Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: 8XmSfFPXmNbSfxU5N1KYIYOPuWWyKmUwf1xFae1ltKo=
Subject key identifier: 4F:B1:81:D6:0B:F5:17:19:45:DF:55:E1:13:F8:75:E1:DF:93:8A:D6
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019CAB6B7A15E3AD04469389AEBED0A6681A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1853
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: kK3lcA8rSM4teScELlULSSGn9XxSg+MuYtxzxoT05k0=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7a:15:e3:ad:04:46:93:89:ae:be:d0:a6:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=4fb181d60bf5171945df55e113f875e1df938ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:6d:bf:45:cc:da:93:a6:4e:61:7b:68:c4:
29:0c:98:24:ad:f5:65:7a:7c:94:38:5c:9c:18:90:
c4:14:57:a3:91:37:12:6e:fc:e0:6c:bb:ad:3d:a1:
01:e4:53:21:c9:99:4c:6e:16:65:c0:e9:01:23:98:
16:a1:98:46:76:33:3f:9f:53:74:87:9a:9c:8d:dd:
7b:01:ae:71:c3:e2:e0:e5:83:59:75:eb:8e:42:ee:
de:0d:fd:a7:4d:a4:ed:8c:c3:26:61:8c:ce:64:71:
62:6c:87:ba:9e:3f:d1:3e:1f:46:81:6d:ed:68:a1:
54:b2:d4:b5:78:c0:fd:ea:65:73:b3:67:ae:46:f7:
0d:bc:5c:a3:ec:e4:65:85:b2:a2:a6:6a:26:d9:35:
56:f2:5e:3e:c4:6b:8a:d0:f8:37:25:e7:3d:26:2e:
69:c8:cf:eb:fd:39:44:83:36:f4:76:a0:8d:e7:2f:
ad:cd:a6:03:61:aa:92:b4:04:ab:6c:26:c1:66:8b:
47:25:f8:e3:fb:da:2a:d6:37:c5:99:a2:0e:9e:8e:
f8:12:e8:f8:e4:7d:64:8c:a8:6f:d2:3e:d3:71:cb:
3b:55:c8:9c:ee:c6:7a:c3:5e:5e:0f:a3:02:3e:08:
02:a0:68:7b:57:d0:8f:60:31:1d:4a:ce:3e:a5:f9:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:81:D6:0B:F5:17:19:45:DF:55:E1:13:F8:75:E1:DF:93:8A:D6
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6f:48:74:7e:d3:e9:91:2f:b1:11:5a:65:e5:b4:5f:9b:22:
9d:b8:7a:e9:91:e7:cc:2d:dd:94:29:3b:8b:ac:fa:e5:28:95:
2a:e2:84:e4:45:0c:97:c9:1a:f4:5c:56:d1:aa:6c:e7:1d:47:
a1:01:6d:cd:c3:ab:7b:6c:c2:6c:ab:68:6f:0c:5f:07:d0:e2:
c8:28:e5:87:60:40:f1:4e:d7:81:dd:06:29:1e:f1:3e:9c:a8:
51:c4:6a:f2:54:af:85:3a:22:46:f6:6b:65:93:29:e4:94:79:
c7:f4:cf:0f:71:85:9e:6b:9f:ec:60:04:a1:61:05:e9:84:43:
d2:28:bf:c7:3b:bb:df:72:41:fe:cc:98:db:bc:96:10:f6:a4:
e4:84:e3:ef:8d:ac:77:ae:92:65:2f:b2:c6:03:0e:1d:45:5d:
37:53:97:54:84:f0:9a:1b:93:e4:44:a0:33:94:4b:da:07:a2:
d5:cc:c5:3a:f4:c2:fd:7e:db:ac:5b:79:bb:2b:2d:79:07:d6:
17:2b:8a:54:7a:0d:4c:08:0d:08:ad:bc:8d:b2:8c:08:9b:0e:
b0:53:55:14:d2:2a:2c:d4:5d:30:e4:66:ad:d2:55:3e:a1:34:
c9:a3:2f:de:86:02:df:99:72:31:76:45:32:d7:30:60:fa:fe:
ad:73:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:45 2026 by rpki-client