Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: U9BJldrcFCLA7LDVzcXoz0cvFdRK/kmM8GiZudsFiMo=
Subject key identifier: 9A:BB:F0:04:94:76:F2:38:48:78:4F:A8:B5:07:C3:B4:E6:57:EE:D9
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 019D3909FB6A65F5CAA237AB0DD9B5BCBA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 125C
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: qPkGxz/CIOkTWyiC7zZEidtLfQbUGmNBhiTdADSsSds=)
2: y9Rdyj0H9umW1gas2ci_H7vHV80.roa (hash: fMjeZmQWT7xUsWFTIwsY1p7CQr5KOCxJXZGt0dVbHlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fb:6a:65:f5:ca:a2:37:ab:0d:d9:b5:bc:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=9abbf0049476f23848784fa8b507c3b4e657eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:73:f3:e4:a1:b7:1b:32:f8:bb:74:86:c2:
8d:ab:31:38:99:2a:d1:b9:1c:97:e3:c5:68:a3:8c:
06:6b:91:34:06:27:e2:ce:33:b7:4d:c0:ba:45:b2:
54:dc:fc:19:31:33:95:b9:c1:3e:70:cd:29:24:8c:
a5:54:43:5f:e3:b3:de:84:07:c5:72:16:ab:81:39:
fa:e8:ad:7b:d1:eb:79:3c:d4:2c:b0:fd:c7:7f:9e:
14:c4:97:f8:6b:99:9f:27:8f:52:9f:91:06:74:2f:
aa:0f:c5:7f:ae:78:54:5f:17:7f:c5:e5:47:08:4a:
0f:c6:8a:c3:bc:1d:ed:a9:4c:a2:87:a6:50:90:e3:
c5:05:0e:89:4d:41:61:89:5a:37:a7:54:c1:80:60:
a5:74:1e:8f:f1:e0:95:47:bf:4a:3a:83:aa:b8:d5:
63:49:00:fe:32:f6:9a:40:9a:57:7c:dd:7f:b8:bd:
ea:1b:d5:e8:fb:b1:45:84:00:cb:73:97:15:7f:1e:
41:d3:0f:46:36:42:af:3f:c2:dd:b5:fc:d0:27:b1:
0f:16:78:e6:a0:4a:40:0a:57:c6:bb:50:ed:a1:a1:
2e:ed:f4:a9:ca:44:fe:04:3d:0d:b6:e2:27:a7:37:
d1:f0:24:5f:61:ac:b2:5f:7b:3b:0e:db:b5:f0:5d:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:F0:04:94:76:F2:38:48:78:4F:A8:B5:07:C3:B4:E6:57:EE:D9
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:8f:02:b5:1c:d2:bd:80:5c:59:be:d3:45:e3:b4:9f:24:
19:dd:aa:d3:c7:69:87:a7:b0:f7:a8:e5:65:ff:29:5f:12:a6:
43:95:b0:cf:b1:fd:3a:35:61:06:17:4e:ca:1f:4e:cf:07:47:
eb:e0:07:08:14:84:f0:9a:05:7e:0e:b3:50:eb:43:49:b0:8c:
d0:ae:07:d0:d4:e1:33:12:f2:c9:5d:98:63:c5:ca:2c:1e:5d:
63:ee:92:ec:04:69:b7:ee:a8:48:6f:44:64:41:60:5f:00:e8:
cc:81:30:6c:06:2a:90:45:90:8c:24:97:ae:e3:ee:e0:33:53:
07:ef:77:ef:3d:10:52:84:e1:e1:e4:cb:98:84:79:d0:24:a8:
9f:ce:bd:57:9d:ae:19:ec:51:c4:07:d5:d4:2d:4d:22:9d:36:
63:16:df:07:7a:63:c2:43:46:e5:31:9e:98:1c:30:50:84:f4:
29:92:10:ba:08:91:f1:f4:0d:53:5e:69:79:59:32:c0:91:8a:
21:a2:83:98:7d:a9:46:ce:89:3c:81:49:a9:2d:c7:9d:c8:99:
2d:f5:80:77:ff:f9:e3:83:d6:1a:7c:6c:68:45:41:9a:5e:44:
4e:9c:51:44:dc:22:47:d7:a0:31:76:ce:f4:28:89:64:3a:ea:
3f:cd:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:57 2026 by rpki-client