Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: GEVpLE/Ldqv5erreP2RsKbmfWfg127yQxlwaPbybT5Y=
Subject key identifier: 24:0E:EE:34:E2:86:FB:BD:B1:AB:87:5D:24:DB:F4:E8:D0:AA:BC:82
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 019CABD9E8CA7A895904C59A298146448E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 17EF
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: eeohtYRFJrWVG9fBhV9aZ0-UtVA.roa (hash: /gb0Y6jcS+z2smX0iJ5MevaKI/KMuFO1F7ZUjAjvbi8=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: 4dyFIYwxGjofun6YtXyJhO+crEjwOn02KqWW3mfCpMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e8:ca:7a:89:59:04:c5:9a:29:81:46:44:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=240eee34e286fbbdb1ab875d24dbf4e8d0aabc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:78:ad:72:e0:cf:cb:0b:2d:4b:2d:54:d9:
2c:42:80:8d:02:8a:22:df:24:2d:ec:b1:62:c6:4a:
8f:d1:b6:97:b4:ca:12:e1:cb:76:3e:61:e0:56:c3:
d9:19:1d:8b:58:37:bd:b1:ce:c4:09:f6:0d:31:cc:
98:6a:6a:dd:dc:28:0e:62:f7:27:58:65:30:b2:24:
b6:70:27:91:35:88:7e:60:c6:aa:aa:a3:80:df:b2:
b4:aa:4c:08:c1:94:bb:96:5d:79:31:9d:cb:35:29:
f7:b5:12:1d:89:6d:c1:5e:10:5d:42:47:90:03:45:
db:ec:01:b1:4b:01:e4:d0:c5:3a:7e:0c:81:0a:2f:
7e:8b:45:3e:c0:86:10:c3:0c:ab:86:c4:f8:3d:d4:
0e:a4:2c:56:4d:c0:c0:97:63:64:6e:b3:17:f1:2b:
99:0d:fd:71:19:aa:b2:ba:64:ca:9e:4d:3f:5f:04:
6f:fc:6b:d9:08:c3:6d:4a:e9:3e:4a:b7:85:4b:07:
e3:cf:d8:d3:67:57:5d:a3:9b:50:06:a4:fe:a8:4e:
c1:59:04:96:07:29:b9:67:0e:c9:37:87:75:b6:52:
a9:48:d1:96:8f:cb:3a:47:36:7d:ce:ec:53:f9:a5:
85:cc:39:37:df:15:0b:2c:00:25:eb:9c:07:71:70:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:EE:34:E2:86:FB:BD:B1:AB:87:5D:24:DB:F4:E8:D0:AA:BC:82
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:bc:ed:32:d8:5d:a3:21:5f:d8:2d:27:39:1f:6c:92:cf:
ac:55:93:5b:3c:78:87:5b:07:f8:81:99:45:43:aa:d4:e0:61:
d8:a1:49:44:c7:2b:54:d5:ef:4a:39:4f:97:38:34:08:03:d6:
d9:d1:13:37:f0:76:06:31:e3:58:81:cc:f4:a0:e1:b1:46:d8:
fd:68:8e:f8:f7:ff:0d:48:14:f4:12:23:85:62:93:8a:46:17:
0d:5c:85:9b:3b:2a:39:b9:bf:93:9c:ed:3c:45:cb:be:7d:e5:
68:41:0b:26:48:09:aa:05:93:77:c1:1e:c0:18:3d:94:c3:3a:
61:af:69:60:ac:81:e6:d0:0c:26:fc:77:24:fe:79:7d:d0:a4:
7a:16:e7:64:2d:38:d3:72:99:5c:28:b8:ae:8a:65:32:88:3a:
57:fb:af:3c:f2:bc:cc:c2:27:b8:0c:3f:c3:c7:00:32:da:28:
51:55:22:89:eb:11:7b:7c:2b:b5:15:08:19:38:12:5d:c0:34:
d7:d6:ad:92:93:72:41:96:ae:d1:1a:ca:26:41:ad:9a:0e:6c:
66:e0:ab:d6:15:84:c2:41:87:8d:ed:26:31:a9:31:b4:57:9f:
08:f1:c0:91:4a:c6:ce:43:72:ed:bd:f9:90:32:f9:8b:d0:6f:
31:d7:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:43 2026 by rpki-client