Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: gouQjf/w4DzyIbZbJ2023fgkZ1X63MWpOXXuJNs+RZ8=
Subject key identifier: 89:8C:B3:48:85:04:3F:18:34:79:EB:17:3C:2B:06:B3:A0:DC:0D:0D
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019CE5236AC1FDBA512D86F352D0EA9C1146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0F45
Signing time: Fri 13 Mar 2026 03:00:29 +0000
Manifest this update: Fri 13 Mar 2026 03:00:29 +0000
Manifest next update: Sat 14 Mar 2026 03:00:29 +0000
Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: 134sf99bTkPFK4dBzfXPLQRWI0MkBIPWUNyCC80qRWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:6a:c1:fd:ba:51:2d:86:f3:52:d0:ea:9c:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Mar 13 03:00:29 2026 GMT
Not After : Mar 14 03:00:29 2026 GMT
Subject: CN=898cb34885043f183479eb173c2b06b3a0dc0d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:75:dc:3f:cb:a4:4c:26:a0:d5:75:ef:e8:
69:8f:5e:b7:6f:13:b8:65:1f:c9:d1:25:ab:ac:05:
6c:d3:86:cc:10:ef:be:03:f2:17:9d:49:93:0a:d2:
72:73:de:27:72:c3:19:92:cf:a0:61:77:aa:2e:e1:
5a:12:52:ef:17:33:06:f7:ee:60:5b:ae:ab:49:ef:
07:2e:4d:5d:07:a8:17:bc:5a:ee:33:34:93:ff:82:
c1:ad:4d:84:2a:0c:c2:4f:3f:e7:3f:75:0d:8b:1b:
20:b2:45:af:af:2c:49:47:bf:de:8e:fd:c2:91:19:
fc:c4:3e:be:4a:4c:f6:70:8e:09:27:d1:37:b1:e3:
d3:a3:12:10:63:5f:46:9b:93:db:05:fd:ed:ee:ed:
0c:fa:36:db:c6:3f:24:3a:9e:3a:2a:a6:6a:fc:0a:
e6:3f:9d:78:93:df:ec:c1:b0:d4:16:81:73:51:6d:
f5:66:a0:e3:4b:82:7c:ed:0b:33:ae:5c:34:b9:5b:
39:2b:97:18:5b:bf:0e:73:68:1d:b4:89:35:2c:9e:
75:7e:b7:3b:07:d3:18:6f:93:36:af:9f:8e:31:23:
38:c4:1e:5a:b0:8c:bd:66:86:80:b9:00:b4:0e:0d:
76:52:0e:50:0b:a3:f6:fc:d6:58:93:aa:ea:e4:22:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:B3:48:85:04:3F:18:34:79:EB:17:3C:2B:06:B3:A0:DC:0D:0D
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:f2:a9:a9:69:e2:9b:7f:40:ad:a3:3c:1b:bb:ea:e2:58:
2f:e0:4f:d1:cd:b3:11:ee:ca:92:55:12:b0:8d:f0:b2:46:60:
f1:67:52:4e:c4:f8:b5:fa:e7:0b:c7:66:7d:05:88:23:53:8d:
26:0b:40:29:b5:e3:49:32:73:67:30:41:14:15:c1:03:09:ce:
f8:5c:75:8e:21:a1:61:79:42:40:20:c8:46:be:ef:e4:2b:bd:
46:0b:cb:97:40:62:10:eb:57:5e:eb:04:76:a2:40:32:94:a6:
32:99:18:89:c4:04:14:85:55:38:d8:1d:5b:08:c4:7b:0b:0e:
78:a5:24:95:a9:39:25:a6:50:5a:ef:bb:09:ec:95:da:d5:16:
41:13:f3:61:56:d8:b4:8e:23:ea:a9:70:d5:e0:f7:f2:a1:31:
4d:45:3b:c3:1c:42:0f:ab:96:6e:67:2f:97:73:1f:b8:e5:06:
d2:a1:5f:75:32:4e:3c:a5:ad:f0:eb:be:04:f6:b6:d9:78:ce:
72:f8:86:85:25:81:bb:e3:c9:6f:6f:33:3a:72:c8:1b:48:a3:
28:f2:11:c2:07:e9:50:1f:8e:ab:cb:5c:b9:62:b8:85:00:ce:
3b:98:41:aa:2c:74:89:bc:69:01:99:cd:74:d1:d5:26:b9:64:
b0:c0:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:30 2026 by rpki-client