Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: PG9+wjXVGuZCkLidwE6WpDyqWcm7jJ6K9lrpCYlL7TU=
Subject key identifier: 6E:60:43:78:0A:32:A9:9E:FE:65:7C:F2:2E:B5:54:B2:D6:0B:F7:8C
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019CAD5966DF195CBC2F3519D180BE5BFB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:43 +0000
Manifest this update: Mon 02 Mar 2026 07:00:43 +0000
Manifest next update: Tue 03 Mar 2026 07:00:43 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: UQaHEMImmzjoa9XR1R2tEjfGWUZsFj8fCRoumGv89+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:66:df:19:5c:bc:2f:35:19:d1:80:be:5b:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Mar 2 07:00:43 2026 GMT
Not After : Mar 3 07:00:43 2026 GMT
Subject: CN=6e6043780a32a99efe657cf22eb554b2d60bf78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:b1:ac:5c:b0:7b:11:e6:ec:e0:26:48:59:
48:7a:68:bc:f7:3b:4d:20:cf:67:d6:2c:84:1d:ca:
ed:00:0e:38:a6:b3:6a:3b:1a:13:1f:30:65:c5:f5:
85:ef:ed:1c:98:67:9a:80:70:d2:7f:3c:79:67:94:
0a:b9:cd:78:f0:a9:da:95:37:92:f5:55:ab:24:a4:
17:b2:d3:5a:8b:b4:bf:45:6a:68:e5:c7:e0:29:cf:
d2:63:d9:4a:48:07:80:ae:42:de:9b:db:d9:da:91:
cf:3f:ac:a9:ad:73:2d:f1:69:51:e5:62:66:f3:47:
28:f9:ce:b0:99:32:1d:a4:c5:3e:7e:d3:3a:d3:ed:
e3:14:2a:34:5a:e9:ae:9a:b9:45:1c:1f:a2:5a:9b:
3b:92:1d:1f:b4:b9:b2:8f:4e:ae:99:dd:a6:41:62:
44:d5:9d:b1:ef:81:cd:18:1e:87:b4:e6:31:e8:82:
d7:7c:3b:8a:48:15:e5:8a:30:4d:f9:d9:4f:4f:b2:
a7:0d:f9:08:5a:31:26:34:33:97:a6:20:fe:c4:13:
ff:c1:9b:ed:64:59:16:e9:25:af:e4:9e:06:31:cc:
5a:e3:8b:d0:b7:09:cd:34:c8:82:11:b4:92:4c:02:
7f:b0:c5:26:06:7e:e6:8d:22:cd:cb:bb:c3:00:96:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:43:78:0A:32:A9:9E:FE:65:7C:F2:2E:B5:54:B2:D6:0B:F7:8C
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:36:1a:5d:1b:82:dd:ea:01:a7:7d:d5:7a:83:03:46:88:dd:
9a:8b:e5:66:92:63:f0:20:24:8b:1d:33:9d:de:b0:18:e1:2c:
29:9b:87:72:ab:9c:3e:74:2c:2c:5e:55:95:49:d4:6b:be:29:
f9:bc:8f:63:f3:63:6d:e9:8e:a4:e1:c8:99:53:be:7f:dd:31:
cd:a5:b9:31:0b:a4:f8:5c:e7:3f:df:f9:6e:86:d1:3b:8e:35:
de:7a:67:ee:90:bb:e0:77:84:f8:53:7d:5f:83:bd:5a:c6:20:
2b:58:57:d7:b8:6a:81:e4:60:c5:4a:91:8c:3c:24:f2:00:05:
3d:80:58:d8:60:0a:df:24:9d:cd:ac:e5:12:57:09:86:ed:5e:
e6:05:95:5f:db:df:d4:c0:1b:c8:ae:91:c8:1e:04:21:0f:58:
2b:79:90:e5:54:60:f8:6d:14:90:0d:5a:49:91:0b:cf:d5:ab:
5b:dc:ea:22:fb:eb:95:1e:f5:bb:98:16:1a:3c:a9:5b:02:e9:
6b:21:2d:06:c0:53:12:c9:95:a5:e8:fa:49:fd:df:50:ea:cb:
24:8d:9d:bf:d8:13:44:55:cb:cd:de:ce:f2:42:09:16:46:ca:
33:47:dc:32:3d:91:c7:a8:6a:96:39:36:38:8f:a6:a5:f4:4e:
16:1d:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:57 2026 by rpki-client