Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: 1zJr7HW/JzZuzZYZlHrf53giORwNiq6D6vMdMwMmr5o=
Subject key identifier: E3:4F:74:97:F2:BF:98:B9:26:C2:16:B7:FA:2D:FD:98:9C:44:A8:30
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019E1DFE12ECEDB170615D15329EF00A2B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0FE7
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: isHDLXGaSkupU14BjTY/iAK2uPSyuA8GPenKy/g5z7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:12:ec:ed:b1:70:61:5d:15:32:9e:f0:0a:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=e34f7497f2bf98b926c216b7fa2dfd989c44a830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:25:22:ae:95:cc:87:34:6c:11:55:92:95:1e:
2f:91:67:38:4a:88:7d:3c:eb:53:18:10:87:2a:70:
27:c8:c1:57:4b:6a:c4:02:f0:cb:92:a4:47:f5:57:
e5:dd:b0:bc:24:4c:45:97:03:48:67:de:b5:9f:cd:
bd:d2:50:f9:47:81:b7:d7:70:54:dd:2e:54:26:2a:
90:15:2e:ca:bf:83:d9:fc:f3:7a:c2:39:eb:86:b5:
35:e6:f7:58:64:78:5f:8d:37:36:ba:37:60:d8:b4:
bf:61:e0:ad:2d:7f:6b:4b:0c:20:9f:13:e3:89:12:
eb:c6:ee:b7:5b:17:f4:2d:bf:40:0d:ee:f6:26:21:
b7:b1:af:b9:09:84:4c:a1:fd:ed:12:9b:c4:19:ed:
90:20:90:39:d4:d5:d4:0b:2d:0c:28:f3:6f:4f:c4:
a9:fe:0e:07:3b:d7:d2:02:bd:d8:52:af:ef:88:1c:
cb:9f:91:26:41:ab:58:f0:01:21:34:48:45:1a:12:
50:ae:fd:5a:aa:7a:80:15:24:81:8d:cc:3a:99:33:
85:7e:57:da:46:8c:de:b0:d0:db:92:c7:25:bb:49:
3b:a1:8e:d2:85:0a:aa:d6:fd:10:26:ee:4c:45:8b:
39:8d:a1:16:30:c3:72:65:f3:0c:8d:ff:bd:b7:b0:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:74:97:F2:BF:98:B9:26:C2:16:B7:FA:2D:FD:98:9C:44:A8:30
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:2c:4d:1e:0e:d8:b8:6d:4a:73:bd:8e:99:77:2c:3d:a5:
67:2f:1b:93:40:cc:e7:8a:2d:38:18:e5:b2:ba:36:8d:ad:6f:
4a:bc:95:35:9f:e7:67:97:ba:0b:05:74:34:6f:22:cb:9b:43:
c4:7b:f9:72:58:0b:8f:c8:de:7f:55:a8:19:78:a8:41:24:e2:
0f:8a:3c:79:21:f9:7e:25:07:c6:5d:3f:7a:ab:6a:75:52:04:
5d:1c:0c:cb:c0:01:28:4d:38:10:15:80:2f:d5:47:68:d6:94:
1a:e0:74:f8:68:d7:1a:ea:ef:5a:ad:9f:a1:aa:36:70:4c:39:
cd:8e:ca:a2:d3:fa:7d:08:2e:9d:96:b2:8f:39:e9:26:a2:6e:
c9:85:27:9d:d1:ad:2a:33:80:8f:86:42:91:fc:65:09:9c:b2:
de:bb:5f:40:07:1c:01:74:cd:5f:1d:10:89:90:73:70:70:39:
cc:42:b1:a6:a8:96:53:ef:91:c5:47:01:3f:48:a7:12:03:12:
4d:f3:c1:5d:06:73:d1:ea:1f:fa:44:2a:ff:ee:72:b8:21:f6:
37:61:e3:6c:fc:1d:c7:e8:4f:94:66:28:7d:26:46:f8:cb:92:
91:a6:36:35:aa:25:cc:31:48:09:63:b3:11:25:a1:cd:ce:a9:
61:f2:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:02:52 2026 by rpki-client