Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: RalLo+SWbSyLu/S90EcX4PoOc7lftT9EWMuwNonMnng=
Subject key identifier: 6A:49:18:7E:A4:6E:BC:A8:39:B1:EB:DB:7F:F1:69:5A:11:65:AA:21
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019CAA58FB7C1870043CF944BF48BAA3389A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 135D
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 9PmCAKMM7Gx59ZxoYK2IciFfbIk.roa (hash: 3XM8c/6mZWGuvlojek43syl+Uho1Ahf7pi/fCF9cLlI=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: LnmmyDgmcH7Bon+/78W0v2k5BLd4QKNrQC7dkPLyFpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fb:7c:18:70:04:3c:f9:44:bf:48:ba:a3:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=6a49187ea46ebca839b1ebdb7ff1695a1165aa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:61:cf:46:70:81:e9:b2:ba:3f:cf:f1:0c:ba:
61:ed:c6:3a:c1:d0:77:56:b7:2f:f8:c1:d5:08:cf:
e3:4f:12:00:45:3b:72:98:8e:43:eb:a0:fc:7d:c2:
ed:11:b1:6b:cb:95:25:8b:23:fe:d5:5e:6e:86:6c:
48:42:de:dd:9c:1c:04:28:9e:f1:bd:56:ff:8a:e3:
f4:b0:4b:b6:42:e9:43:01:73:f5:a7:72:36:c9:10:
8c:74:86:cd:a5:99:9c:7f:00:32:9b:b5:51:f7:a1:
e2:a4:09:4a:22:a1:84:57:f8:15:2a:37:88:31:6d:
47:48:99:9f:a4:c5:1e:56:e7:2e:30:52:19:06:ca:
07:7d:d4:23:f9:8e:06:1a:e7:54:3e:1a:64:3f:5f:
1e:8c:d7:ed:86:98:b0:4f:33:05:54:b4:81:ef:1d:
6d:cc:26:a0:ca:e1:56:6c:3e:85:a8:00:ef:4e:a6:
5c:0f:7a:5b:8d:d8:f8:8a:f2:3e:96:3f:15:51:5c:
68:50:a2:ea:e8:9f:54:20:d7:05:e9:45:67:d8:bf:
73:dc:6a:79:db:16:65:47:8f:fd:24:48:41:0a:80:
cd:bb:37:39:9b:59:f8:0b:1c:a7:83:2e:5e:ff:88:
ac:e8:22:8d:4f:53:b9:6d:53:89:91:84:5f:29:84:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:18:7E:A4:6E:BC:A8:39:B1:EB:DB:7F:F1:69:5A:11:65:AA:21
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:f7:e6:5f:b3:3a:9d:41:8a:db:db:73:82:1b:77:1c:fe:
47:bd:f7:6b:b5:79:9f:59:bd:04:9d:1b:c7:ca:d7:5c:7d:f9:
ee:a8:a9:63:10:46:94:d3:a1:ea:2d:5d:e5:0b:c9:25:1c:bb:
49:3f:27:0b:4f:93:d2:ca:c7:2d:80:f3:5c:29:5e:38:8f:23:
1d:15:4c:b4:2a:46:b9:cd:57:3b:bf:23:43:28:b9:dd:87:92:
e5:92:3d:e4:72:3d:20:b8:71:a0:3c:69:ad:fc:a8:bc:d1:59:
c5:b1:59:05:7f:5e:ef:c6:b7:2b:b2:39:22:86:85:80:0a:47:
ab:e9:fb:a9:fa:2a:66:7d:e3:de:95:0e:b5:0f:33:c4:a0:d4:
0f:18:b4:22:fb:39:59:d5:48:c2:b4:58:70:18:a1:cc:49:92:
5b:22:0d:ce:ff:2f:90:60:c1:2c:80:ac:66:20:5a:fb:da:92:
1d:6c:b6:53:a3:0d:1c:fb:e5:30:7d:60:bd:71:ff:7a:46:31:
e3:b1:ae:61:9e:1a:55:a4:44:42:37:71:5c:df:da:2e:5e:60:
ee:bb:30:30:b3:58:e9:31:d9:71:ee:20:a5:da:3c:33:c9:44:
d2:10:23:eb:52:d0:9d:2e:3c:5a:8f:9f:8b:73:79:cc:f6:d9:
d8:9b:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:00 2026 by rpki-client