Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: eK0B8SQIWLqKBer8aXIJ6yPPKCHf7r2SWHMACylPcSw=
Subject key identifier: 52:71:3F:CE:E9:58:B1:51:23:D8:17:29:C0:73:F2:32:CE:3E:88:A2
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019D27E06C907D4A6CD08ED42D6592BFA7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1870
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: h1GTJK/4XEMtjcn42H8yVyPlanEqsb7vv4jpy+g/DPw=)
2: dfRokVERntavg7crGxooophhw2o.roa (hash: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6c:90:7d:4a:6c:d0:8e:d4:2d:65:92:bf:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=52713fcee958b15123d81729c073f232ce3e88a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:d3:99:e9:79:52:e1:42:5b:6b:c9:20:95:
c8:dc:42:a5:25:69:31:cd:bf:38:8c:fe:2b:c5:64:
f7:06:58:78:6b:39:5b:37:9e:04:3e:7b:86:49:d9:
3c:b5:38:02:55:06:83:35:c9:65:a3:4e:bc:14:f7:
30:c0:40:73:ed:9c:03:5d:99:0c:a4:d7:3d:49:63:
4a:d5:e8:64:ab:ef:21:2c:53:bc:16:f5:ac:2e:18:
a2:8e:2f:6d:70:c0:39:a4:33:76:b6:79:5d:a4:11:
e1:3f:3c:b2:0b:c2:bf:77:76:af:e2:98:cc:82:bb:
3f:00:24:89:70:6a:51:32:f9:7a:dc:dd:30:bd:08:
c9:3f:f0:93:d1:a5:05:5e:dc:c9:db:7c:34:b8:e5:
b0:51:d2:31:85:96:01:96:a0:34:98:b4:8a:31:e0:
8a:57:50:31:ff:09:32:f6:39:24:91:83:84:24:23:
6b:18:60:91:8d:df:81:d9:69:35:fe:42:c3:f2:82:
e4:93:59:6c:07:73:13:4c:d4:ae:ef:7c:08:0a:9e:
62:86:84:7f:de:ef:89:cc:2b:26:8f:8e:fd:24:7a:
e3:ce:70:a8:81:09:9e:06:8f:ed:a1:e6:e0:c7:60:
b7:02:07:79:c1:0c:14:91:47:98:90:7c:29:5e:ea:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:3F:CE:E9:58:B1:51:23:D8:17:29:C0:73:F2:32:CE:3E:88:A2
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:99:da:7c:d0:c2:a3:19:f3:4f:da:cd:50:2b:cc:04:33:3e:
e4:39:2b:50:c4:ed:ea:0b:73:8c:0b:89:60:a9:05:86:8d:55:
ad:63:e5:67:b8:62:67:91:20:e4:1b:34:04:dc:4d:53:74:a2:
e1:5c:16:e5:d9:1d:61:af:a5:e4:87:ee:a7:cf:d2:a1:cc:e3:
42:7e:26:70:c5:cb:0c:28:c2:fb:bd:73:a0:5c:d9:43:0b:ee:
4f:f5:4d:b2:3b:b9:b9:ac:b2:fb:a0:af:72:cd:19:9e:fb:77:
13:3f:38:63:06:0d:13:f6:b2:3c:36:d4:58:07:dc:6f:99:b9:
06:3b:47:69:de:ad:b9:e1:38:2a:a3:90:30:31:dc:83:d3:16:
d7:70:e4:17:45:01:44:ee:b4:56:e0:59:9e:c5:4b:ad:8d:b3:
61:db:2e:a9:07:dd:40:54:4e:e2:bd:0b:61:a1:fe:72:f5:76:
98:77:72:d8:07:ad:d2:e1:23:ca:a1:2c:07:7a:c6:44:55:e5:
b3:cb:3d:49:2b:7f:4c:89:44:53:58:fd:a2:f9:f5:d1:da:76:
b6:d9:32:e2:30:57:b1:8e:9e:8c:49:8e:2c:bb:03:8d:c0:16:
49:5d:53:e8:37:28:16:a4:c1:3f:28:6b:3c:bd:79:24:8b:72:
49:ea:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:35 2026 by rpki-client