Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: Z9uAMxJHiC6/Z76ApcJHpVHkUILAa4HStHuYvmYNr2I=
Subject key identifier: 45:25:24:01:40:71:89:36:D3:68:C0:7A:BA:CF:A2:B4:E2:BC:58:40
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019E1E6CB4CA569F769BF8A7F041BB2C4675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 04EC
Signing time: Tue 12 May 2026 23:01:41 +0000
Manifest this update: Tue 12 May 2026 23:01:41 +0000
Manifest next update: Wed 13 May 2026 23:01:41 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: PlUhQaOU5xLu8oyxur7BntT0QOzkzKYIO5uvPHxOiIU=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b4:ca:56:9f:76:9b:f8:a7:f0:41:bb:2c:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: May 12 23:01:41 2026 GMT
Not After : May 13 23:01:41 2026 GMT
Subject: CN=4525240140718936d368c07abacfa2b4e2bc5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:cb:c7:1b:fc:2e:48:3f:33:1e:81:44:2e:
c6:c6:80:6b:9c:7d:c9:84:4b:ec:7b:f3:ee:01:91:
02:f9:28:c8:5c:d6:9a:2d:d5:ea:16:7b:4f:a1:27:
e3:da:31:b4:1a:ca:79:c7:ad:13:e3:dc:91:dc:ad:
2b:ae:2a:a7:02:4e:37:53:4f:64:25:ec:f6:0c:43:
30:9e:9b:42:ee:a3:e7:d3:fa:72:62:ad:82:74:01:
8b:3c:e0:8e:1c:35:5b:8c:14:9e:ec:8a:d7:1f:b6:
91:9e:21:81:9b:2b:c7:37:3c:0f:b8:82:c0:21:88:
2c:63:58:5b:37:57:38:2a:c6:10:a0:82:fd:2d:d3:
b1:cb:aa:10:c2:ee:9f:c3:97:23:6e:0f:7d:2b:8d:
b1:6d:2c:7c:67:c6:19:4d:13:c6:1b:b5:75:e8:d7:
f2:18:0d:92:2d:6f:57:87:5a:fe:ef:c5:ae:2a:51:
8a:75:ff:e9:27:68:b2:19:ca:b0:91:92:ff:91:45:
39:d2:0a:e8:6e:82:dd:8d:c7:48:9a:a4:39:c5:c9:
b2:11:a0:90:36:c0:03:03:ee:ad:2b:1a:4a:69:c2:
ca:ea:a2:b6:aa:66:09:08:e6:85:24:94:52:60:8e:
3b:15:da:76:47:b9:ec:eb:ab:e3:09:07:b2:66:73:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:24:01:40:71:89:36:D3:68:C0:7A:BA:CF:A2:B4:E2:BC:58:40
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:56:54:7e:1b:7c:ed:5d:aa:d8:f8:b9:69:02:45:7f:8f:
c5:f1:84:49:12:cb:dc:11:dd:6d:b2:12:9a:e4:ea:54:0d:c8:
fb:0a:9e:00:b1:82:72:3d:61:07:81:02:95:7d:76:2a:d0:44:
61:60:d4:20:aa:21:34:4e:96:6c:a0:e7:32:27:06:8e:06:08:
51:96:ff:1f:e0:4d:79:ca:31:38:88:40:97:de:96:d6:28:ed:
96:aa:34:dc:60:a8:4f:6e:41:12:ad:f8:5c:bc:cb:38:97:ee:
a6:97:3b:58:c1:64:02:e9:91:dd:06:8b:47:54:12:2e:21:80:
a7:24:2a:50:32:17:fc:9f:e3:e3:34:94:14:7c:6d:2b:a3:db:
e1:89:ce:6d:a4:e9:3e:ea:a3:7e:94:0c:07:15:26:37:82:b3:
42:ee:6c:86:b2:08:7b:ea:57:d0:ca:03:09:90:6e:bd:09:70:
77:e4:34:76:27:99:17:ae:c6:ec:62:df:34:08:86:46:0d:8c:
9f:7d:59:f7:89:f5:34:6b:d1:ee:c5:00:95:a5:33:fc:50:37:
17:17:da:45:a0:61:f0:fe:da:b2:22:6c:22:f0:08:af:fd:83:
e6:78:7e:ed:70:ff:f4:5d:f3:d4:31:eb:ad:57:3f:99:5c:a3:
cb:e5:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:46 2026 by rpki-client