Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: i/k9UIE7NazsamCcEARcRJ57e32O9Oe2z4aLK/qBsWs=
Subject key identifier: DB:91:92:72:99:6C:49:11:A7:76:92:8D:2A:3E:B9:6D:E2:2E:68:AB
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019E1DFE61631E2E863CC64121C73CEF4C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 07E0
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: ksyxmkCrf7A-eqxZmQy3trm7sLM.roa (hash: 6/V3wIua4oerREHtxJ93cqHXKCXGaJBotU9pYRKVNog=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: ClgjvLl9FT+JR1kNH0R+r7osBk/nz4v+aYCRbrB7F+g=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:61:63:1e:2e:86:3c:c6:41:21:c7:3c:ef:4c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=db919272996c4911a776928d2a3eb96de22e68ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:05:3b:fb:31:7e:72:e1:66:9b:6b:1e:18:
aa:6a:90:af:b9:0f:9d:99:ba:dc:29:51:aa:e7:ec:
f9:45:30:6c:84:d1:77:af:05:af:f7:31:39:f7:47:
86:b5:62:2a:f5:ce:b3:9e:ea:6b:f7:24:89:44:e4:
f0:72:b3:7b:cd:96:82:ac:66:fe:93:c7:62:12:08:
de:44:f1:00:a3:df:b4:7f:58:bb:45:98:6a:e7:f4:
47:e3:c8:fa:f2:b4:da:e0:c4:59:b3:df:f6:e4:15:
07:93:be:bb:b3:3c:4c:d4:f5:e1:65:fd:55:ae:92:
c1:75:04:c7:b8:05:45:20:58:f3:93:09:11:87:e2:
35:c3:d0:75:e5:10:b1:b4:ad:4b:a4:6b:ad:48:ed:
ae:17:eb:57:0c:6f:54:1f:32:18:1f:42:50:87:8a:
b3:97:4c:05:0e:4e:48:17:ff:2b:96:79:7f:37:68:
6c:f4:5f:03:10:4e:6a:e5:50:24:1a:0c:96:a1:2f:
e4:ee:f5:fa:37:a8:85:a6:94:c4:69:0c:eb:d6:68:
70:b8:03:3d:7e:6f:ce:7d:c8:aa:11:b0:24:39:45:
28:29:39:23:32:78:81:b1:f5:5f:36:80:90:61:2e:
e2:8c:11:3d:4d:f4:62:fd:0d:80:3a:e2:e0:6a:5c:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:92:72:99:6C:49:11:A7:76:92:8D:2A:3E:B9:6D:E2:2E:68:AB
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:02:53:07:c2:60:f9:db:f2:58:87:43:fb:0f:73:cf:1f:c6:
fc:1b:12:4e:0e:3c:47:54:fc:0e:42:4d:5c:50:d9:e3:2d:06:
28:52:63:d7:e4:b1:c6:ce:04:b1:b1:14:34:7b:86:e5:22:a5:
4a:05:3b:25:ff:70:d1:52:ec:63:10:0f:4e:e0:84:1b:22:ab:
8d:9a:2f:b6:ef:7b:7e:42:18:93:16:12:43:5e:29:e6:06:c1:
bc:f6:0a:70:1a:72:d1:bb:6f:c4:b6:59:5b:07:f5:c2:3d:3e:
98:1b:c7:2c:7e:d2:f3:d5:d1:26:03:95:cc:02:af:9f:c3:ef:
41:7a:62:c7:a2:4a:ef:e7:09:7e:d7:7d:b0:ca:9b:91:cd:b9:
68:80:16:46:37:c9:59:fc:c5:0e:0f:f7:0f:03:33:dc:ee:f9:
c4:bc:42:74:5b:c9:48:46:fb:b1:e0:ed:ce:e3:74:24:c3:5a:
ee:c1:df:fe:fd:99:31:d5:ba:9e:b1:d7:3e:4f:75:29:13:41:
04:0f:9e:55:ae:19:bf:5f:f1:87:ed:3f:1c:24:52:6a:72:a9:
4a:1f:15:68:9c:60:3f:f0:66:ab:c0:4a:60:07:c4:4d:46:19:
c4:f7:90:8a:ef:ea:53:ba:36:4c:b3:b5:51:55:75:fa:95:ca:
5d:d6:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:16 2026 by rpki-client