Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: LxLUqidY3gZ4UXHFKvGmAdPz6m5Ao9vNGJf1IHk0DSI=
Subject key identifier: 2C:FA:A0:B9:A9:AA:AA:B5:4E:26:2B:71:E9:8B:FC:92:DD:32:02:ED
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019D277256A2FC5CC5B3C966CFE3F3275617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 07F9
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: ktuOQpvhIVshzEh1AKVHwjETmDQ.roa (hash: RkFBt5jBdqM9V+vWsmvf1KhOIAy1CQTkom8d2viWOuc=)
2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: 7kOr7kFZNO6WiQAA+LHCDR+mVT6K7ssB+s7EUw0wIio=)
3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=)
4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:56:a2:fc:5c:c5:b3:c9:66:cf:e3:f3:27:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=2cfaa0b9a9aaaab54e262b71e98bfc92dd3202ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:dd:e4:4e:e8:f9:01:96:1d:f9:e9:b9:25:
44:52:56:55:5d:b9:9f:96:71:78:18:94:e6:98:26:
07:05:5a:12:1e:54:be:bd:ce:c6:c3:cf:d9:2a:3b:
44:af:f8:e2:11:ee:fd:6a:ba:7a:13:90:88:7a:2d:
d7:34:2e:07:fc:73:92:85:e3:da:b3:43:1c:6f:4f:
81:29:96:47:c5:11:25:04:0a:62:cc:0c:31:33:9f:
ae:d6:07:43:a4:bc:dd:76:e4:1a:5d:39:48:ee:9f:
61:3d:0d:32:ac:c1:7a:25:b5:a4:05:f7:e1:65:10:
be:ce:62:3f:70:fc:ff:d5:d1:34:0d:23:b0:57:46:
fc:5d:e8:f0:01:22:1c:90:9b:dc:fd:e1:e4:17:5a:
b2:a9:a3:03:ff:c9:73:78:f6:ba:5a:c2:0c:b0:ad:
ba:5b:b6:4e:fa:2a:d8:f8:e3:bf:79:b8:95:2a:ed:
39:88:6c:15:ae:0d:1e:c6:7f:c9:74:cb:db:1a:25:
ea:d1:16:f7:5b:cf:65:7a:73:7f:ed:14:1d:4a:24:
80:1d:8f:52:20:a9:46:21:16:c1:5e:f5:c5:00:b4:
00:2b:ca:07:d2:96:46:5d:0e:81:e2:d3:e9:8d:e2:
2a:23:cb:f1:54:8f:29:b3:94:87:7b:77:de:89:63:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:A0:B9:A9:AA:AA:B5:4E:26:2B:71:E9:8B:FC:92:DD:32:02:ED
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ee:b8:ec:cc:34:27:e0:79:15:a1:c4:73:ce:c2:b0:6d:ad:
d0:3b:08:87:18:e0:72:1f:98:c0:35:91:36:07:13:4f:36:e3:
da:ae:3c:c5:7b:19:d9:5e:23:52:84:3d:e8:f2:5b:b4:4a:5b:
f0:58:25:7b:ea:fd:4a:9f:a8:b5:bd:e3:a6:9e:2a:ae:4d:fd:
34:f3:50:2d:52:11:f9:50:86:e3:41:43:2b:5a:9b:43:70:db:
45:19:9a:c0:ed:37:33:5f:c9:fe:3a:68:dd:a2:f0:7d:0d:9e:
2c:c4:ba:a6:9f:d1:09:b1:0b:4a:5d:e6:30:b8:e5:6d:b7:e4:
ea:82:14:fc:d5:57:6a:23:85:58:03:93:fb:24:d4:2b:81:16:
81:13:8c:7e:e1:55:d3:ff:f4:c9:7b:a5:e5:90:80:c7:26:23:
03:8e:a5:48:63:d4:16:c3:9a:22:01:84:f7:d0:ad:7f:bb:35:
00:97:8f:bc:94:27:bc:8a:2c:35:c9:1b:ec:08:cd:f2:e3:a6:
f2:e0:ac:ca:a1:4e:48:23:30:a6:fb:aa:05:4e:ea:04:62:96:
70:35:ea:2e:9a:95:91:67:5f:9a:39:e8:e5:7a:16:dd:10:5e:
0a:82:5f:11:5e:1a:97:59:a3:66:76:36:73:87:4c:3a:15:24:
65:65:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:46 2026 by rpki-client