Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: 39lRMMJSMoFhNe1aRBBQUA66I7QsnBEc8t8Ra4XJCgY=
Subject key identifier: B6:5D:33:4A:99:43:63:86:CE:E5:9F:7D:A0:65:38:84:33:77:E1:4B
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 019D2C60A52DBCA0B8C03B3864E4CB48E566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 23:00:24 +0000
Manifest this update: Thu 26 Mar 2026 23:00:24 +0000
Manifest next update: Fri 27 Mar 2026 23:00:24 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: zcU4QgAyYv+s9dIJryHTMC81Abq3qrJb/teSNm9M/pE=)
2: r_ry2JrMgNkI0y2bqAVwL47xsmU.roa (hash: RFscHxkchgcCfOVhcpYJ+VpHovmhXd8iHfZgJ7NGod8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:a5:2d:bc:a0:b8:c0:3b:38:64:e4:cb:48:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Mar 26 23:00:24 2026 GMT
Not After : Mar 27 23:00:24 2026 GMT
Subject: CN=b65d334a99436386cee59f7da06538843377e14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:bb:f8:db:c3:83:d2:8a:0e:49:cb:4f:be:
c4:83:24:c9:bc:ab:a8:40:86:ee:88:d3:13:fd:c2:
8c:c1:02:e7:5f:c8:0d:55:44:b2:db:22:31:91:59:
f1:7c:76:72:8a:24:31:ed:2e:1d:fb:5f:22:ea:bf:
67:5e:ef:d6:27:06:fd:b4:6a:c8:b2:a3:d4:f9:9f:
10:3b:b0:94:1e:aa:93:d9:1e:9b:a0:69:e3:6d:7d:
44:c7:f4:51:2c:ad:0f:51:c3:6c:34:55:c9:98:d7:
f1:53:a4:4a:de:d0:ab:d2:07:c6:92:bb:75:63:a3:
8f:89:18:0f:1b:26:46:ee:90:14:a7:0c:a4:8b:e5:
96:11:e6:72:2c:32:b3:09:67:81:de:d4:65:75:19:
ad:6f:9c:5b:5a:be:d6:1f:5a:34:9d:e2:75:76:1a:
a7:95:fc:4b:c4:62:70:eb:74:a9:3d:bc:52:95:54:
8a:43:3f:56:18:e9:e0:d4:47:1d:07:bc:d8:e2:e5:
ae:c7:7e:be:d3:e3:92:31:c1:c2:2e:24:9a:72:2e:
b6:47:f5:34:b9:57:44:f0:83:03:17:d6:5a:43:10:
4b:10:79:bf:8b:6b:76:c5:39:1d:bc:c9:dd:02:1d:
a7:43:b9:21:5c:9f:02:27:27:dd:99:34:fd:2a:6d:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:33:4A:99:43:63:86:CE:E5:9F:7D:A0:65:38:84:33:77:E1:4B
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:33:93:f7:0e:20:70:2a:95:3d:59:06:34:ae:58:a5:c0:f4:
06:c8:a9:47:19:e0:22:af:00:aa:bf:4f:60:21:ce:1d:be:db:
44:95:2b:35:c8:28:69:dc:34:80:28:62:4b:5a:7b:e1:d2:4d:
40:38:38:e2:01:ef:b7:75:38:1f:1f:25:e0:83:58:65:0c:f1:
fc:12:b2:01:01:87:6f:53:00:32:19:1e:d5:bb:c2:ca:a8:51:
3d:18:a1:31:13:8c:c5:f2:7a:78:f6:90:58:7b:85:64:1a:a5:
da:df:3f:72:24:a2:47:93:b5:c7:74:50:98:2d:96:19:97:62:
d8:66:93:c0:bb:b9:16:0d:cc:6a:37:22:69:fb:50:40:1a:0f:
88:23:d5:d8:b3:28:59:40:6b:7d:4d:82:c3:b7:5f:c5:20:41:
e3:2a:81:8a:80:ab:5a:87:c8:2e:03:dc:0a:c4:8d:35:d0:dd:
9a:a1:dc:52:ed:ba:30:68:b3:1b:39:54:05:a2:c5:77:d9:0d:
4e:32:ea:00:16:4c:ab:22:bf:72:76:ba:25:50:74:ba:8a:41:
09:72:10:1e:53:07:79:1a:73:e0:a6:96:d2:3c:d3:d2:44:24:
d7:a6:1d:b7:dc:37:e5:e2:16:92:98:18:9a:6d:6f:bd:c4:f3:
8d:64:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 10:00:05 2026 by rpki-client