Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: tdc9Lvu4i3/fm7CHwhMKOs0dGtzmy2uavVOUHHkIYfU=
Subject key identifier: AE:22:5E:33:89:FA:9F:40:49:88:45:8F:D8:A8:74:F6:54:46:78:0C
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019D3A1CBAB84C19EC4CBE07648E6AA0295A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0FE3
Signing time: Sun 29 Mar 2026 15:00:54 +0000
Manifest this update: Sun 29 Mar 2026 15:00:54 +0000
Manifest next update: Mon 30 Mar 2026 15:00:54 +0000
Files and hashes: 1: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: lrRXlGEScEIhD5bToWdNb8q7dcMNJ+iyueSG01Gnu4U=)
2: aZfqaIa_bktc0XTanoEHKkOjRso.roa (hash: mjs8YYHIWn4rHP7Qb2KDD/bwrim/6L1hngAF7LoemgM=)
3: p-AfH-TKOfnhGj7blmBf1Eou-vY.roa (hash: zP2xRRGKuJXHvcRgKn99qh8Cqni6s2W90yR9ji222a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ba:b8:4c:19:ec:4c:be:07:64:8e:6a:a0:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Mar 29 15:00:54 2026 GMT
Not After : Mar 30 15:00:54 2026 GMT
Subject: CN=ae225e3389fa9f404988458fd8a874f65446780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:18:90:50:22:1e:6d:7c:66:2a:5b:1e:d1:
ce:30:f9:62:95:d7:cb:e2:c7:c8:f3:dd:00:69:28:
54:0a:07:be:60:4a:f2:66:75:ce:49:2f:cd:e2:5d:
27:85:f2:37:68:99:2d:cc:39:f4:bf:1b:6b:fc:d7:
66:48:b9:88:45:7d:a8:ef:f2:5a:c8:a9:49:99:dc:
9a:4d:a7:14:41:50:15:02:3a:16:84:58:71:8f:0c:
af:56:49:0e:85:d5:db:44:ab:b2:56:d6:e2:52:9f:
e0:f5:9d:2f:d4:9c:38:d0:20:cf:d9:80:c8:65:1d:
b7:1b:2c:de:14:3e:e6:80:89:6e:d0:ae:63:0b:d4:
6f:75:ad:a4:87:95:ca:d8:33:fa:51:c0:0b:ef:6c:
aa:a9:6a:bd:de:f1:c2:1c:6f:2a:a4:d8:8c:49:fe:
e9:d9:d5:03:81:c1:96:9e:a1:f7:06:02:15:7c:31:
df:91:a1:0c:65:a6:47:23:ee:78:8a:d5:ad:28:65:
e8:8c:2c:3f:d4:5c:b4:0d:95:dc:62:eb:f1:17:71:
78:a3:5a:58:40:86:7d:d1:3f:50:f2:54:1f:a8:7e:
90:f5:41:74:db:60:6d:4f:cd:03:61:34:a7:bd:1a:
13:7a:24:de:c1:59:7c:cc:84:9a:64:4c:19:d7:91:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:5E:33:89:FA:9F:40:49:88:45:8F:D8:A8:74:F6:54:46:78:0C
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:d6:ae:95:cf:9d:e1:29:cb:50:96:9f:f7:fb:84:8b:81:
d0:25:2a:d3:4b:24:d8:8e:60:bf:cd:69:94:16:8f:d3:9c:e7:
e1:06:28:de:21:6a:5d:8d:67:4a:49:fa:fd:42:4f:c0:d6:8d:
e3:50:b0:95:cf:10:ad:88:a1:03:2c:13:08:5d:e0:e1:d6:38:
9f:53:ff:f3:ce:6f:5e:a8:15:66:92:11:43:36:6c:82:53:99:
4b:2b:0c:2f:89:bb:45:fa:34:88:3a:2b:3e:03:54:aa:0d:93:
79:8b:31:9d:f1:46:64:27:b0:15:9b:3d:ff:27:61:bc:47:6d:
e9:0e:33:89:dd:e4:03:b2:ca:4b:3c:5f:14:95:e5:62:19:e3:
5e:8a:8c:eb:2a:12:0e:2e:d6:2d:85:c2:33:00:58:04:9d:54:
43:61:b3:2c:de:ef:eb:39:e8:a6:3c:9e:bb:41:3d:7d:46:5f:
9c:2c:c1:fb:f1:9d:78:49:69:36:60:db:b4:23:75:c8:f5:2b:
b3:e7:c8:65:92:01:3d:eb:41:23:c5:1b:24:88:ce:9c:cb:f8:
b6:25:d9:b0:f8:43:50:80:a4:62:d4:e4:2c:3c:1d:b6:0a:c6:
be:e6:58:d9:15:e7:bd:31:72:7c:d6:5f:b2:07:30:ca:06:a1:
50:95:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:42 2026 by rpki-client