Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: n3Tu6X2cuT1kqiGJab7Tqu/CbOBnjrWegoMEeJe5nu8=
Subject key identifier: A8:27:CA:10:90:BE:C4:B4:FD:F3:AB:30:B9:1D:4E:66:56:4F:6A:3D
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019D2703B53536AD9633C439DA199957C9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 0910
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa (hash: jViXNh0mGGwVxxVrUk5eRxQ1z7TU/R1eWWRkMk+2l7U=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: hbUDMYJXAdth5uZMWr2Yq2b1HDLVKDGfqFJLekOblrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b5:35:36:ad:96:33:c4:39:da:19:99:57:c9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=a827ca1090bec4b4fdf3ab30b91d4e66564f6a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:8d:17:79:5c:1f:8c:d1:d5:78:65:e9:6d:
5f:b9:62:4b:ea:63:e7:72:26:83:0b:cd:69:c0:f4:
b6:93:22:70:6c:ac:75:d4:15:7c:2e:96:68:80:a5:
49:f3:8b:50:43:44:7c:df:46:d1:0c:6d:7f:3b:2c:
a3:6f:d0:7c:33:e9:44:91:1e:88:fb:ed:8e:b2:46:
f7:e0:f1:c6:3a:b4:f4:6a:79:9d:69:08:f5:8f:b7:
4e:d6:66:94:d4:73:1b:7f:d8:b0:1f:27:99:57:11:
c4:b9:fb:2d:4c:f2:07:c7:42:f3:bb:f1:94:52:1b:
3f:5f:4d:bf:82:34:1c:b7:b0:09:35:3e:35:b8:00:
06:b6:09:65:27:1e:db:d2:8a:98:e5:b7:f6:01:50:
7c:9c:fa:d7:bc:2f:5a:40:68:1e:39:89:56:32:f4:
dc:dc:9a:ac:7f:bb:f9:06:2a:e5:21:7e:ec:a4:b1:
50:20:e9:11:29:44:60:82:54:e4:ae:87:b7:f7:81:
bd:e4:6d:ee:63:45:42:c5:29:53:fb:cf:fb:9c:9c:
d5:6e:fc:dc:87:11:4c:51:46:38:8d:cc:94:ed:67:
6f:6c:70:4f:7d:d0:2b:de:0d:e2:b6:f6:94:d9:55:
79:dc:e7:99:c6:16:3f:dd:40:73:a7:dc:cd:fd:86:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:CA:10:90:BE:C4:B4:FD:F3:AB:30:B9:1D:4E:66:56:4F:6A:3D
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a9:7a:95:db:74:54:d1:ee:48:e3:db:38:97:33:de:6f:a3:
2c:15:19:da:76:96:89:3a:1f:5b:f5:99:c1:e8:00:20:0c:c2:
0b:9c:6a:1f:b7:6c:61:cb:ba:3e:9c:52:9c:c1:f3:6c:ab:01:
a2:81:9c:81:72:fc:5e:b5:b1:c2:67:7b:d4:4b:d1:ba:74:0a:
14:5b:6e:8f:44:e6:e3:a3:92:59:9f:19:2e:00:7a:cd:05:b1:
eb:f7:22:11:13:86:de:8a:af:d2:b9:b8:1d:33:16:a3:cd:cb:
65:f1:98:29:95:aa:07:00:99:e5:ed:74:ad:dc:85:43:65:d6:
54:75:fc:fd:3c:2a:ea:a8:fa:66:65:3e:5d:94:e8:5d:44:b5:
b9:16:18:28:26:80:7b:71:48:cf:74:54:52:a4:57:d0:ed:81:
4c:4c:84:3f:c9:f8:ee:1b:5d:64:e9:61:ab:2f:c8:a1:81:af:
8f:8b:31:60:50:29:9f:a9:2d:6d:b5:23:0f:e0:ca:29:a5:73:
6b:61:8d:ca:b1:10:37:86:5e:ca:4c:d7:6f:b5:e4:91:9f:97:
23:da:84:06:21:39:bf:a5:fd:69:43:e1:57:7f:23:5a:a1:ad:
29:71:c0:38:31:1e:5b:e2:b9:85:f9:b2:aa:27:d4:95:46:fe:
9a:31:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:18 2026 by rpki-client