Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: SiHhXZBrw+IDfCkkQyctU2SwykRNkFjnDrxabillyxY=
Subject key identifier: 34:DA:8A:C3:7D:2A:39:65:B7:9D:37:3A:B3:5A:55:C7:87:8F:47:6B
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019CAAC675FB1F55C13ED37BED4D5DB4786A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 06AF
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: t6wr9I6nUMrF1NoOenYs5nk9dIyDVN572uut0jw6bzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:75:fb:1f:55:c1:3e:d3:7b:ed:4d:5d:b4:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=34da8ac37d2a3965b79d373ab35a55c7878f476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:ea:ba:1c:85:5a:fe:89:88:70:6e:07:96:
32:46:67:75:01:46:34:4f:72:1d:a5:c8:6c:88:b5:
0d:29:49:94:a6:f7:24:c8:19:47:b8:90:29:f2:29:
92:f2:f9:46:f5:4e:4c:3a:e5:53:95:d6:32:c6:73:
ee:94:2a:a9:07:5e:01:19:4f:f8:b5:3b:6b:b1:1c:
d6:e4:d9:75:ce:3f:23:ac:83:1e:26:91:21:a8:b5:
1a:29:9d:c7:a6:f6:de:65:f6:61:dd:39:57:85:90:
7d:80:29:6d:cc:5c:86:e7:ab:d4:1e:23:45:d1:e3:
12:f7:fc:57:ea:ca:17:93:a1:dd:2d:81:23:0a:13:
ab:07:32:45:be:19:a0:82:5e:f1:52:2f:c7:ab:9b:
81:7a:0e:c0:ea:be:55:99:46:24:7b:97:cb:e5:1b:
6c:92:80:aa:f4:75:53:ae:bb:5e:7e:10:72:fd:38:
c1:70:2d:ef:22:22:a5:71:04:75:06:24:05:21:65:
e8:ff:a0:96:b0:86:9b:a0:ad:20:b4:fc:e3:68:4c:
0c:97:a4:a5:0f:cb:f6:13:99:08:95:64:cb:42:24:
b1:4c:07:5b:32:0d:fa:c7:4d:f9:4b:16:2d:af:f3:
31:20:92:a9:58:0d:16:ee:ab:c1:43:14:42:2a:d6:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:8A:C3:7D:2A:39:65:B7:9D:37:3A:B3:5A:55:C7:87:8F:47:6B
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:57:cf:d9:0d:f1:78:c7:0f:81:28:5d:1f:a8:e8:88:ee:2c:
18:60:3c:16:eb:ee:80:5f:7f:8d:1c:de:ad:e2:5f:d8:c1:39:
bb:e2:57:cd:6c:b6:42:1e:89:11:9f:81:ce:b7:e3:71:9b:1a:
11:29:ba:4a:e2:c6:46:4e:99:36:4d:6d:77:24:60:bb:ad:44:
ce:74:3e:26:f9:dc:e6:b0:41:9a:22:23:62:da:18:f2:1c:0c:
63:34:95:72:1e:d3:70:05:47:20:7c:bd:d9:9f:0e:09:4d:e1:
05:76:5d:7e:4b:2d:53:4d:e6:2a:2c:b5:f8:83:72:90:b3:77:
ad:61:62:0a:61:aa:e4:f0:04:98:42:8a:52:d4:32:22:07:0e:
52:96:ad:c7:e3:16:f5:07:29:60:af:76:06:33:98:95:92:31:
da:63:08:0c:df:c0:e6:72:f0:ed:1b:c3:63:18:35:c0:59:24:
0a:27:c6:bb:dd:ac:75:1a:f3:e2:5b:d2:a6:cc:00:ce:a2:e1:
70:83:da:07:fa:0e:e4:0e:0e:88:1d:46:be:63:e0:6e:43:db:
85:6d:ef:ad:6b:4b:01:01:f1:51:e2:b6:1a:a5:82:f1:a2:a9:
e8:9d:58:e7:92:db:b4:0a:4c:c1:72:73:3b:09:1a:ca:85:f4:
40:25:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:58 2026 by rpki-client