Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: Z1Glqi1rF9k+Swhn+rIrXvjYs0kCXA+JdFQv5f3XFp0=
Subject key identifier: 27:04:56:9B:7E:35:D1:31:DC:A8:E5:F6:9B:CF:0E:8E:C9:CC:3F:46
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019D38D2A756293483F763FF5385B7675222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: aEmbs8F1n+2b7QQ6KAak3ilyJAon0Yr2gyc/2pduJ0M=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a7:56:29:34:83:f7:63:ff:53:85:b7:67:52:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=2704569b7e35d131dca8e5f69bcf0e8ec9cc3f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:58:65:9c:00:bc:bd:e2:f7:ad:cf:17:28:
27:3f:20:24:db:5b:e6:20:0c:be:93:c1:4a:a6:7e:
e3:89:41:17:46:dc:74:89:82:95:5a:84:23:ed:bf:
e0:5f:40:47:ce:61:15:c9:99:45:a6:ce:aa:38:0f:
a8:9a:62:70:1c:0e:88:db:7f:f1:80:59:23:d5:c4:
8d:f0:fa:f1:cc:20:77:42:3a:d9:8e:6d:99:02:a1:
72:ec:4e:ae:33:56:00:c3:b4:60:6d:46:ad:37:84:
61:50:14:84:c5:14:6e:87:55:03:87:a4:c3:cc:25:
99:a9:c1:2e:48:7c:94:79:f1:53:3d:bb:1a:c6:54:
20:14:aa:a2:a3:88:df:90:55:cd:a0:2a:ca:45:52:
db:cb:09:af:e8:b9:1e:bf:b2:66:87:f4:6d:e3:cb:
61:f6:f8:59:bc:a6:93:ee:e0:fb:eb:7e:65:c1:a9:
39:7f:63:6f:ed:54:d8:ce:86:26:ae:e1:f0:e9:6b:
3e:16:f0:05:32:28:90:41:3c:f7:25:e2:96:d7:b9:
cc:d2:f0:ea:d4:29:43:e3:90:08:86:c6:f2:3a:ad:
9f:8a:36:33:4f:07:e9:07:75:68:60:cc:1e:e1:11:
36:44:d8:cd:b0:43:34:7c:de:02:86:9a:b9:19:9b:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:56:9B:7E:35:D1:31:DC:A8:E5:F6:9B:CF:0E:8E:C9:CC:3F:46
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:19:c0:7f:80:1c:b8:10:fe:d1:9e:33:71:c6:0e:db:97:90:
bc:3f:bc:f9:d3:02:2a:be:a8:0b:10:02:b3:84:aa:02:7a:d7:
2c:96:c0:17:7b:bf:0c:25:8f:cb:48:e3:b1:ad:86:a8:96:d2:
1d:f8:6a:ab:dc:a4:ce:12:fe:b4:8c:ff:43:ab:62:06:2b:2e:
04:fe:db:ad:7a:b3:3c:f0:22:a4:67:c7:f5:d3:20:e2:2e:34:
96:c7:95:e6:18:3e:60:92:b7:96:59:23:68:ab:4f:49:5d:1f:
55:72:0b:57:43:c3:33:64:86:67:fd:f7:0f:ed:66:e6:08:9b:
53:d9:ae:2c:26:73:d6:a4:e4:f1:fd:6c:f1:19:f4:15:ce:57:
43:e0:3b:8b:01:85:e5:e0:9e:4d:5c:b5:2e:6b:c3:9e:6c:66:
cb:9b:f9:b2:4e:17:a7:e6:3c:bf:22:aa:36:0e:4e:af:f2:5e:
f2:0d:24:3d:a0:69:6c:65:40:4e:2f:e3:47:db:78:2b:8d:9c:
4e:26:e7:29:76:38:7b:63:cd:ba:d6:5a:37:0e:8c:63:a6:0a:
8b:84:38:f9:47:d2:52:d6:40:5c:bd:4d:db:5a:d2:94:bb:b2:
b6:c6:42:80:06:8f:8b:28:46:3a:3a:ef:30:d2:31:c5:2f:25:
7e:9a:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:48 2026 by rpki-client