Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: VaLT2j79p7IAAmlNbQhEjVBiIbi4kcqoswCVCqOYW/Q=
Subject key identifier: 26:5B:EA:E2:2B:E2:D2:A0:27:32:CD:EA:FF:44:93:F0:A5:BE:0E:9A
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019DCED0C3A18DAC6420E79D87BDC9D654C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 12:01:21 +0000
Manifest this update: Mon 27 Apr 2026 12:01:21 +0000
Manifest next update: Tue 28 Apr 2026 12:01:21 +0000
Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: YUMb5Ozd493jH3BNYA+hQuPH+hqO/sFfNeRkDoie4To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c3:a1:8d:ac:64:20:e7:9d:87:bd:c9:d6:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Apr 27 12:01:21 2026 GMT
Not After : Apr 28 12:01:21 2026 GMT
Subject: CN=265beae22be2d2a02732cdeaff4493f0a5be0e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:ad:c4:77:f5:69:07:d4:83:4b:5d:03:ad:
7f:e3:ec:f6:52:12:66:8e:51:72:a4:81:1e:70:60:
ce:54:73:1c:04:05:84:31:42:66:dd:87:7a:b8:fb:
86:bb:65:96:be:16:c9:72:28:1f:b3:f3:ab:e2:23:
4d:d6:6a:c5:e7:3b:3f:a5:02:00:b5:80:36:90:35:
6f:85:a4:f7:b4:46:ad:1f:31:04:87:4b:7b:50:f6:
5f:b0:d4:31:2f:a8:13:f0:d2:e7:25:80:76:6e:26:
5b:ec:59:48:fa:4b:b3:b0:0a:43:61:e7:2b:a0:38:
a2:7a:45:55:0d:25:f2:98:35:15:70:c5:58:d4:32:
19:47:9c:20:d7:1a:8e:1e:6d:1a:9a:c3:f9:25:79:
99:4c:24:89:42:17:d0:c3:fd:57:f3:e9:c6:37:45:
ab:93:d1:09:af:67:3f:e6:ef:5b:db:69:6a:68:19:
a5:5c:30:ad:2f:e7:ff:3b:ca:84:6c:28:0b:b9:4a:
39:5d:9b:3f:03:7b:57:73:83:f5:f8:4b:01:f1:5f:
ba:83:8b:2f:05:c7:69:2c:26:5a:73:b5:75:ba:08:
3d:c3:76:b7:fb:38:e3:6d:dc:7a:73:03:b4:93:a8:
8c:fa:f9:09:11:a3:d9:fb:a5:d5:de:a3:e2:fa:8e:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:EA:E2:2B:E2:D2:A0:27:32:CD:EA:FF:44:93:F0:A5:BE:0E:9A
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d2:f5:73:0b:09:3b:58:e4:d4:14:45:4c:38:ba:30:03:be:
bb:4d:c1:41:b4:2c:8d:0a:f2:75:69:1e:b2:fe:a2:b5:db:c1:
3d:dd:82:b6:6e:78:a1:99:6c:2c:3b:bb:54:58:df:02:45:83:
da:de:e8:60:f1:85:5e:16:39:8f:3c:fd:85:40:5a:4a:2e:09:
f2:73:0a:64:26:31:a9:b6:05:d4:e3:5b:76:56:1f:ae:f3:65:
56:f7:b4:83:5d:69:67:ee:4c:fe:d7:0f:c4:cb:c4:a5:66:ff:
1a:fd:52:1f:98:3f:0e:49:39:bc:27:f4:29:dd:0a:32:d5:37:
70:49:2c:02:36:96:b5:2f:ac:3d:e5:a7:8a:84:e6:05:e9:b1:
9f:63:c8:58:5c:b7:21:4c:6d:e7:fe:5f:eb:84:b1:e4:74:b7:
0f:58:81:3f:f1:90:6b:00:3e:17:1b:4d:74:3b:e0:39:aa:2b:
90:90:3f:12:36:89:26:94:b7:1d:94:30:2a:1c:84:8c:2c:19:
f0:b0:38:81:05:9d:19:6b:99:49:dd:05:61:b8:6e:23:b3:26:
35:83:0c:b5:bf:d8:31:25:75:46:d8:24:a9:dc:c2:16:45:26:
65:c2:39:01:95:7d:bf:bb:f3:a8:4d:8f:80:0d:21:95:2a:e0:
5b:8e:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:28:42 2026 by rpki-client