Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: ukXHeZCf+sALPf1Y+iy1CE3ulro4S4WJHQyInxI3+L0=
Subject key identifier: 8C:59:D7:98:68:7B:DC:4F:48:F1:02:29:96:E1:2C:E5:1C:57:3B:8E
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019D273B1ECEDD31E41FFAFC416A9FD3CE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 046C
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: XT01SfxvBKJta1DRG0+MAteDQ9YnbvFrl4jPCmZwdaI=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1e:ce:dd:31:e4:1f:fa:fc:41:6a:9f:d3:ce:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=8c59d798687bdc4f48f1022996e12ce51c573b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:f7:cc:61:20:7d:6d:84:87:97:26:23:bb:
0b:30:db:4a:ec:46:bc:7c:e6:3a:89:fe:c2:0b:f2:
8c:05:8a:d1:4f:da:14:19:06:22:4d:8b:ef:03:69:
48:1a:e9:b6:56:13:65:c5:f6:92:6a:0a:aa:ce:e1:
44:09:e5:98:2f:04:1c:e9:e9:65:14:03:98:2f:0e:
54:e2:35:49:4b:88:35:96:56:ba:a5:30:95:6b:b7:
a9:7f:3f:12:f4:82:81:05:c9:31:35:81:fb:37:58:
de:7e:0b:44:33:49:0a:ea:fd:ae:25:90:21:16:ad:
4b:b9:17:e6:b5:1e:04:c0:58:de:52:91:c6:60:fd:
30:08:95:d6:a9:af:45:73:2a:da:e6:37:50:e0:01:
dd:74:dd:4d:43:d4:79:32:21:5d:36:35:49:d6:6b:
14:4f:ac:5e:a8:f3:46:fb:ca:87:3a:74:e3:7e:ec:
40:e7:d4:3f:a6:25:82:82:af:37:35:75:2d:af:b9:
dc:b3:97:28:68:6a:b5:9e:1e:c8:9b:4c:8d:76:4c:
1e:87:1b:c1:93:f6:fc:80:94:82:8e:c5:1f:f1:82:
83:63:b8:5e:41:f6:5a:1c:6b:85:a5:b8:b4:33:a5:
95:41:8b:7f:c0:f6:7a:7e:df:83:f0:ec:35:fc:ad:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:D7:98:68:7B:DC:4F:48:F1:02:29:96:E1:2C:E5:1C:57:3B:8E
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:ea:93:e5:ad:a2:0c:e2:9f:3d:c8:2b:a1:c9:32:88:1c:
33:7d:69:06:59:7f:53:c6:61:86:c1:8a:d8:20:ae:7e:23:1f:
cf:4e:a7:22:47:99:ed:86:6f:b5:cd:84:c5:7d:d1:b1:1e:1c:
36:15:2f:9d:2c:92:9a:43:5e:b1:2b:73:ad:c4:2c:36:88:c9:
54:7a:69:26:2e:36:b4:77:b2:fa:ed:ff:39:bc:0e:f5:e9:04:
bb:56:da:a8:50:00:91:b9:c3:e5:8d:65:0f:64:ff:6b:9c:8e:
7e:ed:67:42:3a:a4:17:95:48:77:1d:d9:41:24:02:68:66:95:
35:5c:78:f5:c1:37:e6:99:6a:49:29:cb:09:d0:1b:9b:70:15:
79:49:8a:e5:d1:17:4d:44:fa:bf:e8:5e:53:8f:62:ca:fd:28:
23:a3:fc:9b:a6:92:76:71:51:a3:90:45:1d:89:9c:1f:a3:70:
2e:ae:e5:51:4d:46:d6:3c:91:62:94:bb:5b:80:bf:4c:94:53:
55:1d:63:13:64:f3:27:a1:83:75:f0:53:4b:fd:09:31:3c:5b:
3b:c4:70:cb:d6:65:1a:1c:f8:f4:03:4e:4a:d4:0d:fc:45:15:
12:94:c2:32:d1:59:3f:74:ed:05:9d:1f:05:83:15:38:2c:4c:
7e:d2:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:10 2026 by rpki-client