Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: xrf6TtHRkj+3HcIfI9gK8VFWt/IR2KrlB8ZhhqdxYu8=
Subject key identifier: 6C:4A:C6:C1:E0:8F:CB:5E:90:B9:11:F7:6C:2C:BB:BC:FC:EB:00:E4
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019CB3923F6DD94AC69C80009910B7E7CDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0724
Signing time: Tue 03 Mar 2026 12:00:31 +0000
Manifest this update: Tue 03 Mar 2026 12:00:31 +0000
Manifest next update: Wed 04 Mar 2026 12:00:31 +0000
Files and hashes: 1: M0pDr4Clch3V01pm4pja2RrFX_Q.roa (hash: FaCDNXQloqHAn9HCQuN4XRRX7eJlA+OA81nG9S2/sLs=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: LGytpDnChHhHHcRcHV/J/T1KHwlIWmheaGuNH+yMu1U=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:92:3f:6d:d9:4a:c6:9c:80:00:99:10:b7:e7:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Mar 3 12:00:31 2026 GMT
Not After : Mar 4 12:00:31 2026 GMT
Subject: CN=6c4ac6c1e08fcb5e90b911f76c2cbbbcfceb00e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:36:e5:22:7b:23:f7:72:d0:a7:8d:1f:c6:
6f:37:fd:63:0a:9c:5d:5a:6e:25:b1:f4:a7:bb:58:
da:8f:17:30:41:a4:99:dd:94:ec:ae:a5:9b:71:8a:
71:32:45:83:24:25:15:05:b2:d0:7a:c7:17:cb:49:
88:ee:21:cd:ec:d0:7a:50:03:f9:4b:90:b7:56:d2:
73:fd:85:c1:7d:22:0e:ca:86:a4:ad:a8:e7:67:ba:
2d:0e:b2:0f:a1:50:d9:41:1a:40:95:ec:d6:13:15:
5f:14:92:91:64:97:23:34:56:d8:c1:30:db:93:21:
be:d3:4f:9e:64:42:53:67:ea:3c:50:26:7e:fc:c2:
ac:81:a7:c5:da:39:34:0b:9b:2e:14:54:b7:d3:b6:
e1:86:cc:80:2a:dd:95:00:c3:55:4e:79:44:9d:e7:
ba:7d:cb:65:98:44:8c:2c:29:86:bc:56:54:2d:40:
fb:77:15:73:03:63:6a:f6:9f:a6:1c:05:24:c2:ab:
52:a6:89:84:1a:cc:8c:8f:d6:36:b9:4d:2f:4e:5c:
20:c1:be:d1:50:bc:92:1a:1a:73:c5:4d:2d:50:53:
26:6a:da:54:c5:30:20:dd:c0:07:f8:1a:71:94:f9:
eb:c9:72:f4:c3:ec:58:46:05:61:b1:5f:92:09:70:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:C6:C1:E0:8F:CB:5E:90:B9:11:F7:6C:2C:BB:BC:FC:EB:00:E4
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ec:ed:7e:26:75:b6:11:9a:bd:9c:aa:70:d5:de:22:60:98:
9a:1c:aa:29:70:65:4d:8b:cb:13:d7:9e:69:c1:38:81:e2:14:
a3:ee:c6:38:77:1d:19:e8:22:7f:b9:68:af:7b:91:e7:d8:64:
0b:91:5a:8c:66:cf:42:f7:e5:58:21:d3:cf:ad:92:c7:ba:34:
05:ab:0f:12:a8:8e:ab:9a:1d:27:cf:cd:07:a7:0f:6b:f8:e2:
54:5b:42:dd:12:f7:26:ec:c0:60:07:64:32:36:a2:02:ca:9c:
6a:b3:a4:9f:dc:91:70:65:24:f2:5d:d4:79:e2:ba:b8:2f:7d:
3a:40:27:55:8e:0f:c4:0f:a4:37:67:32:ad:be:e3:06:61:1e:
a4:58:18:a4:26:03:58:f6:36:48:59:44:2d:ad:3b:08:78:e5:
eb:66:d9:e0:2f:02:35:1b:6e:85:83:e7:04:a6:0b:4b:27:00:
e4:be:b4:30:ad:b7:69:c6:70:3c:a8:fb:d1:87:95:12:1b:8a:
ce:69:1f:84:24:81:c7:8c:af:7f:db:bb:b8:7f:3f:1f:0a:24:
39:f3:b3:8d:f1:80:b5:ae:7a:d5:b9:80:88:27:66:24:18:60:
9b:33:bb:e1:ff:98:97:fa:a8:dc:53:df:6b:c1:eb:f5:78:5d:
19:6f:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:37:14 2026 by rpki-client