Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: XUuBedVadwyXIxzQNZJPJhW+SJQrpgPeJPp72q1TUF4=
Subject key identifier: 12:8D:D5:C7:8D:38:78:FD:5D:75:AE:F9:5E:4B:03:3A:E1:B4:C2:14
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019F93C997E88CF9E1DFD4D1112E8B661619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 17D8
Signing time: Fri 24 Jul 2026 11:01:30 +0000
Manifest this update: Fri 24 Jul 2026 11:01:30 +0000
Manifest next update: Sat 25 Jul 2026 11:01:30 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: v9j+Y5cIWefwT45lCj/QPMIDkIhP8rtPRDqX4tj1Zsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:97:e8:8c:f9:e1:df:d4:d1:11:2e:8b:66:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jul 24 11:01:30 2026 GMT
Not After : Jul 25 11:01:30 2026 GMT
Subject: CN=128dd5c78d3878fd5d75aef95e4b033ae1b4c214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:42:2d:f8:b9:a9:c2:03:b9:de:f7:68:12:
39:35:ca:b9:55:2d:70:00:8d:f2:e3:44:b3:e4:35:
63:59:be:1c:2a:90:3d:6b:bc:df:52:f4:e8:8d:ac:
07:8f:ce:16:bb:e4:0b:84:59:57:8d:d6:fd:81:b1:
8b:8e:94:59:c3:31:65:fe:a7:5e:f3:ca:be:39:60:
99:29:28:0a:9c:52:ab:ac:8e:5e:29:e3:76:d0:5b:
58:6e:0e:7e:c5:73:4a:79:e9:6b:45:1d:77:15:9b:
45:dc:7e:a0:88:b6:a6:a6:75:12:8b:0a:c2:c1:0f:
36:6d:73:e2:69:59:ba:5a:9b:74:93:8e:46:9c:9b:
32:a1:09:85:93:56:6a:27:86:a1:8c:c1:f3:dc:95:
f4:f1:54:20:f4:bb:ba:97:83:1d:56:1d:d2:27:2d:
ca:89:55:98:48:2f:5f:69:c0:7e:88:96:2f:fc:5c:
ce:e7:67:ce:df:11:dc:2a:34:28:c8:63:9a:b0:67:
3c:06:45:50:27:b0:28:39:e3:4e:d2:ad:05:86:e4:
f4:f7:81:25:a7:36:a3:8f:d9:49:43:fe:8c:4e:99:
11:ce:17:33:dd:d9:f5:81:68:e2:c0:69:b5:c9:06:
84:28:be:98:ba:28:39:c9:b7:e3:a3:ce:c9:2b:f2:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:D5:C7:8D:38:78:FD:5D:75:AE:F9:5E:4B:03:3A:E1:B4:C2:14
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:95:d2:49:b9:c7:58:2c:ee:3c:13:b9:e3:fd:13:26:26:
ca:97:43:16:89:5c:fa:3a:bf:ac:d0:23:d8:48:a6:4c:00:95:
0f:91:54:d7:90:df:d7:08:f4:77:b3:a3:68:6d:82:4e:2d:1d:
21:6d:2e:18:eb:17:4f:35:8f:6d:50:74:28:bf:96:48:4f:e3:
b9:03:d3:93:ab:db:68:41:f0:74:e5:78:ba:4d:b8:8b:76:c0:
22:71:72:d0:96:7b:ff:e7:83:3c:b6:aa:91:d5:ba:04:9e:d3:
3e:b1:bd:8c:2f:ed:82:d2:5a:7b:f5:5e:8b:86:b6:8f:6d:c6:
a8:45:f6:35:44:f2:fa:87:7e:08:ad:9d:40:69:56:af:af:46:
ac:a8:2f:df:da:55:7f:87:0b:9a:e4:e1:cb:45:c5:bf:3c:28:
12:43:dd:73:28:52:40:45:e6:43:47:bf:d3:c4:56:f7:1c:99:
dd:95:24:90:01:75:54:6a:83:cf:36:7e:02:61:eb:76:a3:75:
61:80:0b:b1:99:8e:8d:1f:be:fb:43:53:54:e1:fe:0d:ba:e0:
2b:46:73:ff:ed:23:6a:21:20:63:e5:a5:c1:bd:ae:8d:4c:1e:
31:a4:d4:49:2a:8a:9a:22:ae:5a:22:48:d9:b7:77:69:f6:47:
a0:47:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:05 2026 by rpki-client