Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier: mJ8dMXzoV+GG7GxFjgEt+33pmpaZLH0R8bGXUTYLxZ0=
Subject key identifier: DE:5D:05:73:F6:9D:B5:5F:77:5B:60:43:38:F3:63:C8:0B:8A:2E:15
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 019D2627E2B062AC91A27E644208E2D1F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:41 +0000
Manifest this update: Wed 25 Mar 2026 18:00:41 +0000
Manifest next update: Thu 26 Mar 2026 18:00:41 +0000
Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: 12fLI+0kF2osq90rJSKZaWGLRommDjNKbB78cEsuUIY=)
2: aw5b-GS78H33XXfacv-uPagCZEM.roa (hash: WE8zP14TgI7idwZsYOKIvyET3IUB8iBRDb7tO1zrfRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e2:b0:62:ac:91:a2:7e:64:42:08:e2:d1:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Mar 25 18:00:41 2026 GMT
Not After : Mar 26 18:00:41 2026 GMT
Subject: CN=de5d0573f69db55f775b604338f363c80b8a2e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:27:0c:b8:12:28:21:d5:f8:0d:4a:cc:9e:
7b:e9:8d:9c:54:19:b9:0a:75:07:50:f4:20:5e:02:
53:74:b3:8d:c8:26:a5:08:1c:6e:e2:60:66:eb:de:
b1:d3:a3:64:73:c7:7a:9c:62:ab:a0:96:00:05:06:
8c:7b:1a:8e:bf:1a:78:f5:4d:cb:8d:69:5d:ca:16:
84:4c:b6:f4:6e:9e:d0:3e:87:16:8c:a5:fd:db:f4:
09:90:53:d2:bc:7c:fc:6e:23:41:66:7c:58:b6:0e:
08:c3:2a:d6:91:79:a8:90:9a:f7:d5:b6:e2:6a:08:
21:fd:6b:63:01:7f:fc:46:9e:cb:a0:3d:c1:1c:1b:
53:bb:76:70:46:4e:38:da:b7:cc:7d:a8:c1:70:8f:
e4:9c:1b:eb:04:de:8b:2d:91:e9:11:f3:2a:da:90:
f7:40:49:6b:8c:dd:39:2e:41:51:0a:5d:cc:5d:e0:
6a:73:87:fe:41:1d:66:e3:e0:54:a6:32:5d:c4:95:
af:90:74:87:0f:e7:f7:28:13:ca:78:52:d9:04:b6:
36:e4:3e:25:05:31:ae:fe:cb:09:ad:16:57:3e:5a:
fa:00:05:31:46:57:91:46:ba:de:3d:8f:78:11:4c:
12:8b:ff:7a:3a:0a:e5:e2:aa:7f:a1:6f:6d:55:4d:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:05:73:F6:9D:B5:5F:77:5B:60:43:38:F3:63:C8:0B:8A:2E:15
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:25:25:47:05:bb:7c:44:09:c0:94:42:a6:18:ef:91:4e:
2b:d8:16:a6:91:31:4d:eb:e1:f0:66:1e:be:73:33:3c:20:8e:
d1:10:f8:56:41:36:c9:4f:15:e0:8b:a0:3f:6d:c4:da:66:78:
39:be:6c:27:76:8a:ee:10:5d:ec:dd:e4:5f:38:1b:79:fa:35:
ab:d1:2a:80:d5:a7:d8:14:eb:d8:be:ae:ca:8f:8b:71:2c:be:
6f:65:5b:25:65:65:cf:b0:22:cb:49:d2:af:f8:88:fd:85:3b:
ca:b3:49:30:e9:a4:df:8d:d7:e0:36:e5:7e:50:5b:35:f1:87:
ba:ca:10:36:b5:b8:b5:5f:f5:48:b4:df:2d:ba:21:3a:93:b8:
0a:3f:f6:dd:b0:b7:bd:9b:75:ec:0a:04:cb:d0:52:5d:0f:97:
26:28:1b:e8:3b:6a:90:e9:a9:89:15:7f:d9:03:62:9d:3c:37:
3a:a0:cc:58:ea:28:f4:4a:c9:13:89:ec:fe:a4:77:1e:c7:76:
a5:a1:5f:19:0d:95:ba:93:fe:ac:1e:a7:9e:b1:a9:8c:53:9d:
2a:f4:89:5a:e8:1d:19:66:9f:57:1f:35:e1:82:66:29:f4:ea:
30:a0:40:5e:30:d1:5c:11:aa:13:f5:17:e9:67:6d:d3:d9:14:
fd:be:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:10 2026 by rpki-client