Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: k9VXrhLRAqiJ9yyqVnZRevMk7NG/FTscBu4dTRadixA=
Subject key identifier: 9E:55:77:B6:F6:85:41:B7:80:92:93:86:E3:BC:0A:F5:14:20:31:61
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 019D3940E2F81C7024E3D5DD90834AC83157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 03AC
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: pqVfFWOO5piUJaCeDsLxwHwuCcrrDyr45PFpR8Dkpx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:f8:1c:70:24:e3:d5:dd:90:83:4a:c8:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=9e5577b6f68541b780929386e3bc0af514203161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:18:11:22:dc:40:20:73:05:63:e6:2d:a0:
23:38:59:c7:c7:95:7b:68:c6:0e:97:03:a2:2d:46:
af:16:e2:50:e9:e0:4e:12:91:36:bb:57:e2:55:1b:
77:a5:33:24:54:fe:b0:4f:de:3a:7c:cc:a7:92:77:
b4:d1:ff:2e:fd:86:2f:c0:a8:a1:6e:b6:02:4f:c3:
3b:61:9f:16:a1:57:c0:63:27:9d:b3:46:e6:83:0c:
e1:14:30:1a:be:3e:99:a6:f9:c7:71:01:7b:cd:a5:
4b:56:50:8f:08:12:f7:40:24:15:35:93:f6:18:9d:
36:6c:42:64:7f:83:75:8e:85:36:6c:4f:be:4c:88:
2d:26:73:ce:84:db:b2:12:2a:26:b9:65:ff:78:28:
b2:c3:b3:e8:11:11:98:bc:20:b4:a4:e0:01:1a:0a:
fd:96:4f:54:6e:35:4c:da:ee:9c:56:08:62:22:f3:
0a:65:a0:e2:bf:90:37:f8:4c:36:80:0b:8c:b5:c7:
33:e4:76:31:25:cb:12:80:4f:83:77:1b:ef:ed:4d:
0f:78:f7:ff:f7:20:a3:24:c9:60:3d:af:49:c5:d1:
fe:a9:7f:5c:ea:7e:d8:30:08:21:1c:a4:64:2b:d1:
9e:5f:c8:5d:58:4c:dc:4b:46:57:d4:02:af:9c:a6:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:77:B6:F6:85:41:B7:80:92:93:86:E3:BC:0A:F5:14:20:31:61
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:d7:f7:c8:6a:a5:f0:1c:bc:96:40:ff:9e:cc:52:2f:9a:
de:c2:ab:75:b9:2d:f1:0a:61:01:4f:2e:ff:c9:8e:0d:46:79:
d2:1d:f7:f4:22:25:b3:0f:03:b8:b6:00:f9:4a:e6:1f:52:25:
4c:05:e4:62:6e:32:76:ed:4e:bf:5c:6c:68:de:af:b6:ae:cd:
f8:91:c7:f7:67:62:64:0e:84:c0:fd:9b:bf:d4:a0:28:ec:70:
94:e5:e9:1c:b2:f7:9b:2c:7c:0e:c7:de:e5:5e:81:6a:f0:14:
a5:9c:e9:02:ef:7b:bc:85:91:cf:c0:32:36:e4:61:d2:6f:15:
9e:bf:4d:ee:58:ef:84:80:98:f8:2a:b1:66:d6:61:2d:de:5b:
f9:9e:77:8e:3e:e9:7e:39:27:4a:8d:83:6f:fa:02:78:e3:89:
45:78:38:46:4b:b5:4b:fc:40:b7:d4:f0:0b:e8:fc:3d:e9:c0:
0a:22:7b:ad:8b:28:cb:7e:de:cb:1a:18:83:fc:8a:ad:3f:2d:
5e:e8:8d:4d:4f:79:88:28:4a:68:dd:84:9a:df:f8:76:1f:bb:
64:e4:0c:3c:f1:f7:01:1d:29:9e:4d:2e:44:08:d8:81:f1:d9:
6d:82:42:b6:a8:f5:ce:35:9d:d8:57:84:3d:f1:bd:16:ef:d0:
e5:f1:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:27 2026 by rpki-client