Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: yQ9DFV5OmAGByLv48I3HAJpVVa88sSOgeJxzJ3+BnV4=
Subject key identifier: 14:FA:61:43:B5:7D:10:79:AB:A2:8E:F4:60:81:55:7B:67:42:9F:26
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019CE3A3039951A71E7CF875702868FD9827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 0449
Signing time: Thu 12 Mar 2026 20:00:37 +0000
Manifest this update: Thu 12 Mar 2026 20:00:37 +0000
Manifest next update: Fri 13 Mar 2026 20:00:37 +0000
Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: 2x9R6h51Ipn70XtsZA6Ix44SY5iEP7u6PDZbWZozH7s=)
2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:03:99:51:a7:1e:7c:f8:75:70:28:68:fd:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Mar 12 20:00:37 2026 GMT
Not After : Mar 13 20:00:37 2026 GMT
Subject: CN=14fa6143b57d1079aba28ef46081557b67429f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:93:bd:79:ed:0c:aa:6e:90:1a:13:32:21:
b3:57:fb:a1:4b:b5:88:4f:e7:a3:4f:ab:2b:55:61:
57:a0:d5:16:9a:ac:e3:2f:c1:79:30:62:8f:f2:f5:
30:97:69:62:00:fd:97:27:b8:3c:c8:dc:7d:71:b7:
0c:d8:1e:11:a7:60:12:f6:6d:c6:48:75:4d:ce:d7:
a4:7e:4d:26:7c:07:2b:f1:53:25:4c:33:2f:0e:1b:
ba:10:0f:99:a5:0f:7f:b7:4e:96:cc:16:03:c9:9e:
35:c5:f3:7d:d3:4d:84:ee:2b:28:9a:78:38:19:a0:
44:d0:e3:54:d6:eb:91:3b:bf:03:32:02:f4:fe:80:
c3:fa:4a:8a:0a:21:58:12:44:bc:d8:a8:44:9c:9d:
bc:74:b2:d3:b5:6a:d2:89:2f:33:5e:51:e0:c2:c8:
78:22:f7:ad:7e:28:97:3b:8f:42:94:b3:fa:96:29:
f1:e1:c6:20:c7:43:97:24:94:7d:8e:78:c2:37:df:
a2:7f:84:57:2f:34:6e:f8:8e:51:a9:0f:6c:47:f2:
57:e7:58:80:9b:52:9e:fd:c1:9e:43:f4:4f:16:57:
3c:48:e7:33:de:df:ab:cf:25:67:6f:53:e0:ff:a7:
dd:1d:ca:71:6b:8c:7e:82:8f:53:b3:0f:ce:e3:fc:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:61:43:B5:7D:10:79:AB:A2:8E:F4:60:81:55:7B:67:42:9F:26
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dc:f2:2c:e6:fe:d8:43:50:cd:5a:e8:31:84:bf:71:b1:39:
33:39:58:9d:cb:ef:17:c6:c6:62:d7:1c:7d:c8:ae:71:9a:59:
cf:76:70:27:bb:31:06:c5:c8:ee:d3:ce:08:9e:b7:5a:d3:5b:
da:a7:9a:bd:72:f5:4a:6f:88:4e:90:bd:55:1e:30:90:00:40:
c4:f3:3e:6b:62:e7:b6:d9:5f:d5:a3:04:02:f1:64:4d:4b:21:
59:d4:5c:0f:4f:07:7d:b1:e5:ce:dc:3a:e9:0a:f4:c5:e8:b0:
87:f2:03:db:90:13:8f:e0:54:80:e3:b5:ce:ed:d3:52:13:fb:
59:cb:6b:31:10:3b:10:b1:21:7b:e0:ac:f5:d3:a8:7d:15:08:
50:7d:15:6c:9c:c1:f8:ed:cd:ee:26:aa:2b:ed:33:80:54:d3:
ab:de:a8:92:fa:b9:8d:aa:80:70:d8:8b:be:29:b2:56:93:38:
3e:ac:a5:f5:bb:6d:65:54:ac:8f:0f:b1:3c:55:6c:17:4b:92:
f0:ae:05:02:3b:1e:3c:91:c2:6c:27:6b:39:86:a9:1c:05:cb:
51:ae:ef:5b:b2:d9:70:fe:cb:83:35:e0:b1:4c:27:a9:7d:be:
1d:64:5e:de:09:07:db:0c:38:bc:11:97:4f:37:92:7a:72:3e:
20:ff:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:51 2026 by rpki-client