Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: lg10YsG5YQVB0OEhbs/qOFhRYNquedz9x7eOLi9XLCs=
Subject key identifier: 7B:70:AC:71:EB:7B:69:9B:D1:B9:AC:6D:23:3A:47:B4:BF:75:58:22
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019D3307FE5D5DFD3E571A9DA82C55E10264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0D88
Signing time: Sat 28 Mar 2026 06:00:55 +0000
Manifest this update: Sat 28 Mar 2026 06:00:55 +0000
Manifest next update: Sun 29 Mar 2026 06:00:55 +0000
Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: kdfWdO2K7tnTNqEcKRjlnhSLKpGoow9uoQi2k6zCJfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:fe:5d:5d:fd:3e:57:1a:9d:a8:2c:55:e1:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Mar 28 06:00:55 2026 GMT
Not After : Mar 29 06:00:55 2026 GMT
Subject: CN=7b70ac71eb7b699bd1b9ac6d233a47b4bf755822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:c6:fc:bb:97:22:45:fa:14:78:5d:d4:d7:
82:7b:0e:42:e3:1f:89:dc:02:59:6a:a2:fe:25:83:
57:cf:d7:48:45:f7:0b:97:52:a5:57:ba:d1:77:b3:
d6:90:b1:ec:ef:44:82:a7:f1:89:1a:2f:1d:e6:bb:
7b:57:d0:a5:1d:4a:49:4b:15:df:44:65:92:40:0e:
c5:e9:6c:e2:7f:cb:30:8b:19:a4:33:52:12:8f:61:
e4:72:1d:f4:2f:cb:c6:01:76:03:6f:86:4d:ee:12:
08:04:45:42:ef:eb:3c:46:15:10:6b:99:6f:e9:99:
5b:23:31:11:ac:9b:78:86:f5:39:03:9a:4e:30:6c:
6d:00:a1:5a:01:d6:a6:ca:36:c7:8c:82:73:35:c4:
64:69:e8:01:74:90:43:f5:ce:10:46:c5:de:61:46:
07:1a:35:32:b3:96:47:4f:e8:6c:28:bd:5a:6a:3e:
53:27:a9:72:c7:87:5a:31:c6:14:cf:67:ff:41:2b:
26:57:b3:1a:e1:f6:50:be:d7:e4:5c:26:b1:ec:c9:
22:38:4b:9f:5c:65:6f:1a:f7:76:ee:98:fe:a2:67:
ee:9c:c4:14:ab:1c:90:c7:43:8e:07:5b:17:4a:3b:
61:db:c5:20:47:6e:06:a7:46:ab:82:87:81:35:61:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:AC:71:EB:7B:69:9B:D1:B9:AC:6D:23:3A:47:B4:BF:75:58:22
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:69:03:88:df:e4:d2:da:df:09:46:c8:b4:d0:39:9f:6e:04:
31:84:60:82:7d:ed:1a:f8:51:40:23:36:64:4c:80:17:fb:ca:
fe:a2:e2:54:b0:ea:3f:56:37:26:54:85:b5:49:a4:73:92:4d:
fa:b5:f6:a6:e1:ba:4b:f1:7c:0d:38:7a:49:46:66:43:40:16:
7d:3b:81:f8:35:ab:79:0d:69:36:49:b6:91:35:74:69:36:78:
ae:1a:37:2a:b1:ee:20:bb:9c:3f:ca:ed:c2:9e:ea:88:96:d5:
7e:eb:4f:b7:ea:24:45:3e:32:d3:73:45:44:9c:3f:4b:05:cc:
2d:30:7b:f5:be:b2:fb:af:21:cc:25:03:02:fe:c5:54:94:d6:
2e:bd:6a:af:79:89:ef:8e:09:22:b0:47:7c:73:5c:b2:b5:41:
12:d8:fc:ec:0e:bd:61:8f:ac:33:d3:e4:6c:c0:3b:d5:bc:39:
90:2d:85:0e:7b:6a:17:b6:f0:94:8a:75:22:d4:a6:5b:ef:8b:
dd:4f:26:af:06:e4:e4:f2:1c:4a:95:dd:51:3b:c6:44:1b:8a:
c7:05:92:94:d4:1d:d5:1b:94:10:9a:20:03:98:72:fb:de:24:
e9:f5:8c:bb:40:bd:bb:1b:f1:fb:fd:58:76:2b:d6:d6:b3:c5:
c6:16:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:48:52 2026 by rpki-client