Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: h8vcJtYQoMLxa+GqmAgebaVmkDxmKw77b9kXnozwYVc=
Subject key identifier: C2:43:75:6E:1F:77:AC:A9:0C:BF:38:3F:CF:59:F7:E0:D1:88:B0:4D
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019D27DF814CFD10939BF1280AAFFDC071F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1697
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: O/CYmjILgq+PBYAk1e3VFMIGmoF2aTGEKnjVedKY/m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:81:4c:fd:10:93:9b:f1:28:0a:af:fd:c0:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=c243756e1f77aca90cbf383fcf59f7e0d188b04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:68:07:48:b2:f0:b6:b7:85:8d:50:32:26:
1b:73:f7:c1:d2:69:05:93:4a:9c:f4:97:ce:78:8a:
5c:76:43:8c:14:1a:41:0d:34:ba:33:43:fc:c2:8c:
96:c9:1b:10:19:0b:8f:7a:00:b3:c6:b9:fc:3f:7b:
35:c5:78:80:3c:94:c1:1e:33:7c:7c:f0:47:a4:a2:
a4:b3:c4:98:cd:a3:a0:9b:ac:1f:28:8e:c9:bc:a6:
d0:78:e7:72:10:55:22:17:ad:92:10:38:11:d6:56:
ce:af:1e:38:0c:30:09:3d:be:d8:79:0e:d4:38:88:
cb:64:9a:18:7c:b7:ad:5a:7e:6b:47:f6:d8:34:f5:
a7:60:6c:a1:ff:be:54:de:49:b3:8f:8e:2e:ec:a2:
5d:8a:3d:7e:bc:d1:e9:ec:6d:76:52:06:12:ff:20:
7d:11:f8:d7:c6:70:a3:3f:47:68:8a:bb:d6:7e:05:
07:c0:86:29:4d:a9:64:d7:27:e4:41:70:71:29:d7:
a4:7c:d2:e0:a8:bc:f0:68:4d:ff:8c:12:ae:0a:2d:
d7:52:c3:d7:4f:32:96:94:7b:a4:38:eb:19:21:f1:
53:93:c9:80:d6:1f:06:5f:0b:33:5f:d8:63:e2:f7:
26:90:08:0a:17:9c:87:18:82:86:66:43:95:87:3e:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:75:6E:1F:77:AC:A9:0C:BF:38:3F:CF:59:F7:E0:D1:88:B0:4D
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:78:05:44:b1:ec:18:90:87:bb:a6:a8:6f:8f:ac:a3:04:
cb:15:5d:5c:1c:54:c7:ea:4d:00:8c:6e:b5:26:fa:d5:d1:77:
8d:cb:fe:11:70:99:43:f9:9b:b3:dc:a8:1b:58:10:d8:07:cb:
49:0b:30:51:bf:41:28:a5:21:91:85:56:5d:aa:3e:b8:05:11:
08:da:f8:bd:0d:d2:6f:40:b4:08:70:bd:1b:c3:ec:69:cb:c2:
5d:87:9f:7a:f1:d9:a8:02:b6:3e:fb:5d:e7:6a:3b:fa:d8:4d:
1a:86:42:3b:9b:a1:d8:90:47:a9:9e:50:23:52:f2:26:e6:c3:
fb:1e:fa:b8:f3:96:6f:a8:fc:d4:7a:20:7a:e4:08:d5:36:82:
bc:64:f4:22:bb:c1:ce:c0:c2:6f:73:5f:f1:a3:af:32:ea:2f:
83:36:99:f4:f7:a5:05:89:9e:cb:33:10:2c:9b:61:db:fd:e5:
21:99:eb:95:4c:b8:23:43:fd:c5:52:5a:5d:cc:39:69:e9:ab:
aa:23:8e:f7:6d:90:38:d6:83:85:5c:05:17:3b:1e:dd:f4:d4:
b7:f2:f9:11:aa:2f:da:d4:52:ac:28:d5:ae:c1:97:09:13:52:
27:ec:ce:f0:ea:21:f0:50:db:eb:c8:92:d1:00:a9:ea:40:fa:
43:73:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:52 2026 by rpki-client