Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: z0Cff4nEG54X+myEFzd5D6w4GOP7eMPdOu9m3h2nBiE=
Subject key identifier: CD:CB:82:FE:24:8A:F8:55:92:A1:BF:93:85:B3:7D:77:D9:5F:1A:1B
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019D2583A1629EBD8824C669902898748855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 0B13
Signing time: Wed 25 Mar 2026 15:01:16 +0000
Manifest this update: Wed 25 Mar 2026 15:01:16 +0000
Manifest next update: Thu 26 Mar 2026 15:01:16 +0000
Files and hashes: 1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: repWRlWXefqkvsneJk2GutQdlPharzkyZvuUGrE8Sp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a1:62:9e:bd:88:24:c6:69:90:28:98:74:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Mar 25 15:01:16 2026 GMT
Not After : Mar 26 15:01:16 2026 GMT
Subject: CN=cdcb82fe248af85592a1bf9385b37d77d95f1a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:b2:79:bc:41:06:b5:96:e2:8d:ac:39:98:
36:1b:b8:a4:16:71:03:19:e3:cd:d8:e7:26:3a:a6:
d5:34:59:ac:fd:ce:c0:6c:f4:42:d7:1c:2f:b9:f4:
1d:59:3d:ac:5a:37:f9:8a:15:ff:08:58:6a:a3:27:
c5:84:25:3b:12:a7:cc:06:7e:66:2f:bd:97:09:9b:
c5:b3:f2:1d:87:95:ae:a4:72:ba:c4:7b:2a:3c:7e:
35:55:2a:c4:de:bb:33:76:11:72:21:a3:a3:e0:1e:
5c:fb:cb:67:fd:2b:ae:d3:9a:32:2a:b1:8a:55:35:
8e:4c:ec:67:5b:e6:16:d9:07:8f:a4:6a:a4:78:29:
35:3c:c5:c9:04:51:21:bb:2b:f0:f0:13:4e:44:1f:
1c:94:6e:ce:85:eb:6e:f6:ef:51:8b:88:ce:55:76:
77:4c:29:a5:a4:7e:ce:d9:d4:9a:a3:c8:20:c0:4e:
d0:31:a3:ef:4a:4e:dd:ff:1e:0c:3c:8e:40:a1:d2:
26:59:e7:30:4f:2d:8a:cf:7a:76:6a:90:58:f0:ee:
16:06:9f:eb:a0:2b:ef:14:34:f7:ca:ac:5f:b8:7a:
d6:d4:50:cd:56:d2:03:14:7b:ff:9c:8f:bf:fc:60:
be:3e:a0:68:15:95:cb:b5:36:6e:35:dd:31:c3:96:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:82:FE:24:8A:F8:55:92:A1:BF:93:85:B3:7D:77:D9:5F:1A:1B
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:55:05:51:9c:9b:80:d5:cc:3a:95:48:cf:c2:80:b6:dc:
f6:fd:3f:e4:50:ad:b0:b9:47:e7:83:db:12:10:57:9c:f0:89:
59:45:c7:a1:79:0c:15:20:65:b2:7a:d7:b0:8c:33:9b:b7:92:
7c:d5:04:da:c7:8d:30:05:41:bd:16:7e:0e:b0:0e:dd:f3:47:
f7:3a:38:d2:7a:c6:bd:51:d3:67:1a:1f:ef:e2:62:5b:f6:4b:
15:b3:6d:c0:ae:e5:5c:02:5f:20:98:e8:4b:20:b3:e7:3f:39:
8d:37:18:ad:f9:24:fd:03:8f:75:f8:53:9c:05:2d:fc:07:7e:
a1:98:f1:a1:f6:6e:0a:cb:bc:04:c3:0d:54:b6:e6:86:e5:94:
8d:11:2d:3c:6d:b9:ed:68:8d:25:8a:64:c9:27:60:55:e4:4a:
01:2a:db:fb:f4:19:6e:2c:9d:ab:c8:57:ce:c4:f3:e1:29:95:
3b:cf:91:90:57:d3:26:9e:12:1d:8e:70:82:4e:a0:8d:49:8e:
4f:e9:19:8a:23:a4:ca:2f:e0:f5:96:a8:8e:aa:77:e1:1b:10:
c8:13:5c:52:e1:54:41:4f:d3:a5:9d:d9:98:ba:3e:08:fa:0c:
6e:42:ce:97:57:b7:c0:01:f6:38:ec:f8:df:d9:1d:35:8d:52:
c8:3c:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client