Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: a15tLYUfdlgpIKpBA/U2if6lTECVQVsVRkf1+DMaVFM=
Subject key identifier: 70:50:88:70:5D:FD:9F:6E:71:C0:FB:26:02:12:4C:DA:E9:F1:82:26
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019CE6DB22B7EFA4AA0F31BBA8EC89AA7EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 1567
Signing time: Fri 13 Mar 2026 11:00:46 +0000
Manifest this update: Fri 13 Mar 2026 11:00:46 +0000
Manifest next update: Sat 14 Mar 2026 11:00:46 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: UAkn0sF5gjra9XMmj7LYmJfBZXslvF3Lrkbfr+U5MKU=)
2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:22:b7:ef:a4:aa:0f:31:bb:a8:ec:89:aa:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Mar 13 11:00:46 2026 GMT
Not After : Mar 14 11:00:46 2026 GMT
Subject: CN=705088705dfd9f6e71c0fb2602124cdae9f18226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:67:27:d0:58:88:4c:32:da:bf:03:dc:4c:
ca:a9:a7:f0:c5:f0:03:1d:54:88:4b:06:f9:30:22:
23:69:2e:ac:83:a5:83:40:5e:cc:98:a8:fd:90:0d:
85:04:5d:22:0e:84:23:cb:0d:17:1d:cd:62:f2:3a:
39:d3:37:2b:3a:a8:43:ed:6d:91:83:51:3f:25:09:
33:9b:cb:c3:73:4a:47:53:ff:1f:9e:64:a4:e1:36:
25:8d:aa:d2:cd:ad:be:ec:b2:8e:8b:a2:49:ee:b2:
b7:ea:68:dd:f9:f3:6e:9a:dd:73:de:90:84:99:ef:
84:1c:7a:6c:a5:ea:b8:b4:bf:ed:7b:5d:e3:9c:10:
26:e0:77:52:dc:68:15:19:6c:bf:e1:c6:c0:e6:b9:
c4:7b:8e:aa:b3:3f:0f:43:2e:ac:d0:ea:ed:6f:0e:
b4:17:93:de:27:fd:0d:c7:b2:56:ee:77:46:b4:a8:
62:a5:a6:4e:8c:16:bf:7d:e5:f3:5f:8f:27:5c:c1:
bd:cd:a7:35:2c:ec:6b:e8:d2:c6:3a:41:3a:ae:49:
c5:a4:3f:71:e2:e0:ea:2c:79:29:a7:7d:ec:91:47:
cd:ce:6f:27:71:5c:57:07:f3:2e:ee:59:3e:fa:6f:
e0:e7:31:13:2e:4a:82:74:0f:88:cf:10:18:88:76:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:88:70:5D:FD:9F:6E:71:C0:FB:26:02:12:4C:DA:E9:F1:82:26
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c2:96:df:a5:bf:92:3c:a3:e0:d0:b0:d0:ea:74:85:f0:61:
cb:8b:6a:61:c9:62:80:3b:11:92:24:33:45:fd:68:f5:97:3c:
80:89:76:09:4c:3e:8e:6f:c0:9c:b5:24:c6:33:22:ea:39:6d:
a7:be:a5:3c:5c:60:1c:63:62:25:1e:b5:4c:75:bb:1a:bb:e1:
78:47:bf:6f:26:52:ea:18:ff:50:c7:34:ee:67:a4:ed:4d:35:
7d:2b:7f:5c:d8:61:2e:f3:19:8d:bf:45:00:71:94:18:21:a4:
f0:d6:f4:9e:55:22:1a:02:6d:d9:c1:90:ae:75:be:8b:83:cd:
4c:2a:a8:de:37:0d:53:5b:8c:db:b3:22:17:19:06:7b:8a:83:
80:75:06:16:26:26:37:69:fe:22:8c:de:f2:43:4f:62:02:2b:
e3:61:c3:7c:ee:c3:81:ba:95:bf:d9:ee:70:0d:fc:7f:b1:88:
b4:40:3e:11:08:56:e6:7e:cb:b0:c2:06:df:e1:a7:03:e6:2e:
ac:75:f7:af:d2:bd:5a:ee:08:17:0f:8e:dd:ae:50:23:9d:21:
64:d1:bc:49:82:ac:03:bd:14:1b:d7:e1:3c:e4:03:cb:4d:22:
f1:b5:32:ad:bb:2e:11:b1:70:83:59:39:44:ca:d1:3e:d2:91:
90:90:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:05 2026 by rpki-client