Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: MiVwLaRGQJRV+6vFccTSICu6T48IkT3zbbA6hmvUJuk=
Subject key identifier: 4B:E0:B0:A4:A4:54:A1:D9:06:5B:E5:33:FC:D7:B3:26:28:94:9C:41
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 019D38657D064F21C1A3EB14D3E3699E2EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: BI1f2_dPn6g-BjeCDOP3JI42-SY.roa (hash: goOpdDSN7DtTvPMCWLdaixax4sJ1xWqSmv8uKvzhQeE=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: AqGIUiMnteS2pmf5L+njgInvyrAPBllBb8EeMMY6BuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7d:06:4f:21:c1:a3:eb:14:d3:e3:69:9e:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=4be0b0a4a454a1d9065be533fcd7b32628949c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:63:e4:52:48:99:15:22:1d:c8:c3:7b:62:
8e:46:a9:f4:25:3a:8a:b9:f9:9b:b4:da:1c:0f:3b:
d0:80:21:25:f9:36:30:59:dd:f9:f3:7f:c2:ce:b6:
43:8c:39:09:b2:07:0b:23:8e:da:fc:ca:e9:55:aa:
6b:1f:59:f8:48:bc:2f:67:ea:2a:55:c0:57:e1:3e:
56:b3:00:bd:60:d6:5c:68:3c:4c:f8:19:9e:91:a6:
3d:a8:72:66:1c:73:80:f3:7d:20:a5:51:f2:13:4e:
4c:83:c4:2f:9b:54:60:c9:e1:8c:1c:61:58:3f:f5:
83:aa:80:74:d7:7c:f4:cf:86:d6:37:1a:72:c6:35:
74:41:ab:a1:8a:1b:c8:68:56:ea:19:d2:9e:e2:01:
91:52:30:a9:4a:c2:d7:d4:7c:cd:1d:85:5e:99:83:
25:56:72:93:75:ce:7e:58:05:f3:85:1e:d8:7f:87:
31:87:09:4c:fe:67:6a:54:20:f7:e9:b5:7e:89:68:
48:d9:36:4b:f9:ce:05:d6:27:94:3d:eb:6d:1a:ee:
b6:6c:4a:5f:a4:04:47:19:cb:72:c9:de:c8:3c:b8:
4d:d9:a1:a3:ce:92:b7:7d:39:40:08:ff:82:4f:98:
a4:c7:b8:b0:f9:4a:05:8e:cb:32:bf:34:08:58:bc:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:B0:A4:A4:54:A1:D9:06:5B:E5:33:FC:D7:B3:26:28:94:9C:41
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:35:77:b8:c5:84:79:c2:af:be:30:37:6d:1a:c9:c3:24:01:
44:cd:e0:94:b5:4d:ba:57:63:70:88:1a:2c:e2:59:66:66:be:
f1:19:cb:be:5d:f4:c0:e6:e2:f2:df:18:a7:8f:c0:d4:42:c7:
f0:f8:da:34:06:df:96:21:9c:89:a8:98:9d:ed:29:0d:30:4d:
2b:4c:eb:4b:3e:c2:06:7b:56:78:03:68:0f:84:b2:dd:6e:5b:
ec:ee:12:3e:9a:64:2f:7c:1a:80:ff:0e:c9:bc:d0:6d:4e:27:
99:85:2d:20:f2:d8:e7:1a:c2:98:08:21:06:0c:b4:bb:ae:ae:
77:39:82:d2:81:87:f2:69:14:73:35:1b:61:fe:8c:54:74:80:
d3:cc:d8:6c:8f:f3:b0:14:23:cd:52:e9:1c:eb:93:6c:72:57:
b5:b1:81:70:a4:5c:c7:9e:d3:bd:a9:78:54:11:0a:46:e1:64:
f3:b8:ab:22:62:e7:c1:76:8b:5b:af:d6:20:41:97:a5:1e:d5:
7a:03:d9:d6:0d:e8:68:c7:ec:e4:04:5c:e7:64:63:3b:fe:2b:
b9:2b:81:16:8e:3a:9e:3e:aa:67:c9:0a:3a:52:6b:98:4d:07:
a9:4e:76:9c:0d:7a:af:2a:a5:1e:8a:0d:37:5d:6c:5f:9e:2b:
22:36:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:08 2026 by rpki-client