Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: Yde1wCRHgERXuaD4ohGsFmgF29qmugc3kp+vEtyflnA=
Subject key identifier: DF:94:D1:78:52:89:5B:32:F0:7E:BD:4B:5A:19:2E:CC:3B:60:BB:9B
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019D3752C368A46C70127902182B026BFBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 11A7
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: K1yzaA2LKv6WrPfYON-LGHn3q18.roa (hash: e3dzwnCmJbGlroDSJANi3J5QVo/VvZgQAmatunxEAZo=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: LFYWHmNaCHyga3QqXbQDAoVEo3KK56joRymZqzLx5zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c3:68:a4:6c:70:12:79:02:18:2b:02:6b:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=df94d17852895b32f07ebd4b5a192ecc3b60bb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:3a:63:a4:cc:25:3d:da:76:0e:4d:fc:b2:
d9:3b:d6:e6:d5:a3:0b:1f:5e:d4:c5:56:18:20:c5:
d2:23:cc:b4:ce:95:f8:62:c4:2d:9d:7e:c9:f6:d1:
1e:77:d9:81:26:d1:73:fd:15:8b:17:7a:b3:a8:48:
51:3d:24:cf:cd:41:e6:25:1a:e7:6a:56:d5:5a:76:
40:27:31:df:03:c9:b9:34:cc:49:37:09:fb:5e:3e:
24:94:ec:5d:6f:fd:0f:2b:79:ae:ac:d9:7b:dc:e8:
20:0b:22:6a:c1:4e:9d:15:d2:34:ce:fd:e5:1b:fb:
4e:17:ea:3e:7c:a6:c1:3f:25:51:65:fd:69:18:6d:
ed:77:91:a7:84:f1:0d:07:13:7a:1a:f3:1c:1a:26:
e0:3c:8b:9a:b8:70:48:e3:a6:02:7a:f5:d2:42:bf:
43:d5:60:2a:4d:3f:47:5a:75:a2:ae:e1:50:dd:86:
b6:77:75:c8:a9:2d:20:31:bd:6d:57:05:b9:8e:ca:
88:3e:7a:63:80:27:db:e8:e1:4a:38:d2:6a:4f:05:
3b:02:47:16:38:91:b6:18:b2:db:1d:22:f9:bb:9e:
10:81:07:65:06:f6:ef:f1:d6:a4:22:91:f8:bf:94:
74:f1:c0:89:54:64:75:9f:ad:75:73:58:2c:e2:6c:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:D1:78:52:89:5B:32:F0:7E:BD:4B:5A:19:2E:CC:3B:60:BB:9B
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:98:57:7c:b4:cb:f5:10:e3:1a:93:79:24:1a:60:a7:56:
41:03:9a:ea:e4:e3:f5:8f:e5:ca:cf:6b:94:52:74:f9:ca:26:
a8:33:ae:60:38:6f:8c:36:e5:d8:57:41:f1:66:7b:f4:b1:59:
03:eb:e3:56:c4:9b:50:28:bc:c5:a5:c7:7b:cc:7f:fa:ad:61:
46:3b:7c:98:57:88:a1:bd:47:a0:89:a8:ad:b2:11:e3:18:c4:
a2:70:81:a8:2d:93:9f:4c:a2:6a:7d:61:95:ab:2a:c3:ef:fe:
19:f0:23:fd:70:97:69:97:d3:c0:3e:75:39:63:07:41:95:89:
bc:da:9b:5e:a3:3e:fc:e4:cd:0f:48:8d:50:30:12:9f:a5:7f:
87:f9:0e:bb:1c:02:94:48:4c:1a:9c:c9:2a:8c:d2:59:17:75:
58:11:71:87:01:89:1e:b2:64:a7:6e:9e:8a:af:8c:3c:8b:fe:
9a:77:90:d5:20:73:65:74:41:02:af:00:31:f6:5b:73:84:1d:
f2:01:47:10:c2:bc:7c:5d:6e:b7:cd:89:27:19:d9:cd:5c:27:
a5:5f:47:07:99:c7:d2:af:c1:55:b2:90:48:60:5a:31:c1:82:
7b:1a:de:59:60:55:33:52:1d:4e:f8:aa:10:0d:42:e6:97:52:
f2:8b:f7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:16 2026 by rpki-client