Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: NCzCzd1dyEvsoLjo+SQQ3ihQ3RRY6eOzl9waYoJBB1c=
Subject key identifier: 89:B3:61:A4:64:C4:E0:B3:99:94:51:B4:FC:D3:87:57:0D:D6:E4:92
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019D2703B5C826E09D94226565A1B927B496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 0271
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: iriM2jafKFdjA5GXQA5RkFMPRiGxVNT22MwXvYbGwtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b5:c8:26:e0:9d:94:22:65:65:a1:b9:27:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=89b361a464c4e0b3999451b4fcd387570dd6e492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:c9:59:61:56:f8:68:dd:d4:7c:6a:d2:07:
c5:0a:d8:58:29:6f:c4:42:b2:34:d6:c6:c4:21:46:
26:5c:13:ca:1e:95:64:6d:b3:42:65:a6:cc:bc:b5:
fa:72:47:94:15:fb:0e:a1:3a:27:91:06:68:d1:d4:
ac:ad:72:73:7e:af:35:b4:7c:e9:cb:8a:b0:98:b6:
3d:e4:96:55:82:ad:1c:22:c3:76:b0:66:99:f0:e0:
95:3e:2e:f2:1a:70:be:1f:9c:f3:c1:46:41:2f:ef:
42:2e:32:4f:ba:f1:ae:57:76:bd:a9:22:48:cc:94:
ef:46:7c:a7:42:ec:c2:b9:99:86:9c:d2:db:2c:90:
2b:ea:0e:bd:39:4f:85:6c:2a:53:38:70:4c:bc:b5:
25:a7:2d:bd:1e:95:a3:00:1a:3e:17:f3:4e:f4:b5:
76:de:3d:38:8f:68:40:e1:27:5a:d4:8e:0e:7d:5b:
08:70:ff:53:e4:51:c4:51:7a:34:1b:d4:19:02:a7:
f1:22:d6:ee:6a:a4:6b:07:44:2d:1e:b8:1a:e0:54:
d9:19:bc:3d:6b:57:5e:e9:31:4f:19:14:88:65:69:
59:aa:bc:ed:5d:59:15:b0:c1:26:e2:b7:26:c0:4f:
a1:42:97:20:1a:d0:b5:e1:e4:aa:9c:87:80:10:2d:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:61:A4:64:C4:E0:B3:99:94:51:B4:FC:D3:87:57:0D:D6:E4:92
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:c7:0d:6b:be:99:32:96:b1:78:91:d4:6b:4e:1f:55:77:
2a:16:84:ac:ad:0f:c7:b9:be:aa:7e:31:7b:fb:c1:02:82:59:
e0:de:a6:10:42:1e:15:69:32:94:32:f5:81:22:41:36:89:ad:
74:8a:b7:3e:4a:cd:62:d4:91:8d:3d:3d:dc:5c:ac:5e:c8:cd:
97:77:b6:76:00:0f:48:21:a7:ab:a4:a8:fc:f3:53:28:f4:63:
7a:ed:b5:e2:1c:95:b6:76:7c:72:d2:7b:41:29:96:e3:6c:da:
1b:b1:c1:12:f0:0d:77:38:ca:2d:e7:39:ce:b1:67:7c:d7:50:
41:0f:82:28:2e:a9:22:dc:ae:bb:d9:a5:3f:72:cb:06:94:8c:
41:11:08:e4:1f:14:4d:f1:e7:78:b8:d3:39:61:f2:97:78:94:
0d:bd:8f:cb:7e:26:96:b1:00:e7:2d:a8:7f:3a:4d:2d:be:90:
b4:59:03:72:c5:ca:3d:65:d4:60:ea:21:08:72:13:07:c2:62:
88:89:74:7b:80:c1:46:ee:f5:34:4e:5b:d5:02:80:16:2e:39:
ae:3c:be:7e:8f:29:dd:a0:48:c5:5a:2b:cf:bf:70:14:e3:56:
ae:fb:12:22:f9:9f:df:16:be:9b:db:46:ea:fa:fb:82:8a:2b:
73:00:f8:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7XIJuCdlCJlZaG5J7SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz
ODYzNGYwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg4OWIzNjFhNDY0YzRlMGIzOTk5NDUxYjRmY2QzODc1NzBkZDZlNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE3JWWFW+Gjd1Hxq0gfFCthYKW/E
QrI01sbEIUYmXBPKHpVkbbNCZabMvLX6ckeUFfsOoTonkQZo0dSsrXJzfq81tHzp
y4qwmLY95JZVgq0cIsN2sGaZ8OCVPi7yGnC+H5zzwUZBL+9CLjJPuvGuV3a9qSJI
zJTvRnynQuzCuZmGnNLbLJAr6g69OU+FbCpTOHBMvLUlpy29HpWjABo+F/NO9LV2
3j04j2hA4Sda1I4OfVsIcP9T5FHEUXo0G9QZAqfxItbuaqRrB0QtHrga4FTZGbw9
a1de6TFPGRSIZWlZqrztXVkVsMEm4rcmwE+hQpcgGtC14eSqnIeAEC1tcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImzYaRkxOCzmZRRtPzTh1cN1uSSMB8GA1UdIwQY
MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt
OWNlZjkxN2I4ZTM3LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3
LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd3HDWu+
mTKWsXiR1GtOH1V3KhaErK0Px7m+qn4xe/vBAoJZ4N6mEEIeFWkylDL1gSJBNomt
dIq3PkrNYtSRjT093FysXsjNl3e2dgAPSCGnq6So/PNTKPRjeu214hyVtnZ8ctJ7
QSmW42zaG7HBEvANdzjKLec5zrFnfNdQQQ+CKC6pItyuu9mlP3LLBpSMQREI5B8U
TfHneLjTOWHyl3iUDb2Py34mlrEA5y2ofzpNLb6QtFkDcsXKPWXUYOohCHITB8Ji
iIl0e4DBRu71NE5b1QKAFi45rjy+fo8p3aBIxVorz79wFONWrvsSIvmf3xa+m9tG
6vr7goorcwD47g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:17 2026 by rpki-client