Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier: 59lAIiZGaM3AE/5Qt4BHp/EMS9fvHUVog8RbhlcpOVA=
Subject key identifier: 1C:77:50:38:69:FF:77:25:00:F4:59:41:F1:D5:1C:3D:4F:F5:4C:CC
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 019D265EF42DA95B4AABFC9E219D6E712830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number: 0DEB
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: HYZwU1q8cqgPShX-RWS5UdIDZcs.roa (hash: pxyDD70WarwleFchwfjCCFNP4JSQb/ZGj4hPQ3pTdJU=)
2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: WX8aRww7ZqTGrkiP0tXXVwK2J6XGq9w9fxf9lYL655s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f4:2d:a9:5b:4a:ab:fc:9e:21:9d:6e:71:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=1c77503869ff772500f45941f1d51c3d4ff54ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:4c:92:c9:3f:3d:3d:33:b7:b8:79:3d:73:
65:2e:41:24:8e:51:83:01:cb:4e:cb:a0:1e:e8:ee:
19:3f:3e:b3:7e:8e:af:73:42:0a:26:9c:a7:7d:b7:
81:1b:ef:9d:f1:4b:43:ef:24:12:df:6c:c6:a8:77:
63:62:32:28:51:1f:e7:92:04:d1:13:25:4a:e7:37:
3a:c8:b6:0e:32:4c:d9:7b:a4:b3:67:41:0b:0c:db:
fb:be:69:21:0f:2c:57:00:3c:81:10:81:41:0b:1f:
22:ac:4c:db:29:f1:a4:24:2f:b5:21:51:9d:3a:a1:
11:21:58:da:79:17:76:e3:f5:b0:18:c5:5b:f1:20:
91:a6:0c:fd:0c:8e:4c:bf:a9:e5:9f:d9:b3:1a:b9:
6a:55:7b:ab:04:72:02:fd:f0:96:92:68:f4:8e:06:
f6:97:25:06:c8:56:b5:ef:8b:16:a2:9f:3f:27:c5:
b9:6f:28:d6:04:86:2c:85:d0:c8:a5:a8:d1:d6:b7:
cd:8e:f1:bd:26:ef:de:9b:f6:bc:8b:73:cb:9a:4b:
89:7d:d1:19:32:90:0b:d8:bd:6a:4b:d7:71:8f:41:
f0:ff:bc:b5:44:09:51:c0:b0:1b:37:d0:83:73:3e:
c2:31:16:4c:59:62:c9:1b:f0:b6:44:30:fd:46:07:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:50:38:69:FF:77:25:00:F4:59:41:F1:D5:1C:3D:4F:F5:4C:CC
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:f7:5b:5a:6e:cf:54:88:ba:06:3e:a6:8d:ad:8b:8a:af:
07:fc:90:f0:0a:0a:b3:44:59:ce:11:bb:7e:10:19:a4:02:bd:
24:5e:b3:4d:0e:d9:1f:af:08:a4:5d:d8:a8:82:b6:07:b2:5c:
74:dc:de:cb:4d:60:01:7f:06:45:57:aa:42:ae:29:6e:86:d5:
22:90:15:01:50:dc:b3:71:99:16:d1:72:8f:45:68:10:bc:3c:
5c:fe:4e:60:85:d2:40:4e:37:96:6b:21:27:3e:8e:ca:14:bc:
97:91:d1:3f:79:be:54:88:ff:e2:2c:1a:e9:f8:3d:d5:4d:0e:
cd:aa:ab:a4:82:e0:f0:32:a1:49:8e:8d:e8:b7:95:a6:d0:c7:
ec:f5:22:a8:81:11:66:d7:21:86:f0:d5:42:f3:c3:50:87:a9:
89:09:e0:09:20:3f:35:73:36:ae:8d:ac:3b:b3:29:54:64:6b:
05:f9:1e:64:9c:ea:4d:00:88:f1:35:b8:bd:27:78:17:80:1c:
3b:f9:8f:eb:0f:2e:56:94:cd:45:f4:e0:6a:cd:e9:e6:5d:22:
ff:04:bf:ac:fd:0e:13:a2:75:32:bc:f6:b2:d2:ec:87:b1:11:
8d:de:0d:b5:e2:f3:b3:70:66:c7:9f:25:ab:3e:8d:14:f5:34:
67:25:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:05 2026 by rpki-client