Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: oYQgkIB6XlANy5qqvVqfugzroB+50JM+XqwbuGQjyR0=
Subject key identifier: E7:60:C5:04:75:7D:97:1E:17:71:7E:8A:40:9C:45:57:67:3C:42:2A
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 019D273A9E40E1F9426150BEA0B0ED6E0D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: XXP-dhhAsDiu_BIO93qfw7aI1RA.roa (hash: uK/rG0SJ5CUQ4luAhXzC1Xpkag0arz3fKpyhElVaPoA=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: IPIZRt/ZBzK7VKeoveytT0c/yaVPgJUJErQhWBw+e0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9e:40:e1:f9:42:61:50:be:a0:b0:ed:6e:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=e760c504757d971e17717e8a409c4557673c422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:95:87:38:c8:a0:4c:61:72:b0:fe:aa:f5:
52:9e:ba:26:f0:3b:32:6f:43:c4:8d:14:49:01:a7:
61:bb:d6:87:2c:0c:26:71:d2:b3:c5:fd:63:3f:51:
89:6a:ea:1a:77:ab:56:78:a0:66:d6:a1:0e:a2:1f:
f5:a1:8a:ea:57:1e:55:6a:ed:89:28:1d:c1:ef:75:
a2:d7:89:80:a6:98:2c:20:ea:e6:1a:d9:4f:53:43:
4c:f9:87:56:e0:af:e0:d7:ec:f6:17:bb:78:42:36:
77:c6:7a:f7:80:8c:cd:0b:4b:1d:e8:10:f2:1e:af:
7f:9a:3d:38:e8:42:19:46:18:30:e6:7c:01:6c:63:
11:fc:f0:ce:71:eb:c5:14:2a:d4:22:0f:3e:84:56:
a8:d9:86:2b:c2:6f:cf:70:6f:ce:5c:24:d8:9f:b7:
52:7c:89:8b:7f:3c:ac:fc:33:66:24:e9:6e:b7:c8:
88:38:6a:af:f3:7d:fd:c0:d8:27:eb:9a:13:f5:fa:
80:ed:e2:5f:bc:0f:dd:49:b2:a1:5f:cb:88:66:48:
9c:d5:7e:a0:a3:c0:71:60:14:71:0e:55:a4:c7:cd:
f9:5b:dc:6f:fe:9b:1c:74:6d:f2:7c:f9:c0:7b:a4:
18:4e:3c:1c:0f:e3:a4:fb:2a:35:a3:92:14:09:71:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:C5:04:75:7D:97:1E:17:71:7E:8A:40:9C:45:57:67:3C:42:2A
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:fa:ac:c7:e3:b5:54:15:ff:30:75:17:e6:92:f9:65:70:
16:a1:18:1b:fd:75:fb:17:76:d2:02:b6:96:a8:49:40:8e:4a:
05:e4:8a:a6:4d:7e:51:c8:b8:ed:2f:00:79:fc:3c:09:11:ad:
97:52:65:40:cd:34:a1:fe:d6:84:bf:01:b5:38:92:6d:dd:8d:
46:f4:98:69:0e:ec:a6:1d:4d:f8:67:9b:9f:37:7b:8a:b8:f9:
ac:f7:2b:6d:7c:83:22:ab:fe:1d:ce:d1:db:31:23:53:2a:b9:
5e:e9:fc:aa:62:b9:da:0b:0b:28:a8:e2:f8:5f:72:3a:84:94:
9b:d9:4a:e8:2b:59:4e:8b:42:9d:d3:de:83:e2:a1:23:41:38:
cf:a1:c1:89:ef:57:d9:2b:9c:5e:c8:66:9d:90:f4:ba:a3:06:
4a:2a:e8:8d:e1:6a:a7:c4:bd:d4:99:63:12:cf:4a:6a:9a:e2:
1a:8a:6c:e3:79:80:80:b8:60:b6:30:2f:b5:f2:db:46:e7:63:
50:de:9c:e6:48:39:ac:dd:f7:6e:e8:30:66:83:ed:c9:c6:b7:
c6:61:97:fe:80:b7:43:76:33:a6:d0:65:4b:52:5f:73:0d:f0:
7e:4b:c7:72:0c:d6:f2:a9:ed:ad:ee:cb:49:7d:11:ae:1f:f6:
2b:11:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:23 2026 by rpki-client