Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: gnofe3cnmOlHaQrS6pqXa2N3CjS2gk5CvDEvD6Otdd4=
Subject key identifier: 9C:43:67:0B:14:B4:FA:BB:23:B0:E7:C4:2F:1C:79:F6:FC:C5:78:BD
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 019D273AE58937E10B07BAD4FD01E92EF396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 1515
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa (hash: 0J0gMYHWM02/yJR/SUWZtkK9fwND2HKIpHaXNLv/HHg=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: 3E3Ys6GiSysnGDSSzXG1FX1iicWf7TXyBpf8itQsKSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e5:89:37:e1:0b:07:ba:d4:fd:01:e9:2e:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=9c43670b14b4fabb23b0e7c42f1c79f6fcc578bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:f6:7c:9c:cd:b1:6f:24:75:29:87:06:ae:
61:ee:37:20:51:7f:ec:49:64:a1:d5:88:24:bd:9e:
78:72:b8:a8:d5:fb:f2:ce:07:b5:7e:24:12:3d:56:
6d:fa:06:57:23:ac:52:e3:f6:2b:f5:15:d3:81:ad:
5f:8c:1e:15:a2:48:85:f0:7a:b5:9c:3f:5f:4d:cd:
72:31:6b:7d:bd:95:37:67:98:f8:5d:55:e6:2f:54:
70:79:9b:be:09:27:7c:47:db:66:69:81:8c:15:a1:
f3:e6:44:f1:05:bc:f3:24:ea:eb:ac:0e:26:0f:ec:
e8:f7:81:0e:d8:fc:b6:b1:2e:4f:44:ea:9f:07:02:
37:c6:88:cf:98:a7:2c:4e:52:09:2f:01:c4:50:59:
d6:2f:89:c8:88:63:81:a8:df:07:dc:5f:8b:f3:e0:
94:8d:20:8b:0a:e1:2e:fe:83:0b:e3:7f:50:bd:39:
90:01:9b:ff:24:20:a4:de:64:a4:8d:3e:b6:d6:31:
c0:3b:41:03:5a:ef:be:0f:72:33:d7:36:ea:6c:8b:
d7:71:7b:46:b9:77:9b:7c:82:7b:9b:18:9b:72:0f:
a0:68:a1:ab:05:0e:48:14:51:8d:2e:ad:d1:8e:7f:
f9:c1:f8:5c:21:05:8b:33:41:a5:34:c2:5a:67:03:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:67:0B:14:B4:FA:BB:23:B0:E7:C4:2F:1C:79:F6:FC:C5:78:BD
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:ad:94:9a:81:a8:2e:0a:0a:28:8b:ff:d0:b2:ff:7d:6c:
c6:bb:6b:55:e3:26:20:2e:20:b7:1c:c4:75:5e:7a:b4:b1:c4:
1b:ee:84:3d:c5:b7:dc:90:b4:80:5c:9d:3d:63:4a:62:89:00:
a7:d4:ee:07:11:e4:c4:43:a3:97:bc:69:0d:b6:91:0b:3f:ad:
98:5f:a5:4b:e3:4e:93:e9:49:4f:d2:0e:7e:64:6a:51:04:f8:
d8:5c:8e:43:91:e9:32:f7:a0:3c:a3:3c:a8:01:3a:1a:4f:8f:
31:9d:4b:20:ab:be:ad:49:aa:b9:9a:77:3e:f5:48:67:e5:75:
65:b0:db:7c:c9:08:12:fc:f3:85:42:0d:b9:e3:40:bf:44:2f:
61:05:65:73:4a:14:59:a9:4b:bb:3a:33:4f:f5:3e:77:65:ff:
10:20:a9:34:8d:ae:95:44:f0:73:03:47:22:d6:99:5e:04:ff:
9b:a3:43:49:c6:ef:2e:15:28:ce:ce:b3:cc:34:56:0c:f9:34:
30:87:71:95:49:98:df:4a:df:92:ec:1b:4b:54:6e:e1:16:49:
98:17:ad:83:31:b8:f3:f4:f6:4d:c2:48:3d:ed:fe:2e:ab:b4:
f8:f1:84:2d:bd:ce:75:fc:d5:98:dc:21:f2:98:12:93:e5:3d:
dd:43:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:38 2026 by rpki-client