Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: LZGjnGGv/pL7OEnIKDNJe7+wWSC0zsDmEm5twCKx0bk=
Subject key identifier: A6:D3:DC:28:CD:BC:BB:15:7F:EA:7B:D9:A0:85:2E:49:98:D8:F7:B7
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019D329A8044FE1228B82CF47E9EE30BBCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 04:01:19 +0000
Manifest this update: Sat 28 Mar 2026 04:01:19 +0000
Manifest next update: Sun 29 Mar 2026 04:01:19 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: p+zGSaecpGUMYsXG+l/ZpgI5IQvo9F3b46U9zyvX208=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:80:44:fe:12:28:b8:2c:f4:7e:9e:e3:0b:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Mar 28 04:01:19 2026 GMT
Not After : Mar 29 04:01:19 2026 GMT
Subject: CN=a6d3dc28cdbcbb157fea7bd9a0852e4998d8f7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:1a:24:cd:bc:fd:ec:59:09:45:2a:64:43:
a1:3a:92:ab:fa:a6:68:4d:be:c1:7f:d6:fb:49:4c:
61:bf:78:4f:f2:67:d4:60:80:5c:aa:2f:64:fc:65:
e4:9c:da:55:eb:1c:3e:9f:4e:34:33:ae:e0:35:a6:
ef:4e:cb:01:9c:83:51:a6:c2:eb:91:a5:f8:f5:7e:
de:fe:6b:59:d6:f3:c5:36:3b:81:b2:3a:7f:ff:18:
d4:11:22:25:be:9f:39:85:a4:4f:2c:e2:ec:86:6a:
5e:e3:5f:3b:4b:09:cd:16:fb:02:29:ae:62:56:b9:
f2:cd:57:6a:83:1a:89:45:86:d2:13:dc:ee:a6:49:
ad:50:17:74:fe:35:a2:88:97:0b:25:4a:a2:f6:9c:
93:bf:06:65:53:8f:62:d5:02:ff:4f:2b:7b:ee:c0:
97:d9:f0:9b:82:c6:19:bb:ad:c7:f6:30:e6:20:e6:
45:fe:bd:47:cd:eb:8e:7d:2b:33:e9:f6:9a:c7:cb:
74:38:3a:3f:bd:64:4f:f6:8c:4b:c6:98:4f:d7:9d:
6f:28:97:46:10:76:d3:98:12:78:9e:07:4c:07:44:
ee:e3:1a:8d:7a:51:75:5e:2a:8c:9d:00:34:80:87:
97:9a:18:f7:6f:e2:4d:1e:bd:18:9d:4f:06:2d:2a:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:DC:28:CD:BC:BB:15:7F:EA:7B:D9:A0:85:2E:49:98:D8:F7:B7
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:63:2a:45:80:c0:ed:10:f8:7c:0d:56:e5:f6:2c:15:37:ff:
86:d7:8e:f2:83:08:85:a8:db:6a:ad:3e:61:0c:bf:86:f0:15:
e8:da:e3:0b:b0:31:59:af:dc:b0:0c:59:dc:7f:19:3e:03:63:
a6:9a:64:4c:30:e8:dc:dd:e4:3c:85:4e:42:89:42:0d:ae:1c:
63:15:48:32:5e:7c:6b:8d:30:b3:fd:b7:d6:37:fb:fa:21:45:
9c:75:33:4e:43:31:32:da:55:d9:35:ee:59:26:dd:24:b9:b8:
64:08:f3:a6:70:77:25:8a:e9:9d:97:b7:41:58:be:06:8f:60:
91:e5:86:fe:bf:95:b5:bc:c2:f7:cd:0f:6a:d2:b1:14:f7:f2:
b9:da:2b:95:51:c0:de:18:c7:f5:d5:ad:2f:fc:c2:3b:a1:8e:
27:7b:b5:0d:e5:68:74:c6:5e:95:eb:ff:3a:61:d9:b8:f9:1c:
77:a7:58:a5:22:ad:75:ef:17:79:a0:77:c4:fb:c0:fa:f2:8f:
9c:79:ca:0a:9d:88:3e:2a:8d:1f:15:e6:14:ac:c6:15:19:f2:
e1:37:72:f8:a5:f8:79:1c:fd:e7:5f:13:4e:7d:3c:6e:87:27:
65:7f:c3:ee:81:f0:75:46:b1:51:67:ea:de:ba:27:9a:0a:38:
dd:1e:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:24 2026 by rpki-client