:e8:e8:c6:4d:17:cc:cb:04:b9:06:25:45:
5c:20:b7:cd:a5:25:41:0b:6b:07:b6:01:8c:2c:72:f5:8a:96:
e8:ec:cb:43:95:64:62:48:87:35:a4:f4:f4:36:fb:92:da:f1:
13:b7:ba:d0:b5:97:98:fe:2d:07:0e:d6:08:62:b2:99:50:1b:
7a:97:89:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBPNqPDSlADd11C+fNmz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi
MjAwNjMwHhcNMjYwMzI2MTIwMTAwWhcNMjYwMzI3MTIwMTAwWjAzMTEwLwYDVQQD
EyhiNGNhZTExOGVkZjFkZWY5MTQwMjhjOWE3NjBkZjhlZDFlYWM4MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMxh9JyiYcUSEs/3h9WVOwegQaUD
SciPZ0w4g2cFVTcUQlo/Fjtxbq+GQE1lE1/nfb2oHcuaF3U5qDrEO8FaKqWWJTx/
4Pps+wZQXtKD4TL1T8D651h9cR574wm/TKOVrpuZKS0QQCM877PHXUkq8oTz39Qs
OUf558tmlVxLQV/YazJ7lwn6vN4jGI6YYlH3EwDvgPUjEbgIWF0VrhLee9Dtyp19
yDHjrGo//EedNiogtCdv1jTYqMhw3RJYlXuSZEwZSqoZXgmOdEvzgXw7aZA4c8ql
K891pXf4Eccn9TNWuTQkkq3XtnDqOyq3pkJuNEq0F+YTk5bglyIHNDjduQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTK4Rjt8d75FAKMmnYN+O0erIJEMB8GA1UdIwQY
MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt
ZjkwYWU5OTY2NDI4LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4
LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIwSn2Er
Q/Y7DxhBXc+9uJOdyqAu67LoprD1c0U8NUfmjdHi3egc9I8HU14GJuctZRhaKfFR
nSnRSKhbjPDdG3Z2yX4c3sYHRYeg7iPQizdsa5VFuqI1scynRvZKz3ymkZP3+fv1
xySF2cMQUhq8FraObBK1O4z2QF+gnQCGqqe9rktIhHXrhjbH5+VyIcGB+q2cYoR4
piJDY4T9Jys8PqwyW2X2wRkdOU80rljRNer/EpO/YE2Vr2A16OjGTRfMywS5BiVF
XCC3zaUlQQtrB7YBjCxy9YqW6OzLQ5VkYkiHNaT09Db7ktrxE7e60LWXmP4tBw7W
CGKymVAbepeJPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:11 2026 by rpki-client