Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
File: l4ag6hgbRs2isjOCKvEAPBuxz40.mft (raw, json)
Hash identifier: /R3Dw8oX6B/M3vDBt27Kvee5EcyGwEshzVkE6QMZ74k=
Subject key identifier: E3:BB:E2:3E:44:6A:D5:82:8A:E3:E6:EF:26:EC:90:EC:9C:AF:AD:4B
Authority key identifier: 97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D
Certificate issuer: /CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d
Certificate serial: 019D390A2B6BBADE8A44805F20BFFDB66A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
Manifest number: 0226
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: l4ag6hgbRs2isjOCKvEAPBuxz40.crl (hash: 8Fyb0FVyCHDYPtgCzAl6SGeNp8n8RsSDFT5EvYxnqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:6b:ba:de:8a:44:80:5f:20:bf:fd:b6:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=e3bbe23e446ad5828ae3e6ef26ec90ec9cafad4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:58:2f:a7:ca:fb:61:f2:fd:05:07:7b:44:
cb:87:9f:ac:74:f9:9f:ae:f3:59:df:e1:cf:8d:2e:
f1:1c:8a:51:30:2b:a7:0b:b1:ab:9f:c3:3a:5e:8e:
f0:5e:a5:3a:f4:0c:2d:57:ee:4a:fb:74:0a:87:d6:
e2:ed:82:b4:78:05:75:91:8b:ae:cd:1e:38:ff:23:
56:08:36:7d:71:d4:76:72:79:8a:ef:02:f9:fd:a1:
25:04:9a:01:63:9a:df:62:15:24:53:e8:31:f8:e4:
94:a3:46:5d:20:f7:e3:32:af:2b:9e:a8:ec:e7:fe:
4d:a0:30:b6:32:17:01:e3:48:dc:0b:8a:a8:01:7e:
b0:63:18:c2:5b:1b:8f:79:da:2c:7f:d8:8a:cd:ec:
bb:9b:6f:42:58:d0:2f:ca:9c:8b:4d:17:f0:a4:ed:
35:a5:71:f7:61:30:36:5a:a9:2b:a1:d3:95:98:23:
13:25:54:35:0b:d7:06:bf:1f:11:16:ef:f0:4e:ec:
27:35:4d:f3:5b:39:b7:6f:3c:77:30:5d:62:35:2f:
48:c5:da:70:4e:39:5e:ec:12:0c:fc:14:09:f4:24:
dc:7c:1d:4e:d4:9d:a6:ea:41:be:4e:19:87:34:65:
ba:e7:44:b2:3a:76:93:04:5c:30:34:b3:2a:7e:47:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:E2:3E:44:6A:D5:82:8A:E3:E6:EF:26:EC:90:EC:9C:AF:AD:4B
X509v3 Authority Key Identifier:
keyid:97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2d:c1:15:af:5c:9e:2c:5c:aa:03:86:7b:38:c6:c1:e7:c7:
13:ec:fe:6c:1b:5c:21:94:b5:10:47:25:5b:f6:6a:3f:43:f8:
f0:1a:09:24:68:43:10:42:46:24:3c:96:33:06:c2:38:7b:30:
f6:15:e4:40:ac:9d:90:4a:99:1e:00:9c:ee:13:05:c6:80:d8:
f1:d4:ef:13:34:97:1c:4d:9b:c2:75:30:c4:4c:e0:c4:67:21:
9b:ec:3b:44:5f:99:9f:32:81:d2:e6:fc:18:7a:ba:96:8e:a2:
02:87:a1:64:d8:29:f6:0d:0c:ae:f2:c3:4b:de:92:e8:69:25:
f4:96:0f:31:cc:24:55:e8:5e:c1:c9:fb:3f:ab:7f:b8:8c:9c:
66:c7:a4:ad:4f:49:3a:d8:84:55:02:37:f2:1e:36:32:e7:18:
01:6b:28:c7:63:29:a5:99:10:89:48:81:56:0a:2c:f1:96:fc:
56:04:44:92:a6:f4:ce:33:dc:b3:2e:2f:3e:0c:77:03:99:2c:
5d:52:30:33:7a:aa:7a:99:4c:a0:0f:16:f0:66:7e:6c:ed:e7:
d6:3f:ee:8d:81:46:b3:7f:74:79:76:f7:e8:17:62:09:ea:ae:
48:84:61:f0:86:17:21:ec:08:76:2e:70:12:43:f1:5f:71:ad:
ad:50:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:37 2026 by rpki-client