Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: GHqXviIvcIQKP0QPIz3yatAEUcGMSUxpA7l2bRGKNCg=
Subject key identifier: 1A:56:1B:92:09:E6:EE:DB:24:79:12:B0:30:66:57:72:66:8D:B7:77
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 019CAAC62DDBC4BD7EC0653079A4AA60C2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 0426
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: ReyHSx5OaAHEAN_31kdMwxjhNUA.roa (hash: FJpHlOJWbKJBBURtI4JmCkNfG/SkO9cYxdgcfQETxWo=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: 2qLKww7tmhq7NNha0iiSgsYcppxcjETIBWVvOxyCw0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2d:db:c4:bd:7e:c0:65:30:79:a4:aa:60:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=1a561b9209e6eedb247912b030665772668db777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:5f:bf:2a:c6:cc:72:1a:c9:df:4e:5f:6b:
ab:c6:7e:a1:f4:03:a9:56:b2:be:ee:f2:86:05:93:
19:23:7c:75:2e:e2:4f:d4:28:88:75:40:11:86:b3:
6a:2f:b5:a3:0a:66:03:ee:ff:31:69:e2:43:3a:50:
22:c7:74:88:89:73:7f:c4:3b:2f:2b:ac:3b:7a:4c:
77:b8:d8:20:1d:2d:c4:64:c2:95:7c:10:0e:22:e5:
7d:76:f3:52:10:f5:7a:bc:fc:7b:2e:84:2c:6e:56:
58:16:ad:6a:00:45:32:a2:5f:05:bd:d2:00:7e:c2:
4b:7f:dd:90:61:12:00:a2:55:da:ba:ab:9b:46:38:
b2:6d:00:b5:bd:d0:28:5a:52:d0:ed:84:8a:b9:34:
4c:2d:35:f1:9b:e2:1a:de:4f:a1:7e:bd:a8:d0:09:
13:a4:9c:03:11:93:de:cc:41:55:cb:1f:8e:54:28:
e6:3a:da:74:64:05:ed:50:39:34:c5:77:94:1d:aa:
4f:53:18:8a:91:ac:58:6e:69:40:a6:6a:42:94:14:
d7:c5:13:bc:3d:5b:31:12:43:3a:bb:cf:5b:25:b6:
bd:6f:0e:de:67:98:8d:47:a1:9a:ec:26:2e:eb:56:
87:37:65:bb:f5:69:df:d3:6e:14:e4:8a:13:24:0f:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:1B:92:09:E6:EE:DB:24:79:12:B0:30:66:57:72:66:8D:B7:77
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:21:0a:6c:d1:73:08:0d:2a:da:75:36:4c:44:27:ee:34:
f3:7c:74:03:31:28:00:2c:44:39:66:56:b8:7a:92:74:77:90:
6a:78:a8:a9:16:9b:5f:c0:5a:37:10:94:bf:7c:92:45:3a:b6:
b9:c2:1a:1d:19:36:03:ab:d1:44:ff:5f:b1:5f:f3:4c:29:79:
23:6e:15:46:99:bf:78:a5:ca:16:05:12:02:c3:25:69:be:8a:
2c:89:f1:07:41:c2:68:f5:4b:7c:20:39:b8:42:d8:d3:0c:cf:
e4:c3:83:0c:08:11:e0:2a:e2:fe:7d:70:5c:c2:92:77:f2:cf:
16:00:74:15:2b:2d:43:9e:40:2c:43:1f:70:28:f4:e5:59:d4:
c4:de:98:da:16:c3:b2:52:89:a9:e5:d2:a8:06:23:3c:f0:77:
32:9c:be:0d:a9:20:2a:8e:15:5d:60:15:0f:f0:cb:c1:8f:5c:
5d:7a:74:86:54:f5:57:5e:3f:29:f3:7a:3d:43:05:41:96:87:
79:b3:f4:69:b4:2a:01:a2:f5:75:27:b4:76:41:d5:7f:75:a6:
84:f9:28:60:4b:29:9a:26:e4:f2:ae:fc:c2:53:ce:00:2c:63:
f9:f4:c6:6a:1e:13:a4:51:ef:9e:77:fe:53:58:f6:32:e4:49:
7b:41:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:43 2026 by rpki-client