Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: fh8qdOsi6g2HGwtiqYrLY+MqxS7F6R4Thx9dwHaQdto=
Subject key identifier: 8A:C5:9A:CC:D7:6C:8E:AF:F1:AC:32:81:83:7D:DC:EE:B6:0D:A3:BA
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 019CAD9056CE9D9A656320C20AB90F260B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 14D6
Signing time: Mon 02 Mar 2026 08:00:43 +0000
Manifest this update: Mon 02 Mar 2026 08:00:43 +0000
Manifest next update: Tue 03 Mar 2026 08:00:43 +0000
Files and hashes: 1: Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa (hash: 0J0gMYHWM02/yJR/SUWZtkK9fwND2HKIpHaXNLv/HHg=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: K0o4vz52oxt4Ej2L25BOTj8/m1/vax5ql0baCxVb2TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:56:ce:9d:9a:65:63:20:c2:0a:b9:0f:26:0b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Mar 2 08:00:43 2026 GMT
Not After : Mar 3 08:00:43 2026 GMT
Subject: CN=8ac59accd76c8eaff1ac3281837ddceeb60da3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:29:f8:40:24:d0:39:e9:67:b1:a7:89:b1:
8a:74:e2:f5:12:aa:d4:21:68:fb:d1:07:61:39:6b:
79:e3:83:fb:73:a6:b4:98:dd:21:e1:6d:85:5a:32:
0b:d7:f3:97:68:57:d9:17:b3:41:0f:58:15:74:10:
ed:08:ea:4d:1d:1c:fa:4b:8f:92:9e:a9:15:f4:ac:
b3:ec:eb:86:76:51:e4:c1:36:d8:0f:91:a6:01:7f:
82:59:a9:cc:89:b1:9b:9a:45:4e:7a:53:04:73:a0:
29:ef:aa:a4:db:8f:b6:f1:9c:cf:95:07:13:68:7d:
42:26:55:06:37:cf:f4:ab:a1:62:1d:c3:33:d7:9d:
5e:6b:2b:2a:e3:e8:02:5f:ab:58:26:ef:a2:85:86:
32:bd:d9:15:e7:0b:94:c9:07:19:be:01:ab:f1:4e:
a2:f0:d9:35:1b:94:68:1f:11:43:4b:ab:72:15:be:
4b:da:4d:08:b2:fb:4c:92:2c:98:e9:79:a5:0e:a9:
f6:e5:df:2a:2e:c3:94:fb:1c:45:ee:b6:8e:86:0d:
f7:ae:0f:85:60:3a:b4:94:dc:4b:b1:b7:9d:ee:7a:
ea:9a:8e:5e:59:e7:e2:5d:25:5d:21:ff:a5:b3:65:
08:c0:41:be:dc:4b:32:8a:4b:08:98:f2:ad:d2:7d:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:9A:CC:D7:6C:8E:AF:F1:AC:32:81:83:7D:DC:EE:B6:0D:A3:BA
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:2e:99:d7:5c:28:c0:dd:08:9b:50:27:54:e2:76:5e:bf:
a2:9c:68:72:d6:54:05:ed:f4:7c:7b:40:fd:d1:79:d8:69:7b:
64:be:14:66:c0:dc:75:c9:b5:3c:21:63:68:59:45:61:19:d0:
fb:69:66:fc:d4:1c:75:98:00:5e:58:1a:bc:ee:7f:d4:48:68:
7c:06:ee:e3:4e:09:70:e2:71:bc:4a:37:7e:1f:68:5a:17:b0:
7b:02:aa:5e:81:06:e6:33:1d:a4:f2:ec:d0:5c:e8:13:de:a8:
51:4d:a1:d5:23:4e:b4:8a:55:8d:2f:8c:a2:66:58:e2:cd:f4:
07:a2:e2:df:6d:52:22:4d:74:f7:14:ca:71:3f:60:19:8c:8e:
47:f6:91:0a:2a:66:8d:49:24:f6:b0:00:00:c2:fb:cb:07:cc:
76:0b:d1:b4:28:3c:0b:70:26:ec:b6:98:4d:71:66:b4:00:ee:
ab:89:18:41:5b:2d:7e:53:c3:b1:d5:f6:3d:b9:42:6c:42:2c:
33:e6:fb:70:8d:db:c8:c5:bc:b2:7f:78:b2:4a:52:f3:1b:cd:
ff:90:e0:8c:14:e3:2f:1f:9f:59:95:9d:d5:91:b3:16:1b:7e:
74:14:18:fa:0b:3f:eb:4a:24:ed:41:6e:11:e8:90:42:f7:6b:
4e:22:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:05 2026 by rpki-client