Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: P0AYTtlJjXRv0pUOHMaxARWz70RmvYkhfARbzCu37yg=
Subject key identifier: C5:51:08:F7:4F:25:98:85:DA:3F:44:60:29:43:6C:AC:4A:67:16:A8
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019D2A3B55E4B8993BC46041AEE4F81D52AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: DE6qzK8ZbTdn2sj6nzXv59atG6c.roa (hash: 9YeaePMUl74JdFaiRSC0VTGbzx1hAN55igQj80uecEQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: SUBxWb+Zvh1VArvXrB1l01lJLyHHnrSauMZOSt2/GYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:55:e4:b8:99:3b:c4:60:41:ae:e4:f8:1d:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=c55108f74f259885da3f446029436cac4a6716a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:63:40:fa:9a:63:37:2d:cc:bf:59:38:29:
13:74:a2:e8:5c:dc:32:bb:b7:d8:ec:9a:78:6e:27:
65:c7:8d:52:b7:64:fe:1e:d1:a1:16:7c:5e:5d:b2:
7a:49:0a:82:88:bf:2c:0e:c1:63:3e:7b:e4:b4:78:
29:96:d2:3e:05:65:19:17:79:0c:37:5e:c0:b0:b9:
79:2c:e0:e0:bc:39:26:7c:85:7c:0e:0f:e0:1a:90:
e3:5b:5b:62:a5:a8:d9:4c:25:95:10:d3:fe:6c:6e:
b8:52:45:b5:ee:20:a7:66:14:72:4b:b4:42:ba:20:
dd:e1:8c:56:83:bf:4e:fe:e9:47:46:90:42:4d:c7:
c6:f7:85:d7:8e:48:06:54:98:35:d5:86:fe:45:e7:
78:fd:12:94:37:7e:d7:b1:ff:b6:09:89:fd:bf:ea:
b5:42:77:57:ab:1a:73:48:31:51:38:b4:eb:9d:2f:
4e:c1:45:30:a8:ba:32:ff:d9:f2:4f:31:f5:6e:22:
49:52:a8:3a:45:79:43:47:95:1d:88:b5:22:92:30:
f5:9e:7a:62:75:2b:c6:25:f1:a7:01:87:03:31:8d:
d8:19:ad:a9:d2:d4:d2:06:5d:94:ac:1e:d5:8e:12:
21:5b:96:28:bc:92:a3:c1:c0:dd:de:dd:c5:24:58:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:08:F7:4F:25:98:85:DA:3F:44:60:29:43:6C:AC:4A:67:16:A8
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:01:02:9d:2c:fc:8e:95:06:95:36:2e:27:e1:d4:ef:6f:
5e:c5:f9:d0:c9:09:2d:fb:81:3d:85:ed:02:30:94:2f:08:51:
9e:e5:a6:5b:ad:a1:dd:73:9d:3d:99:e1:3b:03:40:a4:1c:fc:
34:5e:d2:1f:96:03:c4:cf:0c:42:7b:a9:f3:d2:e6:a8:8e:be:
9c:97:69:3e:f3:e7:c1:6d:9c:22:c6:ca:cb:53:b6:ad:44:32:
d5:89:8b:44:11:71:2d:27:db:38:cb:f6:49:c4:0b:5b:69:d8:
71:19:bb:c2:1c:54:90:ce:ec:ab:bf:68:45:5d:53:9a:00:39:
4c:0d:36:96:08:de:13:f8:d9:99:54:c0:1a:39:ad:e1:fc:e2:
17:00:8e:7d:77:30:b3:fc:f6:36:a8:22:f7:dc:76:4f:07:0b:
da:7e:a2:e7:91:a7:42:1d:96:43:8f:58:61:c4:fd:db:76:64:
8c:5b:78:fd:8c:bb:67:ab:e4:ab:16:2f:94:af:24:44:1f:92:
2f:0e:48:af:1a:b4:59:02:84:6c:e5:4f:26:d4:69:79:70:24:
4f:b7:79:a9:ed:63:72:a7:fc:35:03:5b:90:8f:f2:46:45:46:
76:bd:97:b6:36:dd:ab:82:1b:aa:7d:e5:e9:b5:8d:63:ac:f8:
66:9d:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:23 2026 by rpki-client