Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier: AQUOkRMk2do39XCfjAotW947rQMFL/fBEH9kg4c3I3c=
Subject key identifier: F4:75:A0:D0:97:DA:F7:0D:92:70:E0:2B:C4:34:E6:57:46:E1:9D:AF
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 019D2A3BE50D8976D462F922456686AC0047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number: 186F
Signing time: Thu 26 Mar 2026 13:01:01 +0000
Manifest this update: Thu 26 Mar 2026 13:01:01 +0000
Manifest next update: Fri 27 Mar 2026 13:01:01 +0000
Files and hashes: 1: 8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa (hash: AkbjUVe9rqlWL80z0FPBMQHWUds+wn6xHXbSbheZ2uo=)
2: Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa (hash: JRuLWMClb6VMX6iY+2SiZAouIeUYw7rqGE6z3zbCih8=)
3: I69HW9-2LDsB2CaVEks5_3a5REs.roa (hash: VaEGUMNsvoxTwCs+xBT9y6X6/jmAjsOlAteyyzeE/Kc=)
4: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: wpkX5zGYVsopTiaX9C5BEBhdPo9Ka2ib61x09VSr2Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e5:0d:89:76:d4:62:f9:22:45:66:86:ac:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Mar 26 13:01:01 2026 GMT
Not After : Mar 27 13:01:01 2026 GMT
Subject: CN=f475a0d097daf70d9270e02bc434e65746e19daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:01:2e:24:1c:c8:00:13:4d:e9:5d:fc:89:
ce:25:45:50:b8:aa:0d:f7:1f:96:82:80:f5:bd:d3:
4b:56:c8:b5:cb:bf:e9:32:57:0e:2e:88:91:71:30:
14:3b:1c:b6:92:96:2d:0d:dd:10:f7:51:f0:92:a8:
bc:a6:2b:50:80:ea:bf:dd:61:64:42:18:c1:d5:4e:
98:6d:d5:8b:b1:66:08:27:5c:4e:20:82:d6:02:c6:
05:a8:5e:19:70:54:b9:3e:9e:e9:a5:c7:f8:0c:a4:
6d:13:28:f0:3f:41:56:e8:c0:34:89:9b:7d:64:ff:
e9:8b:a8:75:82:b8:be:57:5f:bd:48:10:54:53:f8:
34:57:dd:26:75:ff:df:45:02:60:b9:fe:83:56:d9:
25:5c:c5:35:74:eb:1c:0c:ce:2b:d1:02:15:0b:08:
c0:59:e2:fc:b6:c5:f8:21:07:a3:c5:dd:19:e5:1a:
36:16:24:fc:cc:ac:eb:83:6f:e4:0b:44:74:06:79:
c3:e7:46:58:0f:38:a3:2d:26:d0:29:f6:52:98:9b:
d2:43:ba:81:97:b3:5a:20:a7:7b:92:df:43:af:a1:
dc:ac:0d:51:68:18:ab:e8:fc:55:ff:50:c6:0e:fb:
11:a5:c2:bd:7d:cf:b8:4d:59:66:2b:41:2f:2b:66:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:A0:D0:97:DA:F7:0D:92:70:E0:2B:C4:34:E6:57:46:E1:9D:AF
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:7f:db:e8:34:ea:2c:49:76:01:d1:fb:56:40:9a:c2:ed:
f5:1b:aa:a5:d4:f3:14:33:c4:9f:76:af:37:3c:68:ca:34:43:
86:fd:80:2d:a2:bb:63:75:60:fd:4a:d2:4b:35:15:54:ce:b9:
9c:2e:d1:8b:e7:59:c7:73:32:f3:42:f9:42:d1:02:61:b0:11:
4f:4d:99:53:37:f9:dc:19:d2:cb:63:b4:61:b1:b4:6c:76:c0:
98:e1:e1:5a:26:a7:4d:5e:ca:6a:d9:b0:81:6b:9a:c1:1b:7e:
39:de:2c:79:eb:00:0e:62:1e:5f:6a:9d:b9:ed:f8:98:83:13:
2b:40:3f:b6:5d:4e:70:a7:e6:17:12:36:55:e1:7e:75:e9:1a:
96:8f:57:04:54:43:8c:f4:8a:29:1e:9f:07:f9:cd:db:da:83:
6d:36:86:ff:7f:2c:fb:d3:f2:c2:4f:05:1b:4b:56:50:21:78:
31:77:5a:64:78:c2:ff:0c:da:25:5a:29:b5:d1:ed:b5:e6:bb:
a0:89:38:f6:5d:e1:fd:9d:c3:77:19:a6:e3:ea:26:a1:dd:25:
8f:65:e1:ba:03:d8:d8:75:97:76:15:c6:45:31:30:a8:d0:ba:
8b:9d:06:9c:cd:6b:c2:f7:a9:9e:cb:ca:9d:ca:1e:8d:f5:3d:
d0:ab:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:16 2026 by rpki-client