Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: 34Si4TUNHxrCd1EaBZFP0lgnHJGh+QfE2vsPWxwViH8=
Subject key identifier: 74:D9:25:DA:9B:46:A8:0F:B5:5B:7B:65:62:42:2C:DA:0F:B6:3D:31
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 01A0D83C2F01762F52A16B9550BCA1696E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1880
Signing time: Fri 25 Sep 2026 11:03:37 +0000
Manifest this update: Fri 25 Sep 2026 11:03:37 +0000
Manifest next update: Sat 26 Sep 2026 11:03:37 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: kkiDdnQV3ak8+iZ8Z3Dlx2+t1upvoNi7yWIjpjR1vtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:2f:01:76:2f:52:a1:6b:95:50:bc:a1:69:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Sep 25 11:03:37 2026 GMT
Not After : Sep 26 11:03:37 2026 GMT
Subject: CN=74d925da9b46a80fb55b7b6562422cda0fb63d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f9:3f:cd:a8:1f:9b:18:ce:59:f4:fc:40:2b:
16:1d:7f:9d:59:b6:98:26:69:ca:53:f8:5a:e9:04:
04:cb:03:5a:16:37:14:f8:d1:c2:6a:ea:95:1c:8a:
be:1f:98:5a:1e:29:64:68:64:cd:3f:82:34:18:5b:
6b:49:12:a6:07:fa:ac:70:9e:4e:5f:b2:fb:39:f2:
01:cb:b8:ca:66:0e:cc:23:41:6a:38:5a:00:ec:15:
d5:68:f1:6c:45:aa:55:f9:10:a0:67:1e:a6:4a:7c:
cf:6a:b5:5e:40:f5:ad:24:1b:7e:29:b0:ed:1d:e0:
e0:1c:68:5a:2b:8d:4d:25:00:29:8d:90:c4:1b:13:
21:6a:d8:a9:e7:fe:50:dc:75:aa:98:3d:03:ad:47:
3c:eb:32:85:b2:f7:8b:b3:61:22:a4:bb:4a:fc:05:
ca:c4:0c:c9:b1:f3:20:f0:c2:06:8a:df:08:d4:62:
17:bf:3e:f7:5c:ed:7d:6a:46:ee:29:d2:5b:8e:6d:
73:91:56:73:d6:b9:20:3f:98:e8:7b:5b:f5:ef:b1:
04:ea:6d:4c:16:13:a5:e4:b9:55:1a:33:5c:8b:a7:
ff:ed:72:9d:2c:2c:ab:71:bf:c9:8d:54:ea:db:4b:
03:cd:67:aa:cf:b0:50:a1:1e:7d:f1:51:8c:78:e4:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:25:DA:9B:46:A8:0F:B5:5B:7B:65:62:42:2C:DA:0F:B6:3D:31
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a4:e2:a9:0c:55:6f:9c:6c:68:46:28:af:d1:67:4b:62:b6:
39:87:8c:30:18:69:ef:75:4e:9e:b8:1c:25:10:f1:63:73:3a:
be:53:b7:8d:8c:43:6d:24:25:d2:fe:23:29:bc:bc:73:93:ec:
ef:aa:78:8b:68:b1:a6:3a:06:5d:d5:20:75:96:2c:d8:01:a7:
34:b1:7e:79:90:32:22:50:03:e7:18:e4:49:dd:eb:9c:f3:d8:
27:1b:40:ef:72:df:22:95:ff:cd:40:c4:bd:1a:1c:3d:dc:d9:
ef:fe:89:20:39:94:99:e2:e7:86:ae:2b:f6:a4:ce:e1:52:7a:
a4:59:70:08:51:64:f1:49:6e:05:5c:e9:07:d0:90:be:ea:c2:
ad:6c:77:c0:27:a5:46:b8:d1:db:fa:c7:65:18:dc:de:35:34:
d8:06:c3:61:a3:bf:42:a1:d1:70:82:d4:9d:7c:f7:58:34:a9:
80:9b:3d:99:af:fd:3e:46:72:3a:8e:ed:d7:16:b8:e4:46:b2:
eb:aa:ba:c0:34:6c:35:d0:5d:19:29:7b:e3:43:9b:f3:ea:d2:
4e:f3:c8:0d:d9:e8:8a:a4:69:77:88:1f:02:fc:ee:a2:65:7c:
71:52:6e:f5:9f:6e:bf:35:9c:82:8a:e7:f9:d8:0f:7e:22:20:
1e:cc:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:05 2026 by rpki-client