Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: lvrjT501HlYC3d6KvHPWYlgcJRNJS6xS/vAPiZ85Gwk=
Subject key identifier: F4:44:5A:AD:37:68:63:07:DC:9A:79:C8:EC:D0:55:F9:E2:83:51:EA
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 019D38D348F4E194C49584C1C7386418D21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 08E9
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: IHQGYZycBDyAVTPAum8XIrj47kQ.roa (hash: S11IX6oJmfauUmzmopL+w4IEvy2f52JVhN8t0Q5+tAM=)
2: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: 64CCaiwUU7ijRrVWez39RiXnhcAr/owhIb5Ck1u2PxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:48:f4:e1:94:c4:95:84:c1:c7:38:64:18:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=f4445aad37686307dc9a79c8ecd055f9e28351ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:a9:89:95:f9:ef:a5:80:70:fb:af:7e:2d:
0a:cb:f7:53:98:69:3c:c2:0d:8f:da:f1:b4:b6:5b:
11:3d:61:f9:ba:f8:9e:34:0a:41:69:ee:6f:ad:f4:
0b:0d:1b:94:ba:7e:6a:3f:3b:52:60:cf:d6:0a:64:
37:22:28:a7:11:a6:b1:9e:1a:c2:46:f6:c0:d8:34:
a1:e0:b5:26:90:da:ac:24:7d:71:48:4c:19:c6:d1:
a7:fe:b8:0a:15:bc:06:32:da:49:81:60:30:53:b6:
b5:b8:b3:91:5e:21:00:fe:ea:60:2d:9b:d8:59:50:
8f:44:d2:04:1b:c0:c7:d1:2b:a1:7c:73:09:5e:f7:
f4:d6:26:a9:d3:f2:2f:5a:d0:fc:55:0a:09:15:d8:
f5:94:3b:91:2e:b4:1f:60:15:73:da:0e:bf:c8:e2:
d3:1e:5b:c7:e5:62:3a:d9:8b:a5:38:3a:a2:20:3b:
49:5e:9f:59:1d:6a:04:60:9b:dc:c6:4c:94:d7:f3:
cb:a7:1b:96:dd:8d:a6:d0:07:89:86:db:8f:e9:de:
50:90:f1:23:14:58:a3:b7:e6:c7:0f:c8:af:f6:ff:
35:4f:b1:e2:8b:0d:ed:ee:27:8a:b3:6b:95:9a:74:
c0:07:b8:7a:c1:60:94:72:7e:14:f7:c1:fe:1e:55:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:5A:AD:37:68:63:07:DC:9A:79:C8:EC:D0:55:F9:E2:83:51:EA
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:29:c3:be:17:e4:6c:2a:b7:fd:0e:1f:66:02:85:ec:da:
fa:d4:91:5a:db:45:f0:31:31:06:5a:84:80:00:9f:5e:b6:92:
4d:5c:6f:f0:c4:c2:4e:c2:f4:d8:71:81:a8:f5:38:cc:fb:b2:
d6:4d:06:03:0d:00:44:fd:d5:96:d2:6a:35:92:03:36:c6:17:
65:1d:5f:a1:21:a8:42:ea:19:17:0f:ca:9b:e4:ae:8a:4e:b9:
8f:f7:5a:ad:37:3f:10:ec:9e:1d:ec:c8:a6:36:85:8d:8b:1c:
2f:c2:ca:9d:eb:86:68:c9:9a:35:7b:96:32:48:1d:13:78:db:
2c:43:5e:36:0d:fa:47:1e:cf:6b:11:a2:3f:4b:11:a1:8d:7e:
77:72:5b:39:00:17:84:3b:44:9b:8d:c2:76:a3:5d:3c:12:2b:
9e:8a:75:c9:0d:bb:90:c4:ff:29:99:af:2a:5d:e8:6c:55:c4:
d1:32:cd:c0:90:78:61:95:f7:24:25:f9:11:71:1d:af:0f:1b:
1f:58:8c:dd:2c:52:57:62:fd:4c:76:95:4d:70:67:32:93:2a:
81:ff:d3:82:9a:50:0f:0b:cc:49:1a:a3:db:25:3c:bb:2b:7b:
a7:9a:5a:a0:b4:c4:a8:8e:b0:00:1e:ef:64:c0:86:36:a0:73:
1b:d7:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:10 2026 by rpki-client