Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: QiFQo5aTiAfddlE1EYSJgXqri5jHx38WuhTEeVd9DdQ=
Subject key identifier: 7D:1B:70:50:44:39:15:C3:71:21:54:20:1F:69:90:15:22:8D:63:CF
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019D397791A1AA0A416B96C65B42C62D0D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 12:00:30 +0000
Manifest this update: Sun 29 Mar 2026 12:00:30 +0000
Manifest next update: Mon 30 Mar 2026 12:00:30 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: WG6BcM/q+VuE8EHCtqTuTXGqWqSe/XbsC7r7Uygudfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:91:a1:aa:0a:41:6b:96:c6:5b:42:c6:2d:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Mar 29 12:00:30 2026 GMT
Not After : Mar 30 12:00:30 2026 GMT
Subject: CN=7d1b7050443915c3712154201f699015228d63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:c3:79:1d:43:f4:b5:4d:ec:5a:1b:ea:cf:
fb:3f:d9:b8:e0:dd:53:8c:e2:bb:78:9d:06:e2:da:
b4:c8:67:a7:da:de:72:6f:29:15:c4:41:ae:6f:d0:
6e:d0:3f:a6:25:24:72:ba:67:29:f0:df:91:1f:41:
06:c4:55:0a:d4:7f:73:fb:b4:4e:01:c6:46:1c:13:
76:e3:76:37:be:5d:a1:7b:8a:cb:be:cc:24:38:63:
a5:eb:34:a1:50:88:d8:90:9c:48:68:f4:bd:17:3d:
ac:fe:b8:28:92:7d:3c:89:70:87:80:6c:9e:86:53:
cf:56:03:a9:8c:9e:e9:0c:ec:f0:fa:8b:c0:d5:0f:
c9:81:94:08:8a:2f:b1:ab:35:a5:21:dc:c5:66:68:
e1:26:f4:11:37:d8:31:19:cc:47:65:e9:d7:54:52:
bc:e9:60:eb:ba:d5:9d:2d:28:d7:cf:ea:51:b2:db:
72:bd:e2:ec:90:a3:f8:e8:a0:e0:82:6c:2c:f9:6e:
34:2b:54:12:b8:49:8e:2a:2a:b8:73:27:59:a7:b4:
cc:7d:a5:d1:ae:d0:e4:8a:cd:17:b4:11:ab:37:27:
0b:ea:f5:9d:f4:a9:6a:a1:2c:2b:82:60:50:67:da:
62:39:12:d0:ed:46:75:b3:cd:19:44:20:30:54:a4:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:70:50:44:39:15:C3:71:21:54:20:1F:69:90:15:22:8D:63:CF
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7d:89:b4:50:57:07:2b:f6:eb:3d:cf:f3:dd:1e:16:35:56:
c2:26:fb:07:64:17:9d:38:9b:05:5e:3f:bd:59:15:a9:5b:81:
85:17:f7:48:68:5b:a5:18:fe:93:e4:17:cb:83:6b:2c:3f:44:
fe:38:75:1f:6c:a7:b8:84:03:20:b8:22:2b:8f:3f:c3:c0:25:
1c:4c:06:f6:be:51:10:07:9a:f3:3d:ee:bf:ef:80:62:8a:2e:
35:9f:79:54:80:aa:e3:c2:18:0b:e7:d1:86:d8:bc:4d:6e:15:
80:3b:8c:ee:7c:69:e6:2b:77:55:42:75:60:6f:89:93:ec:c6:
f3:4a:b6:7f:b9:7c:b1:ca:af:f5:5a:b1:5b:97:47:3b:75:9f:
ff:f5:fc:f6:69:ef:43:66:fb:9f:7c:f0:40:b1:d2:43:d7:3a:
01:5e:bf:a1:77:8c:02:5d:d6:3a:5b:74:36:96:3f:28:05:9a:
31:72:14:7c:40:f5:e6:1b:18:f5:8b:6f:75:f2:a6:de:5c:6a:
6a:28:e1:bd:6b:59:ef:e3:b7:8a:4b:73:da:e4:9b:e6:6d:fc:
65:31:4b:3d:9c:fb:bb:af:5f:93:4b:1e:d9:ab:05:59:d9:8e:
0d:b0:77:c5:1e:21:d2:ef:d2:a2:00:95:cc:bb:36:f0:81:9c:
f1:3b:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:39 2026 by rpki-client