Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: iHkP5WP9pPzoKTIU9bVrLEWeK9ZI5g8FPiKIDUHNGTA=
Subject key identifier: 3F:C4:87:39:6A:89:D4:F3:F4:DE:1C:EC:E9:05:57:F3:41:14:39:03
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019CAAC705E26A1E1E61D53FC4D5714AD4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: DE6qzK8ZbTdn2sj6nzXv59atG6c.roa (hash: 9YeaePMUl74JdFaiRSC0VTGbzx1hAN55igQj80uecEQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: N9A7vSlTUokgI/fuG2igk2S0VObdklb5+yxPd0dKVfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:05:e2:6a:1e:1e:61:d5:3f:c4:d5:71:4a:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=3fc487396a89d4f3f4de1cece90557f341143903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:10:b3:10:6d:f3:5a:24:c4:4f:91:c6:ce:
b4:84:c7:63:30:07:f0:1c:b0:ab:5d:fe:ba:78:d8:
72:f2:82:cb:24:54:16:85:f9:a5:9f:d1:1e:46:7c:
e9:b2:f2:32:7c:24:91:f7:16:df:c6:1b:e9:a7:10:
8a:bf:e7:3c:8e:58:5c:e3:80:ec:89:75:9d:a4:4b:
2e:50:c2:45:d0:2a:dd:9e:ad:63:de:b9:54:7a:88:
b2:21:7a:53:75:14:23:b0:49:07:26:49:a2:16:f9:
b3:14:1f:f9:7a:4e:6a:d5:d0:50:6c:c2:9c:a3:ce:
98:e4:87:f7:11:d6:8d:75:6c:9a:1a:b4:49:0d:db:
41:a6:55:8a:45:4b:e2:86:ea:b6:7e:69:d3:57:05:
96:22:23:10:8d:23:de:9c:f5:33:04:ad:f5:f0:d8:
79:fc:11:80:ab:e8:cf:4b:22:f0:c1:54:a1:ef:f6:
17:94:d2:17:79:e7:45:49:02:8b:d4:4e:9a:9d:71:
65:2a:37:2a:97:34:d9:7e:de:43:20:0c:d6:49:53:
03:74:40:0a:e4:71:61:40:82:c8:b4:61:7a:07:7f:
2d:db:1f:4c:82:4b:68:94:f3:34:41:50:cc:24:76:
ca:96:92:a8:72:d8:ef:71:60:1e:e8:e7:18:5a:fa:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:87:39:6A:89:D4:F3:F4:DE:1C:EC:E9:05:57:F3:41:14:39:03
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:cc:4f:ac:5d:df:6b:3d:ab:42:f6:f5:6a:4f:7e:ad:d2:
96:41:38:ed:aa:17:db:c0:45:76:f0:11:01:82:85:60:63:c3:
21:a9:ed:1a:1f:bb:4f:a0:57:14:76:47:b0:34:b3:29:c8:57:
90:29:e9:09:cf:21:d1:f3:72:12:92:fe:be:18:10:63:d2:d1:
05:87:fa:cd:a3:1d:49:0a:26:c4:4e:01:07:4e:15:4d:61:2f:
d3:81:09:c4:7a:17:28:26:60:09:80:67:c1:93:d8:7f:ab:1f:
b3:3c:32:47:0e:9b:2a:80:ae:b6:41:0e:9e:7c:66:99:53:02:
ff:fc:24:5f:ce:02:55:d0:05:1b:96:7e:f5:cb:39:07:6e:eb:
33:d9:8b:a2:a0:ea:c8:89:8b:2a:81:c3:1b:ab:00:b6:f0:2d:
bd:f9:4a:06:fb:5a:92:d0:32:6b:12:cd:a7:e2:72:4e:e9:35:
5a:d3:50:f0:ce:d5:1b:06:95:eb:b3:50:a6:51:7c:ca:1c:05:
9c:0a:e5:dd:c0:97:f6:dd:68:58:d6:d1:f4:11:96:05:1b:b0:
c5:a1:83:c0:00:5a:a6:59:b2:8b:1b:5a:98:c4:d1:3d:a2:ab:
b5:5b:5e:03:9b:af:9d:5d:e2:d8:8a:2f:c0:1d:45:c4:57:fa:
fe:9d:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:35 2026 by rpki-client