Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: eL1LCNs106D4VqY5VEDBr1SVDwkd+3vhuaYqcr+YuRs=
Subject key identifier: 61:47:E1:3E:59:34:46:41:E4:90:1D:1E:73:45:1B:47:57:DC:2C:3F
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019D99D072727281F69F41F268164D3E55E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 16D2
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: oOlJ9VQNcv+A3J+23OL5JUuM5Ex7L/hKNHp41l2mmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:72:72:72:81:f6:9f:41:f2:68:16:4d:3e:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=6147e13e59344641e4901d1e73451b4757dc2c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:c5:44:a2:44:25:62:06:00:f2:90:3e:d7:
67:ff:0f:35:18:e8:14:46:15:33:f1:74:91:94:98:
fe:bc:9e:60:9b:22:99:c1:aa:e0:43:eb:22:be:b7:
6a:e2:5f:60:48:8a:0f:83:e2:1e:59:14:48:17:21:
39:bb:f7:3b:f1:c5:9b:15:08:21:51:97:bf:b3:7f:
30:50:48:cc:ff:1a:6e:67:d8:20:aa:a8:04:4d:4a:
9c:7a:f5:c5:94:51:13:46:5c:fd:ad:f7:d3:cd:97:
b9:b0:e3:a4:20:9d:2a:8c:39:e7:db:04:2e:18:61:
0a:db:b3:76:62:9c:36:a8:e3:c7:2d:c8:5e:08:d9:
15:b3:14:19:39:6f:2a:35:17:d5:6e:18:d6:7a:51:
ce:2f:2e:c4:01:e2:6f:2c:f0:df:37:fd:55:af:be:
3d:33:35:95:9b:7e:a2:68:b1:52:99:91:26:b4:1c:
1d:63:1c:a1:85:9e:17:93:8e:00:cc:80:78:b2:65:
85:79:3f:2b:99:50:57:53:09:24:9e:2e:e0:66:68:
b3:92:0c:79:60:bf:90:a1:68:b6:51:66:62:ce:50:
e8:cd:c6:d2:47:1c:cf:c0:fc:84:1c:03:df:8e:18:
d8:42:e1:1c:c6:9f:0f:05:12:8b:c1:66:f1:b1:c0:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:E1:3E:59:34:46:41:E4:90:1D:1E:73:45:1B:47:57:DC:2C:3F
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:94:5d:c1:06:48:64:dd:ef:a3:66:f1:96:f5:b0:8a:02:
02:d7:19:31:f4:22:4e:84:86:26:48:7e:04:7d:09:80:f6:14:
f3:62:e4:51:25:ba:04:cc:7a:39:d9:ca:af:a2:ed:0a:1d:18:
08:16:d4:14:ec:56:88:b8:38:f0:b0:56:d4:84:b9:e0:d2:72:
40:f7:4b:8b:3c:37:3f:95:9b:2f:33:cd:54:0b:73:7d:6b:0f:
59:27:07:fc:cd:2b:c1:12:fe:14:65:0e:aa:03:30:ea:fc:f6:
43:e8:a1:e3:2b:59:9f:4e:a0:93:51:a8:1e:59:df:79:bd:61:
c5:8b:eb:f2:9c:2d:d3:44:e5:b8:03:59:ac:ac:ab:48:4b:85:
6c:71:99:a3:59:ec:d1:8b:d8:ef:9e:21:14:64:3b:a1:35:13:
92:98:8e:14:00:70:68:e2:6b:68:a4:82:9b:50:ea:8d:6f:d9:
2f:e3:b9:6d:f2:e0:52:e4:2e:cb:24:62:8d:14:8a:41:7c:0c:
0f:a3:36:69:bd:6f:45:50:32:5b:6b:ae:1e:af:ee:b5:b7:a6:
d4:d3:b9:63:73:08:7e:84:5b:55:e0:99:b4:14:3f:16:8b:93:
aa:34:6a:b2:3e:4a:ba:41:8d:aa:ff:79:0b:50:2f:76:fb:c7:
82:e1:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:08 2026 by rpki-client