Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: r+r9XwNr013vNqsJVgUpDg4KeR0pFqD4h1nVn9djVws=
Subject key identifier: 28:1B:44:DB:64:80:27:01:AC:8C:75:30:3B:D6:EB:E3:19:8B:27:41
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019DD0876C96C255D0472A81AFB3EFC07B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 15E0
Signing time: Mon 27 Apr 2026 20:00:29 +0000
Manifest this update: Mon 27 Apr 2026 20:00:29 +0000
Manifest next update: Tue 28 Apr 2026 20:00:29 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: m19r53ZCW6B7LHMVtriY5OdlIA+JThXrcvo6M1yZnMQ=)
2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:6c:96:c2:55:d0:47:2a:81:af:b3:ef:c0:7b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Apr 27 20:00:29 2026 GMT
Not After : Apr 28 20:00:29 2026 GMT
Subject: CN=281b44db64802701ac8c75303bd6ebe3198b2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:9a:2f:4b:bb:22:cd:bb:0b:d5:f9:a7:9b:
b8:f1:07:d2:2d:cc:6c:3d:a3:44:cd:2e:d4:eb:5a:
5c:9b:4e:1d:6f:5e:99:67:9a:3c:cd:54:72:0b:65:
80:b4:5b:45:f4:81:0f:7c:d9:91:fe:19:43:6b:ad:
a6:be:8f:bd:15:33:c6:22:b9:2b:a9:9d:ed:53:13:
ba:c4:71:5e:54:58:d9:b0:f8:ef:18:35:4f:49:b0:
5d:1b:31:80:2f:66:55:ac:8d:90:98:34:b9:92:d4:
d5:bf:82:bc:88:c1:1d:7a:a2:ea:41:19:51:fb:78:
c3:cb:23:92:1c:a5:6a:4c:a9:2c:74:02:d7:05:82:
cc:8b:31:09:bb:ef:c4:d0:64:c2:f6:59:c2:e4:07:
1b:84:49:4d:fd:ec:5f:18:b1:70:ab:7c:2b:e2:8c:
e0:2e:81:5b:e1:d2:f8:fe:78:63:42:32:a5:0f:aa:
ee:0f:9e:e3:c7:c2:65:d8:81:5c:da:01:98:f8:4d:
56:78:a0:f8:a0:7c:fc:f6:90:eb:fd:22:81:d0:71:
b7:5d:50:35:f5:cd:f2:25:c0:d6:3d:12:1a:3c:19:
bd:b1:c5:a5:2e:19:0a:1d:0b:ec:76:52:5c:63:3f:
4e:1e:e5:6e:c5:c3:ef:3a:aa:ee:8c:65:af:38:17:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:44:DB:64:80:27:01:AC:8C:75:30:3B:D6:EB:E3:19:8B:27:41
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:28:51:70:29:2c:ad:1f:b3:79:2c:dc:ec:a0:10:8d:da:6f:
91:8a:ea:ca:f1:ee:7f:26:5a:63:12:c8:ab:6e:e7:4b:7d:e6:
eb:fb:6b:85:ec:77:7c:b6:61:d5:9e:75:b5:fc:2c:cc:1d:28:
ea:ab:f9:69:74:46:47:91:b0:af:5b:55:2d:9b:b4:08:eb:80:
2e:06:45:04:6a:42:24:fb:35:c8:4d:3f:51:76:02:a5:99:0e:
10:ca:70:30:8d:85:fc:5e:41:58:5e:b9:7e:f9:f8:cf:bd:79:
50:87:b5:2f:4f:80:85:20:89:4b:ac:90:7d:a5:07:f2:2b:8e:
43:1c:cc:94:28:25:3c:94:b2:cd:72:81:48:f2:66:14:4f:c9:
1d:08:b7:66:87:9b:db:d8:ec:76:56:ba:0f:f4:6f:d2:8b:a0:
b8:b3:03:6c:bc:6f:d4:36:d0:52:e7:97:ad:35:c0:8f:03:81:
a6:bc:99:94:07:e7:54:3d:cf:d9:df:15:27:04:78:15:01:ea:
0c:64:63:52:f2:2a:86:10:1e:a5:76:e6:a9:d2:61:e4:96:96:
2e:ea:b3:60:f2:5d:9b:05:5b:aa:dc:23:c4:65:06:65:01:3e:
ac:59:ea:bc:87:55:47:1b:7f:43:f9:7e:24:7b:dc:c3:e9:be:
44:ca:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:30:17 2026 by rpki-client