Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: euLwWW2chy3DeXLKiSVjK473ob75z7ra7r7mpS8z6GQ=
Subject key identifier: C1:9C:32:BC:47:99:18:0D:65:70:2E:F8:FE:42:01:44:37:EA:8B:80
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019CEC6F228148EDE0EB70CB5B7B92792DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 06D1
Signing time: Sat 14 Mar 2026 13:00:31 +0000
Manifest this update: Sat 14 Mar 2026 13:00:31 +0000
Manifest next update: Sun 15 Mar 2026 13:00:31 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: 5gSeIeR74fqMHwW99Ahr+b8lo86Uthja2iOsEKQELRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:22:81:48:ed:e0:eb:70:cb:5b:7b:92:79:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Mar 14 13:00:31 2026 GMT
Not After : Mar 15 13:00:31 2026 GMT
Subject: CN=c19c32bc4799180d65702ef8fe42014437ea8b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:c0:26:58:76:bd:ec:84:e9:8b:68:c7:3b:
6a:66:84:08:17:64:f0:0c:af:19:a7:00:e4:fd:1e:
22:22:22:f2:8c:19:fd:34:7d:7c:fa:36:b8:9d:7f:
4e:07:f8:40:30:10:c0:9f:c4:64:fa:9c:0d:4a:4f:
d0:4c:6d:81:e1:8f:0b:f5:72:2a:2b:0c:3f:a1:50:
d8:12:6c:59:f7:86:11:7d:3f:70:a5:7f:20:bb:82:
67:89:8d:70:9b:fe:72:b0:dc:07:ed:b8:2a:96:22:
bf:9d:05:0d:07:54:fa:49:11:8d:28:67:dd:4a:fa:
c8:29:d4:1b:16:9e:90:07:0c:76:cb:a3:9b:ce:26:
ad:76:42:06:c3:04:2b:41:f3:1a:9e:70:f5:eb:bf:
8f:84:ae:cc:7b:10:b8:9f:11:4b:cb:f6:1f:0e:27:
0e:42:50:c3:ce:7a:f7:0d:4e:f5:00:40:a2:98:e0:
f9:33:5a:7e:69:cc:ee:3e:72:5a:43:0a:24:ca:1a:
42:ca:9b:1d:6c:17:ab:2d:3c:a0:dd:69:cf:ee:59:
ab:88:9b:98:95:3f:80:4d:88:b6:53:43:0e:c3:9e:
02:e2:63:9e:f7:b9:c6:f5:af:ad:80:7c:67:4d:8b:
31:6e:ed:11:d1:9d:bf:05:e5:5d:1b:87:9d:31:0c:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:32:BC:47:99:18:0D:65:70:2E:F8:FE:42:01:44:37:EA:8B:80
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:86:69:26:e3:97:be:86:42:6c:40:44:e1:72:df:5a:91:
6f:91:81:4a:8b:26:8d:a4:dd:94:4b:8b:e6:b3:9c:3f:29:c2:
f2:3b:c1:ec:12:a1:fa:50:2a:bc:4d:c6:11:a5:3b:f5:d6:24:
85:ed:fd:61:e9:8f:7c:a4:42:ff:52:81:64:82:6a:c0:62:08:
83:e2:f5:86:82:6e:39:94:bc:75:a7:9f:83:f1:0d:be:f6:a1:
5c:1b:82:48:0c:be:98:02:e2:b0:40:41:87:e5:c2:d8:b6:31:
4c:48:89:bc:68:75:30:81:99:0a:9f:a8:3c:c8:e4:c6:22:49:
4c:b3:44:a0:85:40:66:8e:a5:7d:6a:28:30:6c:7f:fa:74:f6:
90:6f:f5:d0:95:e3:12:57:45:02:97:80:3d:4c:21:b1:7f:72:
3b:c6:10:ae:d9:f0:33:22:37:19:bc:86:eb:03:34:de:b0:a1:
71:37:ad:d4:a4:5e:f9:b8:26:57:1c:f4:8a:41:20:05:57:0f:
73:10:f2:d3:78:ee:ac:11:21:53:f1:c9:b2:71:56:39:8a:29:
58:73:0e:74:82:eb:91:0c:f8:c6:c8:2d:f9:89:c1:de:5c:18:
54:0c:b7:98:b0:b7:4f:5c:da:1f:93:65:54:70:2b:03:e5:1a:
84:e9:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:21:56 2026 by rpki-client