Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: oxl6IAyYLMqEPEfLNclyH0xVfRf8T5kepvnjAzWOdpU=
Subject key identifier: D2:25:79:40:68:CF:58:A4:EC:CF:98:33:99:AE:49:2D:13:DF:F2:5D
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 019D37C06E10C726023BDBE86A227C820B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 046F
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: ReyHSx5OaAHEAN_31kdMwxjhNUA.roa (hash: FJpHlOJWbKJBBURtI4JmCkNfG/SkO9cYxdgcfQETxWo=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: llImsPdeZScF9RtuJUXAzNsR7BITOqo88YF6WI33fDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6e:10:c7:26:02:3b:db:e8:6a:22:7c:82:0b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=d225794068cf58a4eccf983399ae492d13dff25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:6f:37:6c:93:9e:87:05:c6:8e:07:42:24:
cd:3d:a5:15:3b:d9:92:8a:19:34:94:0c:c3:2b:2e:
23:4b:ec:b9:1f:48:5b:d0:38:7d:4c:fa:88:51:7b:
cf:6c:9d:8d:0a:bb:8a:e3:82:c0:b0:90:8f:91:3d:
b9:a6:22:2e:91:ba:e4:86:df:6e:b1:95:00:a4:a2:
bc:c9:b7:06:0d:1e:da:8e:d5:96:34:c9:13:71:a7:
2d:0b:a8:22:b8:97:66:ac:5c:7f:9d:f3:97:5b:c8:
33:74:be:db:46:0c:30:f3:49:f1:05:fa:b6:36:a2:
b8:9e:d7:54:8b:7c:bb:6d:88:31:11:b5:16:58:07:
19:9a:3c:0c:7f:8b:cc:f6:b9:f7:34:3d:d6:09:32:
92:a2:5c:a7:c5:d8:9c:69:5f:de:33:4b:57:63:4a:
ee:18:c9:a0:fd:10:95:7f:b3:ee:5e:82:84:74:9a:
39:d0:51:17:b9:4b:5b:e9:33:21:78:94:61:3d:03:
e4:cc:8e:98:42:e5:d4:83:fe:44:61:87:4f:8e:5b:
a7:1f:cd:ec:e2:51:e8:76:14:80:b8:53:32:85:4b:
37:d3:87:a0:14:b6:03:ae:e4:da:29:e7:6b:e0:bf:
60:43:59:ce:8b:09:0f:b0:d2:86:d1:ea:24:1b:0a:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:79:40:68:CF:58:A4:EC:CF:98:33:99:AE:49:2D:13:DF:F2:5D
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:af:7e:31:1b:61:b9:1d:3f:33:d5:a3:ad:18:4d:bb:68:
12:4d:9d:8f:9d:6c:50:d0:06:3c:e3:52:26:22:ab:0b:0e:59:
31:2f:72:b7:a1:4b:c3:18:ea:06:9a:39:9c:18:8b:70:53:fe:
c6:b9:40:48:ce:af:99:37:eb:45:26:10:27:14:e8:bd:70:07:
61:70:53:a2:64:e1:a6:89:e3:d9:e6:57:3c:9c:2c:8d:4a:96:
03:1e:35:e3:7d:76:ec:2d:38:3e:af:1c:cd:db:bb:3a:9c:76:
a5:1d:ec:bf:1c:0c:50:24:56:cc:6b:b3:87:be:a3:b6:00:cf:
b7:5a:81:da:87:ba:35:1f:7b:af:95:c4:84:30:0a:98:69:8d:
cc:fb:6d:f8:c6:7b:c8:31:64:8a:6e:6d:05:2a:ca:d4:83:57:
a3:78:41:b6:e5:d8:76:34:1b:ee:9b:cd:29:ba:8a:e3:fd:1a:
c2:47:35:c2:25:32:c6:d6:64:d9:2d:bc:05:36:5b:a3:9b:45:
0d:22:96:79:28:4c:aa:bc:74:e6:ea:78:bf:2c:d4:8a:69:5e:
88:60:ef:77:b9:38:60:8f:62:d8:36:d5:71:22:bf:85:f2:ea:
18:aa:3d:49:b6:91:73:75:d7:1b:82:3f:60:d8:3c:71:5d:08:
a7:2e:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:20 2026 by rpki-client