Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: G1eJBch4Qx+vob6Hc8mwTIc4WuhmvRMdlH1u65JSK08=
Subject key identifier: 55:88:CE:A6:91:7A:44:1E:71:B6:EA:2F:D5:CE:EA:B6:73:33:00:A3
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019D3AC228D7D4734035433C6FC21A1F9872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0803
Signing time: Sun 29 Mar 2026 18:01:36 +0000
Manifest this update: Sun 29 Mar 2026 18:01:36 +0000
Manifest next update: Mon 30 Mar 2026 18:01:36 +0000
Files and hashes: 1: ktuOQpvhIVshzEh1AKVHwjETmDQ.roa (hash: RkFBt5jBdqM9V+vWsmvf1KhOIAy1CQTkom8d2viWOuc=)
2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: SzZtbFc1zscBZ37XBWP8DtO/9k5nMC+vd7Q8BPa7zyc=)
3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=)
4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:28:d7:d4:73:40:35:43:3c:6f:c2:1a:1f:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Mar 29 18:01:36 2026 GMT
Not After : Mar 30 18:01:36 2026 GMT
Subject: CN=5588cea6917a441e71b6ea2fd5ceeab6733300a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:28:67:80:41:f6:11:d1:df:d0:aa:63:c0:
89:ca:28:34:7c:b6:f4:20:2b:f5:13:a3:b4:86:e5:
98:35:24:d8:ec:10:0f:25:77:d9:4c:41:62:8e:35:
30:d5:63:f5:55:c6:af:4a:50:d5:27:a9:af:ed:41:
02:e8:34:85:9c:23:0c:d8:5d:78:21:10:68:05:ce:
5e:48:e9:03:6d:a8:d0:db:37:04:e9:fb:a3:5c:3c:
32:a1:7c:8f:a0:4b:69:f5:6d:15:c1:75:38:0e:f9:
f5:47:a6:56:8f:02:e2:97:49:69:33:06:27:36:6b:
d0:44:5b:8b:da:4d:e2:48:79:e0:9e:ff:6d:9b:12:
bc:68:94:97:d0:d1:97:bf:79:c1:6c:6a:f4:84:2d:
31:86:3c:8b:ca:10:8f:1e:a9:db:c9:2e:55:24:08:
b1:61:37:1a:83:65:38:d1:5e:ab:00:8c:9a:d3:ca:
07:37:90:38:cf:fa:91:61:f8:33:1b:e3:58:ee:09:
84:d0:b4:20:9b:aa:2d:fe:cc:6e:6e:e3:58:6d:81:
50:21:81:9e:ba:6f:48:b9:0d:16:9b:eb:9b:7c:7c:
9b:d8:03:1f:13:92:81:6e:30:4b:01:fb:10:0c:77:
0f:f0:06:94:e5:7b:db:d1:64:a0:51:da:98:6b:0f:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:CE:A6:91:7A:44:1E:71:B6:EA:2F:D5:CE:EA:B6:73:33:00:A3
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:d3:74:88:08:79:b8:b8:b6:8d:88:6d:4f:85:25:5f:05:
e3:98:96:b0:1b:d0:7d:5f:c9:78:cb:16:c1:82:fb:08:96:05:
16:9e:80:6e:aa:d8:9b:df:84:db:fc:3b:e2:21:be:5a:1c:bc:
48:f0:7c:2c:98:e9:b2:70:31:a9:8d:af:08:42:f8:ba:8c:3d:
08:21:ee:bb:67:c7:6e:0f:06:ca:5d:40:ed:24:1f:82:c4:57:
1e:71:d2:a4:a2:3f:8c:33:21:5c:9e:33:c2:64:9f:ba:3d:8b:
79:9d:8c:ad:6c:99:34:a6:63:c8:11:13:41:9e:68:76:a1:d9:
de:35:3f:0f:0f:f7:0d:90:09:1e:f3:e2:17:96:4c:99:46:3c:
18:bf:57:3c:fd:cc:a2:c4:2b:79:a0:af:c3:b6:67:db:c1:93:
5c:d8:d0:52:58:10:7b:7e:c3:de:99:6d:ce:39:e2:dd:45:aa:
d2:92:d1:c9:1e:3f:8e:95:25:cb:52:43:72:0b:c4:14:80:32:
66:ed:c9:41:16:9d:81:7d:30:f5:20:ea:03:bb:18:53:0b:71:
b9:ff:d3:12:df:e2:1a:17:9e:67:14:52:bf:3b:a6:98:05:98:
a4:88:03:77:91:8c:32:b9:5b:d5:78:36:1b:46:58:18:0f:88:
e2:86:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:25 2026 by rpki-client