Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: MRUI9pyEJ9ji0m/f093Ru1AIrM06U4JlT4LcjOkB2pM=
Subject key identifier: 03:56:1D:49:8D:AE:4D:1A:E1:DD:4D:72:AE:04:2D:99:B8:E1:00:EA
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019D394095BFE9AB4E0A355D76152D4D88B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 16A0
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: vX1Amgg4MrVF2BifSHh8G2rc44gXDEPrP5UpT+aNE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:95:bf:e9:ab:4e:0a:35:5d:76:15:2d:4d:88:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=03561d498dae4d1ae1dd4d72ae042d99b8e100ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:75:85:43:58:21:aa:1e:5f:eb:fe:95:5d:
d5:bb:b0:3d:22:60:d1:78:2f:59:df:bd:7b:82:5b:
ec:e5:ce:fc:39:67:e5:ee:3d:9f:97:42:39:bb:4a:
19:ea:94:ca:9d:3b:f1:aa:d3:7b:cf:b9:7e:2d:5c:
1a:8a:69:65:0d:61:85:a5:07:6a:3c:06:07:9b:d7:
8c:41:54:5f:36:e3:2c:cd:d6:44:c8:c1:b9:70:1a:
5f:a4:0e:5e:cd:c1:5b:a7:26:ad:cf:22:39:6a:b0:
7b:7b:c4:e3:16:21:15:da:5d:d6:56:68:aa:28:9e:
b0:49:61:44:c1:7a:61:cf:69:a6:e1:70:dc:84:3f:
12:3b:7d:95:a2:a7:1c:fc:cc:ba:e7:e8:46:8a:f0:
e1:0a:a1:fa:ef:83:28:d6:2d:87:39:3e:0d:27:f2:
40:d9:3d:93:95:30:41:d3:c3:f4:94:d0:06:07:c2:
f3:68:b2:e6:cf:82:33:c1:55:50:c4:28:43:f0:de:
ea:dd:50:38:be:61:8c:13:f3:c6:c9:73:82:b8:29:
ab:b8:2c:d9:cf:c4:2a:ca:2c:6d:bc:a6:b1:4c:4f:
d9:ac:59:fe:9d:16:73:57:c1:a5:a4:85:00:f2:8f:
12:a4:3d:db:53:3d:20:23:97:8f:17:41:f3:ba:f6:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:1D:49:8D:AE:4D:1A:E1:DD:4D:72:AE:04:2D:99:B8:E1:00:EA
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:af:88:16:dc:72:aa:60:07:77:6c:84:95:83:86:73:5d:
00:a7:55:b9:96:08:f5:87:b9:e4:67:31:0e:f7:9d:85:2a:f1:
e7:10:ca:1b:25:af:01:77:3a:a6:c9:59:50:57:45:c2:32:56:
f3:73:20:a7:20:f8:07:03:a8:43:8e:d1:88:6d:ce:7b:b6:e9:
8a:5a:ec:ac:0a:5c:8d:3e:22:16:24:f9:90:42:8b:51:4d:b5:
44:ce:4d:01:ab:01:87:8f:03:3c:cb:d1:31:cd:ea:44:b3:56:
41:22:de:05:c9:c2:34:3e:0b:94:f0:99:38:71:e4:29:75:f2:
fb:6d:bc:0c:57:e2:9c:a9:85:55:80:f4:c4:01:27:ae:d1:e6:
39:2c:2f:07:09:72:91:4a:65:cf:1f:4e:a8:9f:17:16:14:ad:
4c:aa:cb:9b:99:f7:cb:bb:bc:cc:b4:41:c3:25:be:f2:46:c2:
12:0c:62:d0:5f:aa:2f:fa:e0:c9:58:86:df:8c:4d:41:0d:5f:
84:4c:fd:69:39:6c:e6:4c:e2:5c:8c:71:3e:8e:b6:42:0a:ec:
f3:56:30:35:a4:a5:17:21:c5:4a:a8:20:8f:50:b8:14:7c:72:
65:bb:28:80:54:d8:fe:03:ee:42:17:9a:2d:f8:0c:1d:c7:02:
9c:0c:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:21 2026 by rpki-client