Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: v7C94XoDT9UwjS7okQbjW/X2Kyrm+9mrWeKUO8xZJgY=
Subject key identifier: 89:9E:C8:94:2D:22:CC:4A:66:8A:97:3D:A7:7E:30:BE:5A:CB:C9:E6
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 01A0C3A0414C630E5D0ED77843DB81E75750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 09D8
Signing time: Mon 21 Sep 2026 11:00:54 +0000
Manifest this update: Mon 21 Sep 2026 11:00:54 +0000
Manifest next update: Tue 22 Sep 2026 11:00:54 +0000
Files and hashes: 1: 1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa (hash: ma/odS797klUEA34iGL6RT7n0eSaHogxuFxNTM6qcBM=)
2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: mXEccltsFWhF1WRnJfUMyY+0IjELcsPNOBXbNrOi95g=)
3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=)
4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=)
5: sVT6ylubpnSl9Wo3Q1UIodxgUTA.roa (hash: XIJ9HqJKdhG3i/7uPJ3bJoLhrTdl04nl6aE6hwyGjnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:41:4c:63:0e:5d:0e:d7:78:43:db:81:e7:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Sep 21 11:00:54 2026 GMT
Not After : Sep 22 11:00:54 2026 GMT
Subject: CN=899ec8942d22cc4a668a973da77e30be5acbc9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:73:03:1a:f8:26:7f:cc:82:10:08:72:65:
08:18:94:08:2f:ca:83:42:b4:d5:1e:95:20:3f:14:
17:73:c6:78:10:81:05:6e:37:82:8f:97:e7:f8:50:
f6:8d:12:fb:95:c4:f5:94:c1:6f:a1:9e:aa:bd:8c:
2d:75:48:dc:d4:a0:b7:eb:be:8a:67:22:14:09:c5:
58:6d:9a:6c:29:fc:4b:8b:b6:00:d0:68:24:5c:c5:
1b:e8:96:14:64:be:40:5e:75:fd:a7:49:fe:3e:3e:
68:25:68:6d:9b:52:84:a0:23:fd:94:fe:47:ec:6b:
f1:25:ed:cb:1f:e8:41:b4:77:50:85:24:fd:ff:94:
90:ab:02:bd:e7:5c:4f:a3:70:0a:3d:c4:6c:ee:01:
ad:c4:32:d0:1b:63:dc:3d:06:4c:97:c5:16:b4:53:
e8:e3:0a:d7:75:2e:75:03:5b:2d:2a:8a:4a:f2:6c:
5f:95:d8:2c:da:1a:27:96:ad:f7:ae:dc:83:9d:cd:
5a:aa:20:f9:4b:58:6a:69:1f:e4:1e:44:5b:63:00:
f7:db:58:b8:e9:fe:d6:95:18:78:ec:fd:db:69:40:
9c:d6:5e:af:97:05:0e:89:67:4a:83:cb:02:fb:b3:
65:57:4b:26:db:0b:26:cb:1d:a7:38:94:45:ff:87:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:C8:94:2D:22:CC:4A:66:8A:97:3D:A7:7E:30:BE:5A:CB:C9:E6
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bc:9c:0c:5d:32:0a:f7:0e:22:2d:6d:e8:c8:81:93:87:00:
0f:8c:6a:13:cd:e2:65:f9:1e:1f:64:de:3a:ff:20:dc:05:02:
16:7e:e5:44:9e:ca:1a:16:c9:40:3e:f8:56:6d:c5:ce:fc:b6:
ab:94:57:71:47:69:d1:59:28:8e:6c:6b:1e:c5:0c:f8:44:b7:
a4:77:f9:b3:0b:1d:33:e9:9a:36:dd:3f:9f:07:d2:cd:a4:7d:
d0:57:b5:d9:bb:ef:95:84:c4:19:4c:ea:94:ed:94:69:92:a6:
a0:1a:b6:ad:86:54:0f:0b:84:dc:32:a1:57:b9:da:75:04:57:
4e:03:3b:4b:fe:63:0c:e3:14:bf:26:98:6f:fb:23:a8:eb:6b:
40:52:1d:0c:c3:30:70:d9:0f:f4:d5:4c:36:d9:c6:21:5c:73:
d1:84:9f:b6:0b:95:61:c3:29:37:df:9f:0b:d2:e4:6c:64:35:
9d:d7:5d:e1:22:50:dd:81:d5:68:39:10:95:a7:5f:d6:94:00:
61:df:fb:76:54:0e:48:99:5d:46:e7:74:29:a5:5e:67:2c:68:
47:6b:3b:88:0d:a7:7a:52:07:74:12:63:75:3c:21:66:ff:0c:
b1:50:20:11:1d:ef:c8:00:82:10:ff:83:c9:ee:8f:4d:3f:1b:
7d:f2:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:48:50 2026 by rpki-client