Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: c13lFNP5YGZ1VMNAqQw7kJb4auwoltCArq4+X1XpyGg=
Subject key identifier: BE:7B:62:39:74:74:32:22:17:08:AD:39:4C:9D:07:DC:3D:DA:3A:0A
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019D371B2FDD94BD18C7141CB96CAAA6DE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 0842
Signing time: Sun 29 Mar 2026 01:00:21 +0000
Manifest this update: Sun 29 Mar 2026 01:00:21 +0000
Manifest next update: Mon 30 Mar 2026 01:00:21 +0000
Files and hashes: 1: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (hash: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: AYGnHwen7prQ+91sL739crfYrKuFr5pw8Ewq6564qBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:2f:dd:94:bd:18:c7:14:1c:b9:6c:aa:a6:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Mar 29 01:00:21 2026 GMT
Not After : Mar 30 01:00:21 2026 GMT
Subject: CN=be7b6239747432221708ad394c9d07dc3dda3a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:4b:11:48:51:2d:34:70:e0:f4:cf:3e:f9:
41:ca:6d:16:fa:c9:6f:6c:11:60:ae:79:03:7b:ac:
57:00:e1:a3:74:19:bf:3d:b0:d5:97:b7:df:80:c8:
e4:8b:db:97:86:d7:5a:cb:cd:56:9e:88:6d:63:bd:
25:03:51:85:17:e1:12:6b:e4:57:17:02:bb:15:ea:
35:79:c0:ba:a3:3a:8a:67:58:f4:aa:4f:ec:40:fa:
d9:8c:1d:3c:df:ac:6b:1a:67:e6:75:68:af:d7:15:
bc:4d:5c:04:7b:b2:f2:86:4e:d6:d8:a9:a2:6c:94:
2f:c7:b1:0e:ed:5c:19:81:3e:ac:65:dc:5c:b4:47:
fd:4a:e1:e3:30:ea:82:32:16:25:47:22:42:7e:bd:
d1:b9:fd:ed:5f:f2:82:e4:3c:c0:09:1b:3c:68:e6:
d3:11:14:14:75:cb:3f:c1:95:7e:63:c7:97:2f:2f:
14:70:6a:92:ec:21:5c:50:95:e8:ee:14:d0:f7:15:
28:99:28:7e:20:76:22:bd:87:0c:1e:43:0a:fa:cf:
5b:49:f3:58:2d:ca:cf:76:cd:d8:c5:25:aa:e2:2b:
50:71:0e:34:12:e9:94:66:9d:ad:9f:ff:53:ee:bf:
13:60:60:ec:0d:d6:31:fc:97:2b:3f:62:79:53:80:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:62:39:74:74:32:22:17:08:AD:39:4C:9D:07:DC:3D:DA:3A:0A
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:48:e7:31:81:6f:77:ea:b2:2a:9f:66:1e:c4:b1:78:87:79:
59:f4:64:8b:72:c5:4d:67:3b:65:e9:5b:84:fc:20:77:f8:e0:
c0:5a:9f:d1:be:a0:f2:8d:d3:fb:bc:d2:7c:f6:0f:1e:b9:66:
a0:ed:d2:45:67:ed:24:a4:08:f7:21:e7:21:54:d9:cb:59:bd:
df:40:1f:b3:95:00:a9:e1:6a:7a:1d:5c:50:8c:e5:24:e2:3e:
b4:5e:6b:69:66:28:5d:1b:6d:f2:39:51:82:61:bb:c1:1c:5f:
80:6a:54:52:dd:a5:5b:20:f3:3d:0a:12:4b:90:83:c7:ea:de:
35:bf:11:72:02:a7:47:da:9c:e6:ae:8e:1f:bb:7a:cd:6e:31:
08:52:65:a7:5d:19:d1:65:c7:b4:a0:de:b0:95:fc:34:31:3d:
11:eb:d3:66:ec:ec:44:b0:e8:1b:fe:86:ee:c2:9f:8c:e7:c9:
66:9e:cf:c5:85:3c:7e:98:78:2b:8c:27:7f:f4:2a:c8:ff:73:
57:04:8b:25:12:80:67:8f:12:b4:da:39:8d:99:2c:20:be:49:
65:eb:9c:7d:25:77:58:01:3a:b2:2c:a1:85:48:23:bf:fc:e3:
68:40:51:54:a6:54:54:fb:fd:23:b0:49:1a:cc:b8:c5:f9:8c:
21:2a:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:53 2026 by rpki-client