Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: ULk7HOf51J+WMNxDqQj7WSPF8+au0CVYWBQT0j+Yq+8=
Subject key identifier: 5D:E6:62:66:AC:91:56:72:7A:1D:F9:24:6F:59:F4:C2:48:DD:46:A2
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 01A0DD60D31A0FA2BF88D2FB06CB8A666296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 0658
Signing time: Sat 26 Sep 2026 11:01:45 +0000
Manifest this update: Sat 26 Sep 2026 11:01:45 +0000
Manifest next update: Sun 27 Sep 2026 11:01:45 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: 5XfVwWNnnuOosdPXPjFBvuW2Xk0ADafn4NWb9vKyYMk=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:d3:1a:0f:a2:bf:88:d2:fb:06:cb:8a:66:62:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Sep 26 11:01:45 2026 GMT
Not After : Sep 27 11:01:45 2026 GMT
Subject: CN=5de66266ac9156727a1df9246f59f4c248dd46a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:c8:40:78:fb:84:58:e8:dd:8a:41:be:78:
f3:0a:36:c8:c6:14:e1:98:74:64:fc:d5:2a:68:86:
af:00:e4:2d:97:88:5a:3a:0c:73:13:5d:0c:ec:c2:
dc:75:27:8c:b2:6b:db:44:24:57:f2:40:17:0f:ee:
84:f1:7b:e6:19:c9:c5:de:49:15:00:0f:a0:4a:81:
0f:21:db:1f:b2:b2:10:81:8e:cc:ff:b3:63:6c:a8:
03:42:51:31:70:8b:8b:6e:85:32:a9:f8:ab:91:93:
f7:fe:1b:2e:6d:f5:be:de:9d:dd:61:53:b4:27:8d:
1a:fe:8b:0f:e8:28:48:fe:ba:04:fb:9d:9f:92:87:
87:28:e2:a0:11:ad:f2:e2:f3:74:fb:59:58:64:87:
b0:9f:69:32:f0:bd:fe:7c:f9:d9:40:4c:f0:84:87:
50:56:ba:02:06:25:75:ae:62:c8:25:73:8d:d0:b1:
8e:bc:4d:f0:e2:d0:39:9a:0c:77:ef:d5:6a:0d:3d:
89:9e:b4:4a:ce:f6:22:35:16:ca:48:37:3a:86:93:
f9:e4:db:ed:e3:c1:e4:7a:fc:47:a7:e5:30:6b:5b:
57:54:cc:00:e2:cf:39:d7:4d:1c:05:0c:4d:6c:59:
2f:9b:39:4a:89:4b:7d:1a:9f:d5:7b:72:53:60:8f:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:62:66:AC:91:56:72:7A:1D:F9:24:6F:59:F4:C2:48:DD:46:A2
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:6f:61:48:d4:c7:b8:96:b5:8f:e7:a8:00:d9:69:a4:e1:
76:6a:2d:20:1a:dd:f1:cc:15:3b:7b:da:e3:f0:57:25:3c:ae:
93:4e:e6:bb:fd:1d:24:8d:a8:a3:e4:c0:dd:80:a2:fe:d8:54:
2d:72:54:ce:d6:e2:eb:69:34:15:31:4c:24:20:9b:78:62:5c:
7b:26:7b:4c:9b:fe:27:d7:fa:e8:c1:e5:c8:41:11:13:2c:83:
80:fb:41:c9:85:d8:21:59:14:e5:3d:5a:28:da:c2:e0:8d:15:
ea:9d:96:ba:db:44:80:95:5f:07:b7:95:a5:a8:a4:34:35:87:
c7:8d:e5:55:61:79:8e:83:79:24:f5:fb:d0:4d:b6:b7:af:21:
f8:10:bd:be:cb:80:5d:89:d7:5d:05:0c:07:52:aa:a9:80:f4:
9b:a7:5d:31:14:ec:22:08:07:15:5f:0e:69:6e:6f:e8:97:e0:
a3:74:ab:a1:1f:25:1f:01:d4:de:68:d9:84:aa:9a:5c:7f:72:
00:96:7a:42:1a:89:fa:e8:20:92:d0:04:50:4b:f1:6f:7e:f0:
88:29:f2:57:6d:3a:c5:1a:0a:b5:76:ae:37:da:41:75:98:89:
8e:ec:15:b1:87:63:0e:01:ed:c4:a3:b3:e4:a9:2d:85:f9:54:
bb:40:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:04:53 2026 by rpki-client