Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: ahA3Hm/EqibMbDeGWuM2F5JGwOYaj/BFMOkuhsbr63I=
Subject key identifier: 94:8E:52:8D:99:CC:72:52:38:A0:F9:12:D1:01:98:4C:C1:5F:12:21
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 01A1DE030C817249F462377D7A1F4BF90FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 09D2
Signing time: Sun 15 Nov 2026 07:01:44 +0000
Manifest this update: Sun 15 Nov 2026 07:01:44 +0000
Manifest next update: Mon 16 Nov 2026 07:01:44 +0000
Files and hashes: 1: Ul6xnaloPJqarA71Lp8dEgaZCiY.roa (hash: TaAyvUHi9RSjwAuHu0afyte32UNxt8tXqYjbQRr7Gpg=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: fq36JisYJSsC4+wwPusyl3OH7sWB7ov/Le8wAsyv1EM=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:0c:81:72:49:f4:62:37:7d:7a:1f:4b:f9:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Nov 15 07:01:44 2026 GMT
Not After : Nov 16 07:01:44 2026 GMT
Subject: CN=948e528d99cc725238a0f912d101984cc15f1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:b3:1c:9c:80:77:29:62:b1:b2:e0:87:70:
ee:d1:5a:cb:bf:aa:14:7a:02:74:e1:02:62:ca:da:
b1:51:3b:30:15:90:7a:66:21:6d:b0:7b:61:40:55:
32:e1:c8:74:b0:fc:18:8e:98:7d:7a:2c:6d:3c:ab:
c4:b6:55:77:fa:81:ff:5c:72:ad:57:5e:72:73:8a:
6f:f4:42:90:69:b9:82:bb:75:72:37:5a:e1:30:28:
8f:f4:75:9e:60:82:14:3e:6f:2c:f8:d1:04:4d:ff:
b4:dd:67:7d:28:9f:a0:64:69:7e:9b:79:41:0e:f5:
f6:a8:94:9c:c6:f7:d8:0b:50:5b:a0:c4:e6:06:05:
22:40:38:29:93:6c:03:ba:41:57:69:b4:ee:82:00:
2f:61:c8:c2:5d:34:cd:a1:5c:f8:83:9f:8d:f5:2b:
f4:12:a0:4f:a2:5b:1c:fd:5d:34:27:f8:ec:0e:48:
c6:42:3c:03:30:6b:a4:e5:96:70:e6:c2:00:98:d0:
f7:f6:cb:32:2f:7a:b9:31:55:66:6f:e5:b2:b2:23:
91:81:66:cb:9f:c7:76:b6:e3:d1:46:fb:05:63:04:
58:af:24:1e:97:84:60:74:29:3f:b9:7f:8a:c3:bb:
05:8d:65:0e:b6:36:69:48:3a:00:f7:c6:44:de:92:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:52:8D:99:CC:72:52:38:A0:F9:12:D1:01:98:4C:C1:5F:12:21
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d4:c1:71:5e:3d:05:30:04:d1:87:2f:14:f2:1c:ec:64:8a:
d4:9b:84:53:94:20:42:7c:19:4c:3f:65:38:a8:47:c0:00:6e:
d0:9c:3f:5a:6a:55:6a:d6:54:26:7d:ef:45:8d:79:5c:a5:c9:
40:7d:94:26:09:0f:5a:87:84:a6:d6:ad:cb:5e:94:1a:b7:48:
db:48:fb:bc:1a:d9:04:f7:db:6f:98:df:64:68:b5:a9:58:d0:
a2:f3:e0:c8:7f:5e:cb:33:cc:c4:51:d3:7f:b9:48:af:10:f8:
25:88:f7:01:d4:fb:79:0f:a6:64:37:f2:d7:ca:03:b5:e1:c6:
b3:75:b9:7f:7d:6b:ea:e6:1e:66:4c:97:8d:3f:0e:c0:8c:ee:
c2:27:dd:ae:82:5a:23:7f:74:62:fe:6e:36:f6:15:b6:b8:0a:
df:c2:bf:04:aa:31:2c:57:e3:3d:ef:05:76:bc:13:a3:53:81:
42:93:a5:df:d3:31:c9:41:ff:de:5c:9c:0b:66:08:8a:12:a7:
e2:c9:22:95:fd:75:f1:6e:b7:8f:90:ef:05:9f:42:5f:73:8a:
aa:05:f3:84:30:5b:9d:81:4a:d0:64:61:c7:0e:d7:68:53:f0:
86:9c:f5:4c:da:8d:a1:7b:e8:4f:f3:df:71:4a:a2:62:00:9f:
e7:4e:48:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAwyBckn0Yjd9eh9L+Q/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjYxMTE1MDcwMTQ0WhcNMjYxMTE2MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg5NDhlNTI4ZDk5Y2M3MjUyMzhhMGY5MTJkMTAxOTg0Y2MxNWYxMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNizHJyAdylisbLgh3Du0VrLv6oU
egJ04QJiytqxUTswFZB6ZiFtsHthQFUy4ch0sPwYjph9eixtPKvEtlV3+oH/XHKt
V15yc4pv9EKQabmCu3VyN1rhMCiP9HWeYIIUPm8s+NEETf+03Wd9KJ+gZGl+m3lB
DvX2qJScxvfYC1BboMTmBgUiQDgpk2wDukFXabTuggAvYcjCXTTNoVz4g5+N9Sv0
EqBPolsc/V00J/jsDkjGQjwDMGuk5ZZw5sIAmND39ssyL3q5MVVmb+WysiORgWbL
n8d2tuPRRvsFYwRYryQel4RgdCk/uX+Kw7sFjWUOtjZpSDoA98ZE3pLh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSOUo2ZzHJSOKD5EtEBmEzBXxIhMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdTBcV49
BTAE0YcvFPIc7GSK1JuEU5QgQnwZTD9lOKhHwABu0Jw/WmpVatZUJn3vRY15XKXJ
QH2UJgkPWoeEptaty16UGrdI20j7vBrZBPfbb5jfZGi1qVjQovPgyH9eyzPMxFHT
f7lIrxD4JYj3AdT7eQ+mZDfy18oDteHGs3W5f31r6uYeZkyXjT8OwIzuwifdroJa
I390Yv5uNvYVtrgK38K/BKoxLFfjPe8FdrwTo1OBQpOl39MxyUH/3lycC2YIihKn
4skilf118W63j5DvBZ9CX3OKqgXzhDBbnYFK0GRhxw7XaFPwhpz1TNqNoXvoT/Pf
cUqiYgCf505I8g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:31 2026 by rpki-client