Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier: aVUwTKJSXGfUb9YkWjsnuIYPLYETtciHQqJ4xCaSeDw=
Subject key identifier: 0D:89:61:D5:15:6F:BB:3F:A9:34:20:26:F6:53:3C:2A:B4:25:71:6F
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 019D386642D496B9A5E8806DD8B0262BF50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: u9jUBOdJHBzer8qTTPiIocvhn9CoZs+NThGNLBFbeOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:d4:96:b9:a5:e8:80:6d:d8:b0:26:2b:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=0d8961d5156fbb3fa9342026f6533c2ab425716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:0a:28:c4:5e:71:48:21:fd:78:de:da:ed:
7a:2d:0b:c2:d1:ec:96:4a:df:6b:80:f8:ff:70:c4:
d4:e6:5d:29:e7:d2:eb:db:c4:35:a8:4d:e7:72:b1:
dc:c2:17:da:c9:8b:69:d9:4d:66:d9:b5:0e:38:c7:
55:5f:37:1e:a8:c6:93:a1:3c:63:dc:86:1d:ea:55:
92:c8:41:02:5f:7f:bb:3f:c5:c5:e7:4e:33:72:0a:
28:53:53:4f:7e:42:bd:6f:a8:d7:6b:d7:34:ae:a1:
f0:b3:81:8f:d4:8f:6c:1c:f8:05:b9:03:21:91:b2:
a9:05:f2:1b:41:79:ce:d1:c7:74:39:5a:1e:99:5f:
98:66:99:3b:f3:42:87:c3:58:30:17:6b:66:ab:41:
03:05:13:ac:c7:22:3c:14:b3:db:f5:41:32:72:25:
34:de:32:52:73:8d:27:ff:17:82:c8:bc:b0:44:ba:
41:0a:7e:dc:d0:34:3a:eb:a4:79:04:57:50:60:22:
ca:81:ba:37:50:2e:be:a8:8d:31:c5:52:27:d2:ac:
22:92:7a:fb:ae:f1:21:18:e8:06:6e:5d:43:1e:13:
f7:46:ce:5a:1e:aa:f0:9b:9f:09:57:f5:c9:d6:6f:
d4:3f:78:08:a8:7b:64:85:b1:7d:a5:33:4e:d0:dd:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:61:D5:15:6F:BB:3F:A9:34:20:26:F6:53:3C:2A:B4:25:71:6F
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:ad:58:d9:e1:68:be:2b:55:34:63:c0:38:62:e8:4f:97:
8c:61:f6:16:72:11:66:83:05:8b:c9:98:7e:a7:76:51:5d:84:
b3:ea:38:52:e6:bc:79:03:a9:e2:a2:6a:4b:a6:4e:5c:bf:03:
98:c8:87:13:c6:4b:de:b8:e7:8c:43:8f:13:ab:82:18:8c:96:
ad:8f:63:46:27:37:0b:7d:7c:a4:7c:8c:e7:b1:9b:db:03:91:
7c:69:bd:e3:70:3e:2a:bb:fd:13:59:33:bd:25:aa:a1:57:01:
02:e6:f6:6b:aa:b7:ea:24:50:e0:4b:c8:e4:1b:0a:c8:2d:c8:
52:4e:f9:6d:d9:5d:20:fd:cf:7a:3a:e2:d6:9a:86:ea:a7:f1:
3b:b8:0e:a6:90:f6:ca:84:8a:3e:1f:d9:dc:e4:4f:44:0f:d2:
37:15:37:a2:24:80:cf:ad:0b:33:69:66:57:33:02:da:bd:3d:
c2:dd:4a:98:2e:af:7b:11:98:af:22:f9:4b:1e:51:fa:03:e9:
1a:7f:54:1a:ad:c7:40:62:96:8b:50:5e:eb:97:92:d4:f1:18:
7b:ff:e8:97:7b:60:de:f9:29:db:68:6b:5f:89:82:2a:25:40:
87:fb:dd:0e:b1:e3:db:58:8d:7e:e5:ef:af:67:5f:a7:0e:fe:
5c:43:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client