Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: Rsu363TyTyo3iLJw2cPVS+Sq+MfLqCtt3DveaXt0oLo=
Subject key identifier: E0:CB:45:76:1B:84:F0:D6:CE:59:49:F0:7A:35:6C:83:6F:56:5E:94
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019D38D2D5AD4465896DBE4115DFB6C34E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0D8B
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: TK23nJoe2fR5qWU2syzrpcj0blHpt2lhfgA/DIuy0a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d5:ad:44:65:89:6d:be:41:15:df:b6:c3:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=e0cb45761b84f0d6ce5949f07a356c836f565e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:13:eb:55:9e:ac:0c:e8:78:5b:cd:84:56:
04:91:08:47:16:ca:11:71:3d:22:98:de:e9:15:0b:
3d:58:51:bf:40:33:0d:7a:c7:3d:55:d2:14:31:26:
e0:2b:15:2c:c3:ef:22:d5:4b:5f:15:a0:f6:e9:f6:
87:5a:46:c6:2d:cc:80:3f:e3:01:68:8a:9d:4f:d8:
a5:a7:66:dd:38:48:5d:90:6a:10:1b:e2:31:71:5b:
11:1c:5e:59:de:7d:ca:97:f2:c1:c0:8d:a1:90:4b:
ee:e4:de:00:92:4e:ff:cb:a3:7d:2d:d0:a7:8e:99:
d1:b5:99:38:8d:df:a2:88:d6:41:74:6d:e6:b9:8f:
68:1f:6f:27:0c:e8:8c:45:1f:ab:d5:ba:e6:92:14:
15:6a:1e:4f:1b:8b:7a:5b:41:7f:d8:ee:66:e5:20:
b8:85:db:cf:b2:4e:36:c8:3a:0e:43:a8:91:11:95:
b0:41:a6:8c:07:63:e6:19:6f:3a:f3:35:30:c4:fa:
e8:9a:21:24:f4:4d:4f:49:63:75:66:0a:21:d7:fb:
91:6d:9d:5e:98:0c:ae:a1:48:ca:2b:71:e5:fe:c4:
81:0f:e1:4e:4b:42:6f:92:28:8f:d7:2f:5e:78:ef:
78:47:10:7e:6d:87:18:3c:b7:70:5e:22:19:67:62:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:45:76:1B:84:F0:D6:CE:59:49:F0:7A:35:6C:83:6F:56:5E:94
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:8b:c8:08:f3:5e:3e:32:2e:61:d3:e1:79:64:48:6a:94:
26:83:1b:94:56:9f:b8:8b:c9:a4:b7:43:37:e7:ea:7b:c8:de:
f0:9d:0d:25:74:55:f1:56:6e:f9:26:e4:e3:b3:57:b9:d5:d3:
02:9f:a7:a2:2c:65:7b:79:b0:92:9d:34:69:cc:4d:0d:78:02:
f5:fd:61:ce:39:3c:b5:25:6f:03:41:90:80:9b:c9:7e:e0:cf:
38:04:95:1c:7e:b8:34:32:05:8e:81:f5:80:4c:e1:44:c4:1c:
52:a1:e9:c3:64:ad:10:92:69:d6:ba:bc:75:e3:ba:83:11:38:
c1:c9:91:bd:45:d1:b7:5d:09:ea:30:16:83:91:65:55:6f:ca:
a8:bc:c5:68:a1:e5:b4:d2:30:d8:e0:ac:c5:50:99:29:20:71:
6f:30:b2:ce:d7:42:c5:b6:92:39:51:23:7f:64:df:7e:1e:9e:
83:e2:19:1a:b9:6b:bd:8b:b4:bf:36:aa:36:18:fc:aa:13:6e:
32:8d:cb:d2:3b:09:14:2e:ab:aa:e5:7f:2d:de:ae:66:62:e0:
6a:91:83:6a:c5:95:21:20:5e:ad:ab:f4:c0:09:8c:0c:19:fa:
55:f5:c2:4b:8e:d2:e7:3e:b2:cd:47:66:09:0e:27:3a:04:82:
10:00:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:55 2026 by rpki-client