Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: Yevyh9Ridkq/sGaibFWvoLxcBYUqvKAc0H8SmOstPYw=
Subject key identifier: 29:5D:1B:4C:93:F0:99:A3:F5:49:9F:FC:EC:D8:DB:F2:FA:23:95:28
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019D2A72C06192A1A8DAFAC2B05FA45B5F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 158A
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: iNpv9MqZU5XCCluRpDsureRiscQNooYkdyx3wtX2TCM=)
2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c0:61:92:a1:a8:da:fa:c2:b0:5f:a4:5b:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=295d1b4c93f099a3f5499ffcecd8dbf2fa239528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:b6:da:51:19:2e:52:e4:df:a0:d5:dc:79:
2f:fa:ac:e9:27:0c:29:50:c2:29:32:2d:7c:05:71:
3a:b5:19:5b:fb:cb:db:6d:28:76:ac:ef:a6:4e:9a:
3f:d3:2e:58:d9:c5:f8:eb:88:0c:af:5f:cc:d2:27:
0a:98:f6:08:7d:b9:75:21:e2:0b:08:1e:a7:77:5b:
e5:fe:5c:9b:20:99:e0:9d:e0:0c:ac:80:78:90:a3:
b9:cc:ca:54:ee:65:f8:97:1f:ed:94:aa:10:29:b0:
18:3f:70:ad:72:cc:74:1e:f3:69:c9:8b:56:e8:02:
07:2e:ae:55:27:34:09:97:b9:74:72:09:3a:10:3f:
30:34:cf:03:4f:11:bb:ce:f8:cc:21:d8:b2:a8:05:
2f:ec:82:be:de:50:cb:4d:60:5d:4a:d5:b8:e2:1a:
4a:f8:64:9f:cc:6b:ce:32:45:4d:13:1b:05:ff:76:
0a:ec:b0:d8:95:81:02:2c:bd:6d:c7:df:87:55:c1:
10:ff:51:68:35:ac:d6:99:0b:33:2e:30:e3:ce:bf:
4d:07:ed:e9:be:ee:59:7e:34:4b:4d:77:79:88:95:
bd:ef:bb:ac:44:85:01:85:05:64:3a:f5:28:a9:5f:
ba:3c:af:d3:5c:f1:42:2f:d2:bd:60:53:26:b1:2e:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:1B:4C:93:F0:99:A3:F5:49:9F:FC:EC:D8:DB:F2:FA:23:95:28
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:2b:55:3f:8b:60:a4:ab:e2:bf:c3:0e:9c:1b:fd:74:c0:
03:d9:db:18:da:d4:66:cc:f7:9d:1a:30:fb:0e:f4:f4:86:8e:
72:51:5b:8a:30:2c:25:a3:ae:db:be:84:59:ed:56:43:74:e0:
c6:f8:3c:25:93:7b:78:6a:0f:fc:28:48:7c:e0:cb:e2:0b:bd:
de:39:a1:93:31:8a:38:bf:af:3b:eb:47:bf:1e:43:5b:a4:e5:
f7:77:cf:d4:7c:c3:64:68:0d:37:99:36:bb:8a:27:66:14:09:
af:41:05:64:a7:27:23:d5:ed:cd:b4:ae:0b:c0:6b:07:c5:2d:
1b:5c:29:be:5c:bb:e9:ff:92:e6:cd:b3:91:6d:cd:24:db:cd:
58:33:20:69:92:6c:07:dc:da:c7:4e:7c:be:18:3b:6b:66:9e:
f1:7c:5d:94:1b:fc:51:95:9f:75:00:dd:6d:af:91:ab:78:e3:
a5:97:75:e0:63:9d:f7:73:be:01:34:6d:31:97:17:20:ea:e1:
99:1b:22:b7:99:8a:11:b7:fd:8e:0a:67:9e:56:93:39:14:de:
bf:56:a9:5c:81:72:92:05:28:9f:08:de:63:c9:e0:1b:41:d2:
97:bb:88:65:c7:c1:07:2e:f5:7d:e3:05:e5:69:47:94:fa:9a:
9c:02:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:39 2026 by rpki-client