Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: hLe0k+HVVigLVoyQDm9MjFFZHezAZdTUovlZ7XEvhPU=
Subject key identifier: 2F:10:D8:C1:C3:66:40:B9:BB:A2:1B:C7:DD:4A:D9:3D:50:93:E8:6A
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 019D27DF5598162DCD4AE9280D645E1830C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 03A3
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: 16nA+p/V/+10tTiqZdlF/xyCnmKllQbH7eu8KT6Ksio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:55:98:16:2d:cd:4a:e9:28:0d:64:5e:18:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=2f10d8c1c36640b9bba21bc7dd4ad93d5093e86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:f6:fb:ac:07:c4:38:33:74:a2:e1:ee:57:
89:11:14:37:ac:dc:97:52:a1:f6:8d:a7:47:b8:95:
82:50:38:c7:92:18:7e:3c:d1:d9:da:ad:c0:47:89:
d6:77:87:fa:c7:a1:90:dc:8d:96:0a:9e:77:e3:05:
e4:af:d4:21:e4:6d:30:a8:cd:8e:03:7a:36:d7:b7:
ba:41:5d:94:c3:27:b7:06:f9:9d:07:ea:1f:8f:d9:
ed:05:cf:19:7a:3a:aa:57:5e:24:20:9e:46:5b:4e:
47:5d:a5:37:01:80:4d:f7:47:99:99:eb:3a:55:ad:
78:90:e5:39:f1:eb:b2:d5:c6:b9:a8:10:9b:cc:e4:
ee:ba:1d:db:d3:8d:6e:ff:4b:6b:4f:ed:2d:06:ab:
54:b7:51:03:7e:6d:7a:b9:f7:d4:2e:8c:a1:c7:18:
fd:72:84:72:2a:79:b8:8d:e0:7a:4f:84:79:47:69:
49:95:a6:83:da:79:7d:86:5c:7b:1e:69:85:30:ed:
56:d8:ff:6a:4c:c1:d6:3d:39:65:9b:53:9c:23:2e:
11:98:f0:36:13:bc:53:9e:bb:cd:01:f4:97:93:4a:
4b:c5:09:1e:ad:ad:9d:59:06:90:46:0b:f1:df:c0:
38:1e:c4:49:35:52:d7:03:46:a5:24:ae:c9:74:68:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:D8:C1:C3:66:40:B9:BB:A2:1B:C7:DD:4A:D9:3D:50:93:E8:6A
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:e7:be:de:fb:4d:49:26:5a:c5:82:45:68:66:1e:ee:42:
a6:b2:68:22:2a:5e:08:04:7d:06:6d:f0:b2:82:f9:f5:f6:95:
54:53:92:a1:96:07:85:30:be:b3:4f:a1:d0:12:ce:ec:fc:ca:
ba:ad:d4:94:3e:97:fb:26:63:d9:9b:c4:91:c3:4e:eb:f5:14:
12:dc:49:56:fd:fa:49:af:e9:f9:de:f6:2d:f4:2c:74:a3:28:
f0:df:ea:a6:07:29:34:69:4a:fb:62:34:b3:12:00:82:f9:08:
94:17:b5:c4:90:0e:8c:80:6f:06:b8:cd:47:88:11:77:0b:90:
85:15:b8:4e:67:7a:8c:3d:e2:c6:b5:be:23:48:b2:8f:6c:26:
c4:cb:f6:13:73:29:3e:fc:a8:ea:d9:bf:00:5f:1a:44:ae:8e:
54:a6:94:ab:75:67:90:93:a5:3b:18:e6:b3:b9:85:51:9e:a3:
26:30:fd:42:9c:fc:03:6f:78:ee:a0:72:83:a4:8c:66:24:a8:
fd:27:e3:0c:9d:67:8e:38:28:f7:ab:4f:94:64:94:17:10:a1:
95:ad:f5:1c:1c:8a:3e:98:8c:85:c6:cc:60:dc:a7:08:86:e3:
4c:5a:2c:d2:cc:19:0d:54:fa:1a:14:fd:0a:0f:15:f3:45:6a:
e8:a3:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:59 2026 by rpki-client