Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: NVLub6D5yFXuhqbZ7AnqQm2HN6/uQnHE4HOt/2YkCxo=
Subject key identifier: DD:FA:B6:3E:4E:24:37:C5:5C:AB:BC:4A:7B:FE:FE:40:43:5D:6A:AA
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019D2704A1448EECA272A47328696FB34922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 186C
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: NsDX8WTcVPhV2v8jfPTH01SwS++f35YhXYpSe05draU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:44:8e:ec:a2:72:a4:73:28:69:6f:b3:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=ddfab63e4e2437c55cabbc4a7bfefe40435d6aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:45:d7:39:7d:f8:d0:64:96:9a:5f:9d:2f:
5f:b3:dd:84:91:3c:b9:37:2e:26:9e:0f:f8:3a:1f:
bd:f0:38:34:2a:6b:6a:b2:72:8f:e6:1d:05:f7:4a:
83:ad:43:59:8c:e9:ec:18:1e:d5:26:06:86:67:eb:
c6:f3:2c:53:7b:15:74:83:cb:5f:a0:c1:7c:53:fe:
6b:8d:88:fe:6d:52:d8:c3:74:0a:7b:9d:bb:7d:65:
24:8b:2b:3c:af:b8:a0:a7:11:37:b6:cb:98:b5:4d:
31:14:95:32:86:a4:e4:a0:1f:86:1a:dc:24:5d:24:
ee:29:65:32:69:99:77:7f:f1:47:13:aa:a3:85:75:
a0:14:9e:0b:23:e7:b2:72:e7:17:20:4c:03:7e:d4:
aa:8d:2e:cb:42:b4:42:28:f4:c9:f7:e9:97:0b:ef:
27:b2:75:14:51:76:d3:f7:2f:1a:3e:84:8b:2b:8d:
e2:3a:79:25:59:7f:4c:62:f5:8b:b9:42:3a:81:1c:
5d:91:1b:c2:9e:ab:fb:b6:17:ee:1e:bd:1f:2f:af:
cd:8f:24:53:b9:80:51:c8:bd:2b:21:d8:08:9b:ec:
b8:87:0f:0f:09:ac:7e:b3:44:2f:09:8f:d0:6b:cb:
9a:e4:e6:0c:e3:e9:f7:ff:43:80:a1:8e:a3:9b:29:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:B6:3E:4E:24:37:C5:5C:AB:BC:4A:7B:FE:FE:40:43:5D:6A:AA
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:17:ff:03:a3:c4:d2:90:e6:c9:7a:83:56:c1:a8:98:d3:02:
0c:ad:73:83:e0:9f:42:cb:cf:d2:b7:a8:46:8b:6a:c5:50:ed:
b7:15:94:8d:56:08:28:6d:0c:f6:ff:c4:c2:30:2c:ec:f8:3f:
df:26:0e:a6:ab:6f:c7:d3:6d:1b:59:13:21:eb:68:71:d3:87:
81:7e:f8:61:ff:02:89:fd:58:33:c6:f9:12:04:84:5d:bb:c0:
e9:be:72:b5:05:18:e4:ec:65:73:5b:94:1a:90:59:0d:4d:25:
5c:68:83:83:9d:ca:1e:a9:94:40:dd:ff:ba:f0:3b:dd:bd:d3:
fc:7b:ca:af:75:06:d0:ed:e5:b5:22:61:5c:72:31:24:f1:d9:
51:b3:93:d4:49:73:12:e1:be:e4:69:72:91:ef:00:e1:d8:e2:
d8:8b:b6:4a:23:90:77:a7:6e:97:18:63:64:1e:6a:19:fd:25:
ae:0b:d0:bc:ae:69:dd:08:44:d3:4c:20:1c:0f:46:1f:43:80:
f4:79:60:c9:7a:8f:f5:67:9c:a8:4c:be:2f:af:17:f3:d4:1f:
97:36:35:32:58:64:b8:47:50:55:ba:ca:39:b8:67:34:33:7d:
be:b3:55:f8:0b:9a:a1:5e:ad:5f:e5:51:2f:80:20:1f:6c:7e:
21:54:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:45 2026 by rpki-client