Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: uH9CjfrwIn3LaUM2J8q7cyqYy66OTBUsM6pMVvB3bPo=
Subject key identifier: D2:7C:B3:D1:D6:B7:C5:02:F2:6C:16:70:2F:74:C7:20:42:7F:BA:D7
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019D9A06B5A8A7F58C692B47E06AD37E9967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 06:00:24 +0000
Manifest this update: Fri 17 Apr 2026 06:00:24 +0000
Manifest next update: Sat 18 Apr 2026 06:00:24 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: uD+5FslE4x9qxhZ3acCXBI26tz24L29MvxRuqSEHVuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b5:a8:a7:f5:8c:69:2b:47:e0:6a:d3:7e:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Apr 17 06:00:24 2026 GMT
Not After : Apr 18 06:00:24 2026 GMT
Subject: CN=d27cb3d1d6b7c502f26c16702f74c720427fbad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:e4:12:78:7a:e6:dd:89:8f:fe:e7:bb:9c:
6d:55:f4:84:56:b5:84:fd:c8:93:5d:58:13:60:67:
24:fe:99:ba:da:e9:c9:4d:97:34:33:33:7b:4a:73:
e8:4a:6a:0a:b5:e5:2a:59:79:f3:ad:f3:69:cc:21:
c0:15:15:08:90:6c:35:92:41:c7:62:57:a4:f1:11:
03:7d:ec:30:c7:ba:dd:2d:ea:67:06:3e:17:ec:39:
50:7f:07:6c:2f:62:0c:9f:7e:10:11:92:44:ca:ba:
0b:ff:00:82:cf:09:60:e3:47:aa:e0:22:fd:43:8e:
8d:c2:ec:9d:b4:f3:4f:9e:98:dd:90:17:ba:93:1e:
38:1e:47:48:64:27:ce:92:0b:0c:b9:a7:a8:54:fc:
1e:af:e2:da:db:99:75:f4:81:09:a0:df:d7:a4:1c:
a0:4c:bd:7a:cc:f3:fc:2e:02:c7:40:a3:93:8d:f4:
33:34:02:a6:a2:ce:e8:6b:85:f0:cf:a5:4a:1d:0e:
c4:a9:7f:9c:79:7d:95:22:1e:59:98:54:07:f2:c4:
e6:c9:0b:88:42:40:fe:17:fe:01:7d:db:37:d1:5d:
80:a9:aa:98:81:bb:9a:15:b7:ea:99:de:db:c3:b8:
0a:23:15:5b:72:8e:af:b6:0e:8b:a2:be:82:f0:69:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:B3:D1:D6:B7:C5:02:F2:6C:16:70:2F:74:C7:20:42:7F:BA:D7
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:ad:3c:d2:8e:c6:27:bf:e4:3f:fd:17:f5:b7:c9:88:40:
37:ac:9a:f9:79:84:fd:45:95:38:49:37:0c:69:59:37:4a:52:
8d:06:42:92:05:d6:76:0e:58:5c:e0:bc:b1:23:d7:a1:80:12:
a8:b6:c6:97:5f:5e:33:a1:73:4e:d3:80:7f:30:cf:60:ce:55:
5d:c7:0b:cf:e8:e3:2e:fe:cf:a3:e4:f1:6d:6c:28:e1:2a:cd:
68:af:5d:d8:d5:f7:a9:5a:07:fb:7e:e1:2f:82:c2:15:b5:34:
67:51:c8:a3:5f:69:35:68:20:a6:b4:8e:7e:15:33:a1:88:bb:
25:73:b7:94:e6:52:d9:89:9d:4c:7b:9c:03:23:f8:a7:ba:76:
e8:8d:24:37:e2:f9:eb:21:db:79:f5:a0:ef:2f:23:3e:48:c7:
79:c9:89:90:fd:d2:6a:84:15:c2:a9:65:9f:3e:f4:f8:e1:8b:
4c:41:72:f3:55:87:5d:82:4f:b9:df:5d:67:10:5c:76:3d:0c:
0d:dd:32:5d:3a:b8:77:23:5c:3e:fc:e4:c4:ff:63:a0:17:c5:
e8:6a:75:24:6c:bf:7b:81:a5:c7:bc:da:b3:43:46:6e:35:e7:
5f:49:b3:33:76:0e:4d:f1:c4:a9:55:7c:15:f2:e4:2e:d7:45:
d8:97:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:55 2026 by rpki-client