Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
File: l3rc9I_t4Rk44XfcBNxnnGktjBw.mft (raw, json)
Hash identifier: MShPlZAF+jRYNw/xqxKdloTM1+Nk+Usiky+50YXHLl4=
Subject key identifier: 23:85:05:42:A3:79:88:A6:2A:4C:93:6C:14:23:3B:4D:34:EC:4F:4F
Authority key identifier: 97:7A:DC:F4:8F:ED:E1:19:38:E1:77:DC:04:DC:67:9C:69:2D:8C:1C
Certificate issuer: /CN=977adcf48fede11938e177dc04dc679c692d8c1c
Certificate serial: 019D2703B7BCC428AAD53EE8DAB001EEF9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
Manifest number: 0237
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: l3rc9I_t4Rk44XfcBNxnnGktjBw.crl (hash: XK4EhX9z1sAgneSjnhoqXxCYiwAB8sHvDUB4S3UN/Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b7:bc:c4:28:aa:d5:3e:e8:da:b0:01:ee:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977adcf48fede11938e177dc04dc679c692d8c1c
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=23850542a37988a62a4c936c14233b4d34ec4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:9e:d7:45:23:5b:9f:e4:4a:63:33:0d:8b:
1c:fe:4d:e3:14:7d:df:39:88:d4:19:a8:b4:b6:03:
f5:81:56:c0:01:df:16:8d:60:93:d4:3d:02:77:4d:
e9:4f:6a:89:73:61:fd:c0:da:53:ff:10:df:11:8b:
64:ec:87:8d:fd:0c:7d:be:54:c6:e8:c8:e5:2e:63:
17:bc:5c:9c:9f:e9:c2:5a:96:17:48:06:54:85:23:
70:bc:3c:50:67:9e:aa:03:0a:8e:95:80:0d:cb:40:
22:ed:e0:a5:53:3f:5c:43:90:ae:69:22:9e:ec:fb:
b1:86:ca:5b:33:47:b4:25:d3:28:0b:cc:94:6d:cd:
30:3e:5e:90:d6:2b:28:d1:df:04:01:0f:c3:66:a2:
38:1c:a1:37:37:b9:cb:f8:7d:67:a6:88:e0:dd:c9:
7c:a6:03:36:30:0d:2d:1d:a9:31:ae:91:c9:7c:1a:
58:fc:c5:9c:12:01:d4:fa:3b:98:27:72:5c:02:e7:
18:c6:02:1e:98:b7:0d:e9:c5:bf:a4:ae:1b:7e:ae:
cb:ef:f3:ac:73:aa:ac:ce:c2:d8:bc:7d:a9:93:69:
ed:db:e6:0e:ab:f7:46:02:ca:66:fa:5f:5a:23:47:
ae:db:95:e5:c7:7d:9b:c9:90:71:3a:82:a5:ca:26:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:05:42:A3:79:88:A6:2A:4C:93:6C:14:23:3B:4D:34:EC:4F:4F
X509v3 Authority Key Identifier:
keyid:97:7A:DC:F4:8F:ED:E1:19:38:E1:77:DC:04:DC:67:9C:69:2D:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:20:07:46:5b:f9:4a:0d:a0:66:a2:da:b3:8a:86:61:f6:
ea:17:5e:fa:2b:e5:49:86:28:7c:23:16:8b:52:89:f4:87:39:
97:e1:f9:99:63:07:20:ec:d4:fc:9a:8e:3a:8e:d9:fa:fb:a5:
e9:29:d2:b4:49:fe:fe:fa:45:a0:9a:0c:07:41:6f:f5:b4:f6:
7e:5c:e8:3c:f1:6c:7c:f3:80:19:ab:7f:eb:49:17:3f:07:ff:
b4:a9:bf:af:f5:60:13:24:f6:10:60:65:54:7e:bd:c9:5b:cb:
65:9e:de:aa:a3:43:4d:a3:e0:ff:6f:13:4b:e2:7a:11:5e:dd:
2d:91:d9:11:c2:b9:98:1d:aa:cb:76:a5:d7:c7:c6:6e:07:6f:
a2:71:3b:f3:65:2e:c3:f4:2f:a4:69:46:b0:98:07:7a:03:4e:
4b:29:1a:65:4b:df:3b:67:74:60:70:a2:be:45:d1:16:8e:a9:
36:2d:d6:19:62:2e:e7:a3:37:f7:83:55:74:e4:da:ff:2c:83:
95:0d:c8:a3:1c:fc:e4:d9:4e:5f:ed:70:b4:5c:5a:70:55:b3:
72:33:fb:b9:e2:b6:17:e8:95:d0:70:1b:54:be:6e:4f:e2:4d:
29:b5:d2:ab:97:f9:c8:c0:66:d4:bb:3a:3a:5f:61:1d:07:d1:
c9:fd:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:35 2026 by rpki-client