Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: 0SslsGVSu7uyGi7Fp2Dwvt9+A/Urp/V8L1JUz32nRVA=
Subject key identifier: F0:B2:C7:EE:BC:47:96:0F:93:0E:E5:07:ED:77:E3:E2:FE:6C:34:C6
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019D2704D7170BFCA9821D57DE80C20E3CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: mKbSVbVZ0uwwMYl1z0iTU2AiTr/eZolFUOGdiTRGTq0=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d7:17:0b:fc:a9:82:1d:57:de:80:c2:0e:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=f0b2c7eebc47960f930ee507ed77e3e2fe6c34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:7c:5c:ab:2e:c7:23:76:69:df:73:77:b1:
da:33:27:a8:5b:b2:99:1c:07:35:95:a7:d8:21:3a:
ad:23:fe:f0:74:06:02:4f:5a:d6:74:c9:7f:66:07:
15:33:10:1b:7b:36:d8:d7:25:e9:a5:56:a5:19:c9:
4f:f0:d3:d7:3e:c4:be:cf:02:7a:75:3c:4f:00:6c:
19:ab:e9:73:12:ec:68:65:bc:ae:bb:6c:51:26:1e:
75:a7:f2:92:e4:df:ce:da:6e:e6:c6:f6:4d:2b:6a:
f1:a8:5b:ab:bb:32:72:e6:2d:b9:ac:1a:f9:44:48:
10:0f:ee:8f:84:c1:aa:da:9b:b3:45:e7:28:73:6c:
da:3b:bd:24:a0:9f:6a:c0:fa:07:f4:8d:76:54:9b:
0a:47:d7:41:90:0c:15:93:b5:a9:9e:ec:68:a6:bd:
1e:53:59:03:9a:86:e3:b7:32:dc:ad:b4:f7:97:ee:
e5:b3:ee:03:4b:1d:0c:74:42:4e:63:68:fd:e2:52:
25:fe:19:85:31:67:9a:10:da:2d:b1:b4:69:f1:d4:
f9:d3:e2:63:c4:ca:38:a6:45:5e:36:19:89:5b:46:
d8:e3:e6:f2:0b:41:14:93:3d:90:20:dc:d4:af:60:
62:8f:c5:2b:80:a8:cb:e1:0e:89:57:ab:00:fc:8d:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:C7:EE:BC:47:96:0F:93:0E:E5:07:ED:77:E3:E2:FE:6C:34:C6
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d4:d0:87:de:ef:8f:d5:5e:09:19:f3:d7:b9:14:04:2f:11:
4c:70:7f:52:40:81:dd:3f:3a:2b:a3:07:a8:da:55:94:be:88:
10:8f:1d:de:52:bd:9d:db:dd:1e:98:49:db:95:69:3a:92:b3:
e0:16:9d:30:ca:f8:6e:cc:e9:dc:ac:16:2a:14:68:a3:68:c0:
e6:b4:ac:21:d2:9f:77:1b:eb:e7:78:27:05:68:c2:dc:6a:36:
19:54:2e:bf:6b:bc:ef:13:97:02:72:d4:ef:b9:a1:83:8a:60:
d7:50:f6:10:7b:00:4e:35:0b:07:63:d2:c6:16:b1:5c:2f:b5:
61:1d:35:f1:89:be:62:09:f2:94:85:3b:41:b3:a0:74:ee:ab:
b5:96:87:c3:ef:44:e5:16:31:f3:69:0c:06:2a:2c:c1:ab:00:
b5:27:6d:59:7e:8c:67:7b:2b:84:c2:de:f6:de:7b:67:a9:f4:
15:58:97:0a:3f:14:e8:90:64:e8:a9:e4:9b:34:1e:95:30:64:
b2:a8:4a:af:f5:de:24:4a:98:73:21:22:e3:c9:62:bb:22:b7:
f0:f6:34:f0:df:7a:57:17:5f:e3:14:c4:01:70:2b:ad:ff:a8:
28:ad:60:e2:13:1a:ff:d7:eb:0d:4c:c6:23:8d:1b:04:1f:ed:
4e:b2:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:27 2026 by rpki-client