Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: O0gqbX4k9lFs3SHKfPt2fR813qmcY/SiTo+G1fH01AY=
Subject key identifier: 3C:2E:AC:CA:72:46:2D:3D:9E:98:5B:73:B5:DA:2D:A1:EB:1E:B6:77
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 019CAB6BA30D5DF2DEB2E89DEEF3775AAF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: BI1f2_dPn6g-BjeCDOP3JI42-SY.roa (hash: goOpdDSN7DtTvPMCWLdaixax4sJ1xWqSmv8uKvzhQeE=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: 3/QOIuIEd/oSFmxdDtH8UbZXWOR5nstJKyPjiIkfRGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a3:0d:5d:f2:de:b2:e8:9d:ee:f3:77:5a:af:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=3c2eacca72462d3d9e985b73b5da2da1eb1eb677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:64:60:37:79:94:7e:82:dc:c8:bd:cf:00:
d7:95:60:62:90:f6:cf:bb:f0:a3:3e:37:88:a1:6a:
dd:81:a6:18:23:5b:29:5c:e9:64:17:98:a3:e3:5b:
09:c8:51:86:b4:87:9c:2e:aa:25:eb:d8:f1:4a:8a:
f0:da:58:00:28:12:21:50:df:8c:93:57:5a:79:31:
e5:b2:44:87:e8:34:88:77:ff:d6:8e:94:fd:3c:54:
22:79:fa:b9:a4:ac:39:7d:99:c3:cd:64:0d:78:9b:
af:77:7a:93:33:cd:fd:0d:19:d8:ed:44:7d:55:70:
13:86:f0:da:96:63:ed:83:eb:14:47:fe:5c:fb:b4:
9b:94:f0:a6:1f:16:b1:36:a5:ab:af:0b:65:52:ee:
5b:8f:a0:38:fa:0a:10:07:25:47:99:c0:8d:61:cc:
75:10:4f:c9:66:ed:58:53:82:55:f6:08:9d:ef:db:
10:c7:fa:a7:1b:88:50:1e:92:66:fb:76:c8:a2:8a:
63:7f:b1:14:de:15:fd:27:e4:f7:42:b3:7d:6d:72:
d1:b7:44:00:19:00:7f:d7:b5:a6:e6:42:e8:46:dd:
22:ad:8a:64:a5:76:13:57:ee:d0:42:36:ae:9d:68:
e1:0c:0f:43:31:a2:1c:e3:9a:58:16:9c:9e:4a:97:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2E:AC:CA:72:46:2D:3D:9E:98:5B:73:B5:DA:2D:A1:EB:1E:B6:77
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:78:0c:aa:48:3c:9a:12:d5:c3:ae:40:4e:5f:8d:e4:4e:
24:cf:14:72:d8:63:b0:90:f8:53:09:f5:58:ac:d1:a1:15:fe:
d9:d3:47:f8:51:c7:6d:4b:1f:18:1d:79:cd:aa:87:aa:2a:ba:
11:43:55:2e:82:9c:00:e5:6b:11:4e:b4:e9:eb:d0:25:28:2a:
ae:65:66:93:5f:ad:e1:4c:42:d2:87:e0:79:a6:9b:33:1b:2d:
f8:f5:67:24:e7:df:6f:c9:31:84:b8:cd:6d:b6:f5:66:8d:48:
f5:20:98:d7:65:34:9d:99:a7:74:12:4a:92:19:52:84:1a:9e:
c9:77:80:9c:1b:29:19:a9:db:b2:12:41:88:dd:d3:36:67:1e:
c6:17:4c:af:0a:29:ab:8e:95:0c:c9:fd:a6:bd:23:6c:14:a2:
80:39:f6:16:1d:09:b9:f7:a1:74:fb:2d:5c:c0:c4:d6:b7:20:
97:a7:ed:ab:95:cc:82:24:ba:bb:7f:6b:b1:43:9d:30:d2:b1:
58:a3:c4:cd:5d:15:4b:e5:87:6f:73:af:03:d2:56:08:3a:44:
37:67:3e:75:90:61:1e:1a:92:a4:75:99:43:89:b0:62:31:25:
c7:40:e9:1b:08:39:7e:8a:0b:cc:ab:04:83:3c:18:7e:de:49:
0d:a3:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:01 2026 by rpki-client