Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: f0wMiDIciC1WSaTK+snY2fh3czOzE0LvK71xNVT+0RA=
Subject key identifier: 41:BB:67:1B:10:CD:0D:8E:39:F4:D0:BD:CC:81:C3:30:E0:71:6E:9D
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019D2771E139E49C984415A2B95F8C9DB1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0760
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: M0pDr4Clch3V01pm4pja2RrFX_Q.roa (hash: FaCDNXQloqHAn9HCQuN4XRRX7eJlA+OA81nG9S2/sLs=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: VAjiiYgKZSWvUedMWG6lb1Re5iL1XPtvRksnqLXtdxY=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e1:39:e4:9c:98:44:15:a2:b9:5f:8c:9d:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=41bb671b10cd0d8e39f4d0bdcc81c330e0716e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:40:47:d6:11:19:69:22:e4:91:3a:ce:08:
10:fa:e5:6d:7d:cc:3a:c5:d5:96:10:92:cd:46:5b:
30:6a:2d:64:98:c9:de:eb:6e:71:d1:1a:d6:f3:31:
4c:6c:d2:70:05:e8:9f:c5:86:cf:89:11:3f:94:98:
de:d0:df:3c:cd:3d:ee:7c:86:69:b2:b2:3d:be:3c:
64:7a:35:9e:9c:66:b5:cd:c2:9d:7d:22:69:0c:32:
48:55:2d:e9:b9:2b:d2:ab:56:73:99:aa:b9:45:31:
44:c7:8d:69:b5:d7:bc:fd:45:95:17:19:48:12:45:
57:14:69:3a:17:b4:bd:2a:5d:e9:2b:21:14:ce:95:
1c:58:e0:97:72:fb:5f:03:a4:54:d7:0f:00:e5:99:
cf:34:4b:ab:76:29:0a:37:ba:e9:25:fd:68:1f:8c:
41:77:ac:73:ff:d0:ae:7a:b2:75:69:42:01:dc:df:
63:29:96:ec:b9:08:d6:a4:96:e2:83:5e:9d:ff:73:
e4:c9:cd:f7:b5:2e:13:bb:9e:80:10:72:ce:cb:a0:
ab:7c:e7:62:7e:8a:08:e8:63:5a:b5:06:10:fc:c4:
c3:3e:6e:a3:a9:4c:cd:67:35:89:87:8c:33:ab:07:
08:b6:f7:54:ea:0c:47:dd:5c:6b:4b:5e:c6:ce:b3:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:67:1B:10:CD:0D:8E:39:F4:D0:BD:CC:81:C3:30:E0:71:6E:9D
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2d:bf:58:03:19:5d:a0:6c:a3:1d:5d:62:45:a1:08:55:a4:
b5:66:06:df:7d:ae:a8:b9:6f:c8:14:22:89:22:9c:a1:13:9a:
60:6c:2b:d0:67:55:01:2f:96:e1:a0:0b:79:b6:32:18:47:4a:
01:ec:26:f8:4c:79:02:64:dd:37:a1:ce:61:d4:a2:7f:01:d0:
06:ed:86:f8:5a:4a:d5:ca:7b:66:64:4c:e3:ec:27:75:25:94:
44:a6:37:90:17:5b:a2:2e:2f:86:10:5b:19:6b:74:4a:d7:a8:
15:b9:aa:68:ee:f1:ec:df:a8:23:54:45:16:43:fb:2b:93:b4:
ec:49:af:24:70:ed:18:f9:e4:1f:2f:2d:6a:69:85:4d:79:4f:
c5:91:98:f5:84:00:58:8b:a5:66:7e:c3:0f:74:fc:81:28:5f:
09:3d:22:ef:d5:0c:dd:a6:04:68:b4:5e:05:2b:c3:21:cb:f0:
ee:23:0d:64:5d:51:96:82:f3:ea:48:e3:ad:f7:36:c2:2a:1d:
aa:00:7f:a6:39:2b:14:cf:29:91:39:20:b7:01:47:4c:fa:ac:
6e:3a:dd:f9:28:17:80:7b:5d:d9:6b:17:94:c8:97:80:95:3f:
a0:d3:d9:f8:d7:c9:1d:7b:e1:58:e7:97:7d:61:b4:dd:8c:3b:
55:1b:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:45 2026 by rpki-client