Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: 86RW7rXDyJKP9xlVH1H6H2CI6p33Ajp5exghlnpahTQ=
Subject key identifier: F0:50:97:DC:CB:0A:A0:4E:D2:44:E8:53:F5:4B:94:4A:CE:18:F1:D8
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019D38656225DC4110FC01D73F05186BCFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (hash: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc=)
2: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (hash: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4=)
3: foV-97aSM2J17L6HTgvN2wr-MCc.roa (hash: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: b4QJLnZSKHAP76TkId8rXR3LIwaShhfgtBOvPw3RtN0=)
5: n1Cgw1hB_M-JwsTRUDUDk0hkx0I.roa (hash: X0eM+VJX4804vZu0ss2zy1CUVizErDWKqV14QA7ZUik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:62:25:dc:41:10:fc:01:d7:3f:05:18:6b:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=f05097dccb0aa04ed244e853f54b944ace18f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:47:12:5b:65:15:2f:4b:94:73:76:21:73:
d9:19:e1:74:fe:34:01:32:f3:05:2f:cb:35:7e:eb:
79:23:b6:5b:03:e1:1a:9e:96:e1:f0:0e:19:46:33:
01:81:99:b3:c5:bd:57:e9:8d:2f:de:f4:b2:a3:8e:
a9:9f:2a:f1:93:1a:ad:28:8f:6c:97:bc:69:f4:09:
10:c5:8a:82:28:2c:76:a4:65:2f:67:f4:ab:26:93:
48:43:07:a2:71:2b:e4:82:b6:e6:91:c4:c6:fd:2a:
60:3e:e4:f9:eb:15:5a:9d:19:5a:f5:e4:e0:e6:e0:
d1:55:3c:59:f0:d3:29:1b:7f:3f:c0:6b:13:d5:7d:
2a:c0:6b:69:c3:29:5c:94:67:7b:97:f9:b5:65:f0:
1a:46:fa:d4:cd:24:2f:f7:86:10:bc:c8:3b:54:60:
2b:0d:46:df:fd:c3:13:3a:84:a2:70:9d:2b:f8:a6:
47:9a:65:aa:fa:02:ab:cc:47:4e:0f:ad:72:db:16:
46:55:a9:33:3f:fb:12:cd:be:f5:dc:59:28:e8:75:
a2:18:50:ab:6d:a3:5c:9a:1c:fc:e0:8c:35:1a:fb:
b8:e9:eb:0b:5c:8a:91:f3:b7:29:99:41:2f:a4:88:
a9:a4:94:a1:b2:20:c0:85:a5:c3:b9:b5:e0:25:89:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:97:DC:CB:0A:A0:4E:D2:44:E8:53:F5:4B:94:4A:CE:18:F1:D8
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:b6:e6:88:9b:dc:a1:9b:29:69:3f:5a:ee:82:76:75:31:
52:94:1f:b5:ed:83:70:c9:35:17:25:bf:1d:75:51:76:a2:ec:
cb:67:76:c6:81:52:c2:3e:ff:db:f7:1e:ae:5e:2d:b3:d5:5a:
77:b5:13:2c:df:be:49:19:c0:de:0d:8e:9a:ec:74:49:5c:ff:
ce:df:d2:e1:ee:5e:36:0e:5b:08:5c:c6:6b:c9:ca:6b:99:aa:
51:a9:18:df:2a:8d:90:b4:f8:49:18:19:31:ee:b3:3b:3a:3a:
c4:31:c5:97:ac:27:13:a3:b3:e5:7b:8b:a3:dd:96:92:42:dc:
9b:21:fb:b3:dd:80:53:95:b4:c1:d4:c7:5b:60:40:e8:9d:8e:
b0:77:63:7c:dc:ff:6b:f2:f4:03:11:ce:e7:25:8b:f6:36:84:
41:56:76:76:2d:26:ff:4b:8c:0e:eb:93:8a:14:1b:aa:d5:af:
c6:b6:14:26:72:b0:57:96:69:c2:80:32:26:c7:a5:fb:bb:c5:
1f:ed:10:01:28:1b:12:5e:a6:b2:7f:c5:03:7a:7e:d5:86:43:
ee:cd:96:63:b3:4f:29:3b:fb:18:6b:f7:e4:16:33:c1:05:fc:
48:ce:8d:f9:70:d2:2d:f9:81:e2:9a:b3:10:85:fd:fc:aa:57:
62:ce:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client