Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: HnVtuV9E74toP8mSZI/tp0UTW6z1y8NfLQ9WIrvtuIc=
Subject key identifier: 06:C1:9D:EB:D4:FC:7A:D3:E4:86:1F:35:94:57:B4:27:EF:D4:BB:E7
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 01A1822C2ADECF2B77D0B7EE2513DDD4766E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 18D8
Signing time: Wed 28 Oct 2026 11:01:34 +0000
Manifest this update: Wed 28 Oct 2026 11:01:34 +0000
Manifest next update: Thu 29 Oct 2026 11:01:34 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: 55jiSjFPBF36BAncDMZhxjXSYr7/loCkR0errwIRMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:2a:de:cf:2b:77:d0:b7:ee:25:13:dd:d4:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Oct 28 11:01:34 2026 GMT
Not After : Oct 29 11:01:34 2026 GMT
Subject: CN=06c19debd4fc7ad3e4861f359457b427efd4bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:2f:4d:f4:51:4a:ad:10:d9:68:4b:a9:9f:
d4:20:28:55:c5:ba:f4:e7:3f:c6:bb:ab:f7:4e:c3:
4e:48:85:c8:07:8c:e7:2d:b6:0f:1d:b8:42:c6:0e:
c4:fc:41:d2:fb:bc:e5:50:bf:88:d3:a8:ac:c5:fa:
14:09:7a:34:16:68:f4:29:2d:2e:67:40:37:31:2e:
4c:6e:41:55:68:1a:97:aa:07:46:2c:db:c5:eb:ad:
47:43:b7:9c:cd:54:77:39:13:05:16:b3:c3:16:17:
cd:16:8e:a4:61:d1:bd:f8:7b:cd:32:76:f1:74:0a:
3a:de:2c:36:f1:92:1e:90:e5:44:4b:74:a6:90:d2:
17:32:e2:cc:f4:94:a2:24:08:0b:55:55:74:12:bb:
35:d7:1f:72:e7:77:18:b9:4e:67:6e:22:54:72:f6:
8d:1c:d7:02:e3:76:2a:ca:03:aa:70:38:e1:1d:e9:
8f:e1:b4:d4:7a:23:3f:79:a4:d7:57:65:2d:f5:55:
f8:b2:d2:40:b9:aa:f1:c6:ff:62:5d:4c:fe:97:f5:
bd:fe:f1:64:81:2f:e9:a3:30:a0:f0:e4:60:99:18:
23:c5:37:49:d6:81:fb:e0:2a:6a:80:25:e3:5f:89:
17:c4:1b:fa:a3:1b:e2:29:79:95:6e:b7:a5:84:19:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:9D:EB:D4:FC:7A:D3:E4:86:1F:35:94:57:B4:27:EF:D4:BB:E7
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:3b:9f:37:15:bc:62:ac:76:d0:03:87:a8:09:ef:54:1f:
67:8c:81:0e:6a:9b:21:ea:4a:7c:9c:74:ef:6f:22:18:8d:7a:
76:e7:45:f3:d3:7e:d7:7f:30:49:59:cb:bf:f5:42:49:f2:32:
1d:60:3c:57:e1:af:d6:cf:bd:28:05:d1:49:2e:86:95:6e:f1:
77:13:50:8f:e0:1c:51:52:de:72:ac:a8:af:f8:b0:6d:de:80:
6b:7a:d3:88:ac:5c:11:dd:00:4d:62:6b:e7:3e:80:f5:2f:f8:
8a:e2:bb:a3:90:ad:06:5d:f6:b4:7d:24:7d:59:99:0d:c9:ec:
44:55:16:e0:7d:69:77:32:4d:b9:10:b9:72:1d:dd:ad:b3:71:
1c:d2:a6:d2:45:a2:88:da:cf:bb:4e:88:33:77:80:3e:15:38:
af:b6:2e:e0:ed:09:8c:21:0d:17:9d:96:6a:75:83:12:4a:ae:
ce:44:b0:33:81:d0:97:d9:b6:ff:3c:08:53:cf:d1:53:01:e7:
3b:b6:89:95:7a:57:86:0b:38:6f:5f:45:38:98:03:54:f1:43:
df:fa:b2:0d:e2:1e:59:7a:12:06:fe:3d:11:65:92:bf:81:1c:
de:9e:09:76:2c:f7:83:f3:3a:67:53:e2:3c:bc:40:b9:2b:5f:
0c:4b:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:24:19 2026 by rpki-client