Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: 7xUaxDUsQDe5TLkWwaiKvXratxktJyPh3k9Ifs9d8nk=
Subject key identifier: 68:86:B5:B7:8C:1C:C2:F0:04:D5:1D:7D:24:8A:CA:C1:7A:88:FC:14
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019CAC468D861F45F5DCA2054C2BDA43B250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0D29
Signing time: Mon 02 Mar 2026 02:00:30 +0000
Manifest this update: Mon 02 Mar 2026 02:00:30 +0000
Manifest next update: Tue 03 Mar 2026 02:00:30 +0000
Files and hashes: 1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: cb6ZX9hpDZkgv1rYA6P7P50/tHKxGp+1x5Ks6eJKOOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8d:86:1f:45:f5:dc:a2:05:4c:2b:da:43:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Mar 2 02:00:30 2026 GMT
Not After : Mar 3 02:00:30 2026 GMT
Subject: CN=6886b5b78c1cc2f004d51d7d248acac17a88fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:f4:d4:f1:c0:19:3c:f6:dc:92:32:2d:fa:
e8:b3:a2:84:3b:ca:0d:55:38:72:71:f2:a1:cd:2d:
fd:df:35:45:d9:d4:9c:2d:f9:e1:cb:e8:4c:62:58:
fc:95:e9:ca:7a:ee:40:a7:b2:32:61:c6:83:54:22:
30:e0:82:00:31:04:45:ff:a2:d2:48:77:22:ea:1b:
75:dd:c3:d8:5e:88:9e:88:65:e2:cc:05:22:6e:5a:
02:8a:d1:be:27:21:e5:28:d0:76:ce:cc:73:66:24:
32:cd:cd:55:dc:ca:fe:c9:7a:12:b8:2e:9a:eb:d7:
dd:da:1b:6f:eb:88:a2:31:2f:89:dd:68:68:e0:c6:
c3:82:93:80:b7:52:63:94:89:c1:34:e3:18:b4:e7:
3c:59:ee:f5:aa:75:43:00:e7:01:f7:7e:58:a1:b6:
de:af:b4:b0:23:11:7a:10:03:b1:f3:69:c5:73:ce:
4f:ea:e7:0a:17:46:45:ec:f5:c0:34:3b:fd:c2:35:
19:d7:ea:a3:06:b1:1e:b9:12:64:3d:9a:45:ed:25:
aa:51:5f:fc:6b:1b:47:ab:1b:fd:49:ce:73:94:1f:
cb:ac:c4:c9:5a:c1:5a:c5:08:fb:fa:dc:20:5e:9e:
6f:ac:18:c4:68:4f:b8:d7:0c:91:c5:bb:ca:60:44:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:B5:B7:8C:1C:C2:F0:04:D5:1D:7D:24:8A:CA:C1:7A:88:FC:14
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:02:9f:90:0b:60:e7:85:d6:f0:bf:c7:d9:07:c8:16:53:a0:
33:34:31:ec:bb:23:06:77:72:00:a5:dd:3b:78:26:ed:e6:3b:
ae:9c:ad:87:3f:04:01:cd:e6:9e:9e:ea:1c:b7:5b:17:fc:59:
a8:df:97:86:5b:89:80:ba:2c:d7:e5:5a:05:10:73:64:82:39:
4b:3f:bd:64:90:37:f5:73:04:40:6a:60:db:40:3f:67:1d:24:
95:ad:e5:5e:e2:b7:59:5f:77:08:cf:ee:b6:7f:72:d3:e0:3b:
4a:83:fe:44:74:ba:8e:81:e9:08:3b:50:77:48:ca:34:33:b3:
15:d3:a7:a4:a1:ce:86:35:0e:93:ac:6c:08:d4:28:6e:0e:f0:
a8:40:83:6b:76:08:92:c3:07:03:d6:32:06:b5:4d:5a:1d:58:
da:f4:06:bc:f7:48:d7:a3:78:73:ee:36:d7:7a:d1:59:e5:57:
ac:fc:0e:c0:db:17:72:87:11:22:04:50:8a:1b:89:ba:bb:bb:
ac:be:fa:a3:ed:ae:08:26:c3:4a:ea:7c:8b:ee:41:2b:32:c2:
01:2a:40:f3:fd:5c:80:0b:db:97:2c:18:c2:83:fa:8c:b4:8f:
29:c0:89:22:d1:6b:a4:34:bc:8f:ee:42:94:fd:4b:d9:5a:bf:
bf:4a:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:50 2026 by rpki-client