Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: kQMjS402iKeWCXZD3WZq2WWU7gkGKU+KQ4/cAoP2CPI=
Subject key identifier: B9:0F:50:B8:E6:2A:73:D3:E7:B3:24:D7:CF:58:FD:C5:CE:7A:91:F3
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 019D38D30E4D543433D56D4C7A60C19AEBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 1838
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: eeohtYRFJrWVG9fBhV9aZ0-UtVA.roa (hash: /gb0Y6jcS+z2smX0iJ5MevaKI/KMuFO1F7ZUjAjvbi8=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: FjrgkXrn2d40V83wzA2y7w/BxSeRAtuz0+dMRszYHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0e:4d:54:34:33:d5:6d:4c:7a:60:c1:9a:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=b90f50b8e62a73d3e7b324d7cf58fdc5ce7a91f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:44:44:40:d2:a2:ed:7c:8b:7d:3f:a9:11:
a2:76:69:8d:5e:e1:d5:2a:78:a3:29:d9:08:40:ae:
b7:38:5c:77:4e:94:96:ba:7e:31:45:5f:5d:a5:e4:
11:b4:8c:48:79:c5:cd:a8:18:73:0b:90:5c:52:09:
e9:73:bf:e8:57:39:71:28:f9:f5:47:3d:78:cb:ed:
1b:89:89:40:47:77:a6:fd:e4:94:30:83:c4:fb:37:
b8:50:9b:ec:99:05:be:43:da:88:55:9b:9b:53:12:
34:27:77:43:52:59:da:b5:76:9a:a1:e6:a1:4b:97:
f9:7f:11:38:2e:f4:29:40:00:17:5e:71:a8:22:86:
b9:98:6f:88:7e:e1:75:1c:be:09:4e:ff:e0:23:44:
2a:0e:6a:64:24:a1:60:75:51:f3:e0:c9:2c:40:de:
cd:6c:a8:a7:21:75:d1:51:b4:8e:3b:97:af:df:5c:
ad:59:b2:dc:0d:8f:2b:6e:b0:a5:36:7f:92:71:5c:
69:03:18:14:7d:cb:77:5f:52:bc:7b:c7:df:31:42:
a4:3e:43:14:12:0f:df:c0:9d:1b:27:cd:dd:7d:15:
53:63:d1:c2:79:2d:b6:55:12:da:b2:eb:05:94:5e:
0b:03:10:a9:33:8b:e3:18:53:41:8b:56:a4:69:d6:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:50:B8:E6:2A:73:D3:E7:B3:24:D7:CF:58:FD:C5:CE:7A:91:F3
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ac:5a:ea:38:6e:9a:b7:03:91:3d:b0:b3:9f:42:ab:8d:c9:
10:b3:c5:b9:26:02:f4:e7:bb:9a:dd:f1:2f:e1:cb:fe:ca:6f:
b9:07:1b:c1:c8:ba:5a:55:a0:2d:56:ea:01:26:5b:b3:b6:c4:
17:6c:10:8b:63:cf:06:3d:f8:01:a2:60:08:46:cd:39:e0:7e:
b1:95:2e:37:fb:d9:b5:b0:75:26:8e:c4:ea:83:b2:0a:69:3c:
e2:ad:52:c7:fd:60:1f:6f:20:73:88:62:d3:bf:8f:42:d5:3a:
74:8c:37:ee:6f:e6:6c:ff:0e:68:06:6c:aa:20:78:c4:7d:d1:
06:71:f3:5b:59:1f:81:a5:00:a4:50:24:12:83:8e:66:d7:b2:
fd:ee:dc:78:e0:9f:33:98:4d:37:1b:1e:b1:99:c2:b0:f8:ab:
10:f6:6e:c3:93:f7:19:bf:b1:60:c3:0e:2f:10:ed:8d:f8:a6:
dc:a5:f2:ee:6e:4c:51:71:00:a7:9c:0f:f0:3b:e2:fb:7d:4e:
fc:7a:42:f4:21:18:18:54:af:1e:bd:e6:4b:8e:91:45:0f:6f:
55:75:ef:e1:f2:5a:29:a9:b8:74:aa:a1:2e:c1:f0:01:74:7e:
b7:4a:5d:9e:be:f1:cd:a7:e0:24:52:c7:b3:16:01:89:0e:83:
16:73:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client