Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: uqAn4nkaMUd+o0Pe9322CybOn0goF5yJQHO55Fl7IAE=
Subject key identifier: 51:06:9C:9E:5F:1D:C5:0A:94:98:77:29:8A:10:45:39:D3:A0:A6:CA
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019D38D30038F660D265252DB4F6CC25D7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 0B1D
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: ds21pAEsL1gvmQnGGw6L2MP0957Z0aWcOj94P5VlRT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:00:38:f6:60:d2:65:25:2d:b4:f6:cc:25:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=51069c9e5f1dc50a949877298a104539d3a0a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:17:09:24:14:7c:3b:c3:ab:03:38:df:7c:
df:37:54:b4:a9:ce:e9:ab:08:22:84:2c:65:72:68:
73:2e:03:cc:ad:a0:4a:e1:ff:74:a1:2c:16:a4:02:
e8:c3:3c:a1:7c:44:c8:a0:6f:93:f0:c2:96:9e:26:
12:d0:d0:d0:f1:4e:ae:4d:19:a9:b5:2e:7e:49:04:
c3:0c:47:1a:9b:83:74:5d:0b:5d:2f:9c:ea:d8:0c:
6c:44:8a:e3:af:25:26:4a:81:25:4b:37:c6:80:ac:
ce:37:bd:2a:c6:66:95:11:97:c3:ff:f1:5d:e4:55:
04:40:8c:b1:9c:8b:f0:8f:1e:c8:2f:48:8b:1f:d4:
09:da:f1:98:60:f6:b6:3e:a8:2b:be:b9:cf:d4:bb:
9b:1c:1b:02:39:27:ce:36:85:15:70:f0:3f:c5:60:
2a:f3:b5:63:3a:85:0d:57:11:9e:16:3e:5f:cf:d1:
67:c2:d0:8a:23:69:4b:d8:6b:8b:c1:78:c8:37:27:
73:7a:ef:8f:02:2e:93:57:24:71:91:78:6e:d9:d9:
ee:94:b2:31:b9:ac:e2:c2:71:66:63:63:94:b4:73:
9f:49:60:67:7d:23:d3:77:3a:aa:20:70:c7:13:d5:
f9:de:24:bc:a5:37:6e:f2:13:28:17:87:8e:ac:2b:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:9C:9E:5F:1D:C5:0A:94:98:77:29:8A:10:45:39:D3:A0:A6:CA
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2d:a0:5e:bc:2d:28:1c:4a:93:5a:24:0a:d2:79:73:a1:08:
98:98:7e:58:23:2d:ef:4d:65:97:72:1c:20:e5:c4:92:8f:0f:
18:ec:52:83:1d:99:92:2f:f9:94:b7:cb:f5:b8:24:94:2c:f9:
a1:5c:7d:de:7f:de:eb:56:84:da:62:b7:dd:3e:3d:c7:58:e0:
5d:9a:17:2a:1b:66:d6:eb:56:89:42:64:97:ec:2e:03:47:f7:
86:46:8d:c3:21:e6:2c:3b:99:c4:6c:67:3a:70:3e:49:90:b5:
12:87:53:39:15:32:15:31:45:a4:dc:a2:3f:ee:d6:60:2f:94:
0f:a4:12:e8:31:50:eb:44:76:3b:4d:29:2f:12:45:e6:26:7a:
a6:c3:72:01:8b:c8:a0:cd:83:f9:38:3f:70:c5:ff:25:ed:35:
70:97:f9:2d:4b:dc:f1:d5:18:16:a8:3a:be:38:10:81:23:91:
93:4b:71:18:6b:e9:a1:b7:1d:3e:5c:e8:c3:52:87:0c:95:26:
ad:ae:09:ad:77:97:ee:db:05:08:f1:66:0f:3c:57:15:a4:d5:
61:9e:23:11:fd:0b:f3:6f:e4:22:f5:4c:e5:b0:dd:9f:e8:b7:
8b:f1:47:81:4f:7d:c2:46:d9:f2:7d:ee:d7:b5:0d:3c:f8:a9:
16:0e:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client