Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: nCCgZrGSz/d7fh3VRwa3yT4oMRn+PKFQsUoq9Nhtek8=
Subject key identifier: 6B:54:2A:C4:3C:31:3D:D3:FF:E3:8C:EE:39:AD:0B:37:8B:9E:89:B1
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 019D25BA25D0AC01BB8C1956BFAA2E65EFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 167C
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: MIsbp1kxFIWX0eWKv3mGuqynsv8.roa (hash: qC1LIihT0w6vmPGTbCFgV9ARFX49AGn21fpjcpi2tdE=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: KKhTFZ+FYtP3lepIUdMkcnX0cWSS5UfS68bKRdGyNSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:25:d0:ac:01:bb:8c:19:56:bf:aa:2e:65:ef:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=6b542ac43c313dd3ffe38cee39ad0b378b9e89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:35:64:72:33:68:ed:98:d8:20:e3:1d:e8:
05:b1:ee:1f:38:fb:59:0b:2e:f0:ea:e1:6e:ea:34:
97:a7:1d:2c:90:38:fe:bd:93:6b:07:d8:33:a4:9d:
61:95:c4:4d:63:eb:3d:f7:45:55:11:8c:5a:7c:d4:
87:d2:4a:9b:a3:58:fe:26:00:d1:69:13:41:dd:7f:
d3:f5:9e:ae:9b:9a:95:b3:a3:fd:34:a7:1d:88:e0:
bc:b2:4f:e4:d3:02:4d:73:66:c6:f8:2d:53:d6:9e:
6d:5a:79:fd:52:f8:38:6f:95:5c:09:79:e6:6d:64:
90:c9:5c:1a:d7:23:14:f3:ff:47:e3:5d:77:1a:e0:
24:32:7a:23:f3:c1:e0:6f:c8:56:1e:dc:9d:27:d3:
8d:52:9b:2b:da:7f:5f:13:65:60:50:d0:38:0f:52:
87:d6:93:1a:ff:8d:13:cd:ea:db:c6:e3:25:60:a6:
23:2b:e7:9a:bf:42:6b:fd:ca:b9:55:91:45:dd:4f:
5f:5b:1e:a3:66:05:d6:7f:5d:a2:fa:2a:59:59:27:
b3:d9:b6:b3:06:e6:e5:97:ae:00:d5:20:76:7d:e5:
6a:a0:14:71:eb:36:22:88:c6:34:00:72:e8:b7:67:
57:5b:66:35:04:6c:95:06:72:ab:19:68:4b:90:f5:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:2A:C4:3C:31:3D:D3:FF:E3:8C:EE:39:AD:0B:37:8B:9E:89:B1
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:52:64:a6:e1:35:3b:81:3c:8e:df:1b:bd:32:45:8f:1c:
68:ca:15:bc:c3:31:54:6f:cc:b9:bd:dd:64:73:1a:6d:2e:76:
55:bd:2d:b0:2f:59:fd:0d:ad:a4:06:40:f4:4a:3b:8c:75:76:
f4:87:d1:52:29:81:f1:0c:03:38:4b:4b:be:d5:1a:6a:b8:d7:
99:ea:38:4a:c7:13:23:02:4b:85:b4:52:95:6f:8f:99:0c:74:
2d:68:4d:44:93:a2:fd:39:85:b5:a2:e9:24:4f:1d:16:d4:bb:
80:fa:88:0f:40:bc:f3:9a:0e:c6:92:dc:9c:8d:ea:82:89:32:
ec:55:7d:5f:c4:b2:2e:89:60:60:bc:fa:fd:2b:a0:4a:3c:4e:
42:73:cd:08:5b:68:8d:30:63:82:ea:90:3c:24:47:d5:b5:ae:
33:5e:fd:b6:6c:93:45:89:2b:73:06:80:7b:72:d7:04:f2:b2:
01:0e:c5:78:da:67:a9:10:95:d4:fd:62:03:68:e5:bc:8a:f9:
f0:00:a4:ec:04:5e:48:fa:9f:36:48:97:cf:89:fa:2c:7d:f9:
e4:4e:ff:c7:4d:75:db:ec:3b:46:2e:b1:7d:77:60:36:7e:63:
38:bc:4a:c3:f7:01:03:00:07:1e:da:5a:98:f3:11:2c:31:97:
fc:28:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:13 2026 by rpki-client