Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: U8ffoaNQrZmZSAi6i4T1EyiuFvF6sBCA3vPb32UO2QU=
Subject key identifier: C6:5C:30:17:66:63:77:9F:57:6D:AD:B9:A6:EE:30:DD:A0:28:91:F8
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019CA9EAA3C918D1EE705151DC6C6480F66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0D41
Signing time: Sun 01 Mar 2026 15:00:52 +0000
Manifest this update: Sun 01 Mar 2026 15:00:52 +0000
Manifest next update: Mon 02 Mar 2026 15:00:52 +0000
Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: 6CSjs1lFVctcVNbe9ZQEJh+kk5lzkSBBR2taaHeD5NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:a3:c9:18:d1:ee:70:51:51:dc:6c:64:80:f6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Mar 1 15:00:52 2026 GMT
Not After : Mar 2 15:00:52 2026 GMT
Subject: CN=c65c30176663779f576dadb9a6ee30dda02891f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:69:72:ad:52:2f:db:f7:03:44:02:05:b5:
73:17:39:c3:e2:e8:36:58:29:a5:1c:84:0e:96:99:
b8:88:cc:57:69:16:d2:75:0e:38:62:a0:f9:74:05:
1e:dc:73:7b:51:a4:13:2b:c6:d0:df:26:00:85:4d:
80:43:55:19:42:43:1f:44:eb:69:7f:39:cb:c7:74:
58:ef:dd:9b:e4:61:1c:29:b4:e4:b7:97:dd:49:e8:
c2:af:d0:45:43:9b:be:af:73:49:18:6b:c3:db:d0:
d5:fd:d7:ef:ff:8c:04:5c:f7:eb:78:63:f5:46:f1:
f9:ab:1f:f6:db:f7:74:df:8e:87:41:43:92:63:5c:
3f:2f:7d:af:2b:bb:ab:e5:a3:3a:f6:36:e0:71:26:
de:06:ae:8c:4f:86:23:34:75:42:70:5a:9c:a0:4e:
6a:16:d2:59:16:5b:3a:93:0a:a5:24:76:65:63:5d:
1b:5e:2b:13:22:9a:ed:0d:a0:14:e6:30:d8:0f:8e:
31:da:36:01:cf:c4:02:0d:f0:c4:1c:e1:fb:38:d5:
d9:ba:67:df:8f:bf:92:3b:85:be:c7:8c:0a:62:6d:
75:b7:d5:90:a6:5f:6d:6d:b6:24:9d:28:68:ef:28:
37:f3:b2:d6:23:9d:39:96:51:18:8b:0b:a4:2c:2f:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:30:17:66:63:77:9F:57:6D:AD:B9:A6:EE:30:DD:A0:28:91:F8
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:17:fd:7f:50:fb:5f:63:b0:88:3c:9d:e8:90:24:3d:ef:
67:47:aa:0d:74:e3:22:b6:23:02:2b:cb:5f:6e:25:3b:1b:94:
b4:f7:9e:ef:2c:68:06:f8:be:10:d3:95:11:d7:07:a8:c6:c5:
8d:50:4d:38:a8:6e:fe:64:04:47:85:28:74:02:36:c1:d5:14:
cd:a3:39:da:f2:fe:ea:01:bd:85:28:3c:ef:33:33:e9:92:90:
26:29:da:02:85:c1:eb:89:68:88:bc:a8:2c:60:e9:95:d2:88:
9a:57:36:6c:cb:2c:65:a6:d8:98:bb:9b:af:66:04:dc:44:0a:
90:9b:cc:8d:46:93:ec:ba:5d:4d:be:25:d4:f0:9d:67:5e:d2:
a3:5e:ed:7f:f1:12:e6:d5:f4:04:c1:d6:d6:07:86:53:48:ae:
fc:f0:13:3f:8c:07:e2:88:17:57:66:42:75:26:54:5d:e2:82:
c1:37:ed:f5:b6:20:43:a4:26:0c:a4:6b:84:29:89:23:a1:78:
90:49:a9:eb:64:8a:7c:7d:0c:f8:08:c7:20:5c:52:b0:48:84:
1f:58:ab:10:ca:c6:75:f2:c1:b3:d2:e3:16:57:f1:2e:f5:14:
62:69:dc:49:5a:e7:71:9f:ff:33:7e:6c:26:e9:77:cf:aa:8e:
09:c0:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:39 2026 by rpki-client