Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: eDUXatBIgGGeSu8jCSa1Lz/QfYgAsmkC1DwQTxkN288=
Subject key identifier: 09:9E:3D:CD:7F:B1:94:6A:0A:19:AB:22:C3:9D:09:81:52:91:21:D2
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019CAB343910809C15C343EDC0AE6503FA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: KK++MWpoD53Pz5VYTnCa5QD5Wzgzf9QyfhhaLI5vUmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:39:10:80:9c:15:c3:43:ed:c0:ae:65:03:fa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=099e3dcd7fb1946a0a19ab22c39d0981529121d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:4f:17:69:e3:60:09:71:f9:10:e3:81:57:
02:95:95:8a:55:a1:f1:52:4f:ce:f9:a8:37:f0:ae:
2c:95:4b:4b:71:da:a5:5f:f5:7d:68:39:b2:54:5c:
58:9f:01:2a:86:a1:9a:19:c4:05:90:c3:fd:82:61:
d5:c1:e0:41:00:3a:d6:05:1a:73:ce:4f:18:52:80:
1d:dc:13:d5:d1:57:0d:db:ed:cd:7f:3a:f8:fe:cc:
75:bf:10:23:7b:5b:5c:0d:cb:fd:d0:02:61:94:c1:
b7:ae:9f:5a:22:61:49:8d:cc:f6:13:21:a2:06:3f:
3f:74:d1:d5:84:c2:1d:17:84:1f:1f:9e:17:74:f2:
d9:d5:9d:db:21:d2:9d:5a:35:a4:3e:df:74:09:a2:
75:19:c6:46:4e:9e:98:c0:d4:a1:be:9d:45:14:91:
ab:8a:45:52:d8:b7:d7:70:0d:df:ba:ca:68:0a:be:
4a:ea:b6:f1:46:cc:08:89:0d:c7:79:40:94:cf:45:
21:57:a6:08:38:23:a2:aa:db:c4:10:54:12:a3:06:
e6:aa:9f:8a:f8:72:39:de:d9:bf:65:9d:e3:71:77:
cf:e9:de:f2:35:a9:f0:1b:ac:53:7a:d6:81:88:4a:
9c:d0:71:68:97:ce:c8:0b:be:9f:8e:d4:46:9b:a6:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:3D:CD:7F:B1:94:6A:0A:19:AB:22:C3:9D:09:81:52:91:21:D2
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:b3:19:35:3b:e6:a0:72:fc:b1:07:a4:19:7b:24:6e:df:
29:b0:90:09:09:87:8b:a1:67:33:f8:e2:b8:13:58:57:d7:93:
b2:4c:89:02:f4:bb:6e:1c:88:0c:44:65:9b:97:be:1f:f1:7d:
05:44:3c:92:8a:db:a9:19:c0:a7:57:0e:ab:5b:2d:67:da:e2:
45:3f:44:3a:cf:d4:fa:d9:03:4f:bd:6e:1c:bc:0e:a8:8b:1e:
99:9d:0f:51:4e:22:97:cd:fb:73:8e:81:bb:83:69:34:91:37:
cb:75:ce:c6:67:a2:be:9d:19:ea:41:8b:b8:92:78:52:f0:6a:
4b:98:79:0d:1c:8e:75:a3:22:2b:2a:1d:f5:1f:33:8d:5d:9f:
8e:eb:d5:66:67:22:c2:3a:7e:33:2d:3b:12:8f:72:4d:87:31:
55:5c:0f:50:66:34:c6:9c:e2:14:88:56:50:f4:64:fe:77:2e:
b9:71:8c:65:c8:5d:33:ac:ff:b8:24:d9:72:b3:6f:1b:d2:f2:
c4:98:14:c7:42:3b:7d:bc:dc:55:af:f1:8e:0d:e3:07:d6:f7:
f9:ad:e2:02:13:79:77:b8:27:dd:82:c4:4d:ca:02:19:33:a2:
55:e4:b0:d3:c4:1d:43:ec:92:68:5f:32:02:f8:75:49:8c:80:
40:c4:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:10 2026 by rpki-client