Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: FFxi1uKJ4AXcCz3gKxaC+TIbnnqEEjMTwUpHpNPDYSQ=
Subject key identifier: 72:A1:5C:CB:E3:49:23:4B:72:31:94:C0:55:10:91:0F:5E:88:E1:35
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019D2AAE95BDA6B1DE4BA7CBBFCEDAE3C828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0762
Signing time: Thu 26 Mar 2026 15:06:17 +0000
Manifest this update: Thu 26 Mar 2026 15:06:17 +0000
Manifest next update: Fri 27 Mar 2026 15:06:17 +0000
Files and hashes: 1: ksyxmkCrf7A-eqxZmQy3trm7sLM.roa (hash: 6/V3wIua4oerREHtxJ93cqHXKCXGaJBotU9pYRKVNog=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: GJxw9oJT79AHxvRPMiCuAhtRCMIrU5K+V6+CuRZi97Q=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:ae:95:bd:a6:b1:de:4b:a7:cb:bf:ce:da:e3:c8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Mar 26 15:06:17 2026 GMT
Not After : Mar 27 15:06:17 2026 GMT
Subject: CN=72a15ccbe349234b723194c05510910f5e88e135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:bf:11:1f:48:4c:ea:b0:ae:53:51:c7:60:
c4:0c:df:b1:7b:8b:47:22:b7:26:a3:c3:c1:f6:17:
d0:96:b4:db:13:1c:63:cf:15:a6:f1:15:6e:18:8c:
b8:0c:5d:11:cc:73:23:dd:8d:d0:58:5c:3f:a5:e3:
8f:cb:9f:08:2a:3b:1a:3f:3a:e3:ac:f2:0e:00:82:
6a:f6:5a:0c:0f:c0:53:48:14:eb:48:fc:c9:90:e0:
ea:b7:34:ca:be:22:34:98:46:7f:c2:62:39:77:c2:
88:68:b8:7f:55:0c:2c:7e:ad:33:6b:4b:4c:96:33:
16:78:be:f3:c8:37:c0:b7:47:dc:57:62:2c:ed:32:
e6:fc:ac:e2:9f:45:30:80:48:47:c2:d5:f0:fd:80:
95:bc:44:20:b2:13:84:4d:b6:b4:17:5d:3d:b2:d4:
d3:d6:ed:2f:3f:00:19:17:22:3a:44:19:80:f6:9c:
d6:d3:f7:c6:a2:5e:1f:2a:3e:fb:99:29:c2:82:fb:
b6:77:be:88:3d:d9:be:3f:35:48:f8:d1:04:6f:2f:
ca:a6:f5:f6:50:3e:80:c6:17:a8:ce:b2:6d:93:cd:
76:e6:ce:45:a7:ac:0a:0b:24:de:8d:de:35:44:39:
9c:ee:76:7e:b3:93:ac:3a:d8:be:5e:aa:63:c8:f6:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:5C:CB:E3:49:23:4B:72:31:94:C0:55:10:91:0F:5E:88:E1:35
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:46:01:70:de:5f:a2:cc:85:dd:1f:51:de:ea:16:e0:75:79:
eb:a0:c7:d5:53:e9:8e:97:81:c6:d9:9f:14:f0:2c:f2:fe:9e:
ff:d5:32:a9:b2:bc:63:a6:8d:de:2d:a8:df:01:7c:ec:e2:96:
e8:06:f8:7d:65:54:8d:df:b0:fc:f1:58:4a:2a:8b:14:08:d0:
b8:c6:95:d6:ec:f7:25:dc:1b:38:43:a7:4c:a4:cb:b3:c3:b3:
e1:40:2f:ac:07:b6:77:a3:1c:fe:ad:80:03:39:b6:5f:a8:37:
43:06:f7:0a:d2:8b:bd:f6:60:57:16:c8:bf:45:6f:15:04:22:
62:0c:af:d6:99:45:01:0e:71:c4:5f:74:e5:74:17:00:d3:b0:
f0:b5:0b:3b:73:39:96:62:5c:c3:77:bb:d8:47:19:3a:66:37:
16:07:67:28:b7:98:da:09:6e:e1:6b:d3:db:fd:ea:e9:58:52:
49:9a:71:e9:46:5b:d0:25:a5:e7:e7:a9:a5:5c:c8:19:e4:55:
2f:96:c4:b6:c7:75:52:81:06:8b:d8:f0:42:0d:54:07:37:f0:
95:fe:45:23:81:6d:98:eb:a9:8f:31:50:de:43:20:d0:09:c3:
1c:8f:e0:17:46:13:be:09:8e:a8:49:1a:b0:c5:39:00:f6:9f:
ee:12:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:08 2026 by rpki-client