
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: 1ghxh0qQJvN5MV+w5bzjvtkT9SQjSz7boPrH39qY+sk=
Subject key identifier: C3:CB:B5:A6:71:13:B5:7A:88:86:31:E7:7C:B5:34:67:EC:CC:96:6F
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 019D27A92EFCC411FDCE66E8DB996009BC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 1587
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: 4jGHXl6kWOAh36sYuELN1LaN2J8.roa (hash: pteCQ8qTw2Dl8AAbMQbGtibM3E4YRXrmS1BWfb6Hkt0=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: qu1I5uoTqMteUuNADnlTcCYVm4OsghoO+KWViyQqqcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2e:fc:c4:11:fd:ce:66:e8:db:99:60:09:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=c3cbb5a67113b57a888631e77cb53467eccc966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:d5:78:7c:00:10:03:cf:51:76:f8:0b:2b:
86:c8:ec:48:78:2d:27:6b:89:ce:74:33:64:fc:14:
8f:50:2b:bc:af:d1:0c:82:04:cb:9c:91:35:b8:94:
15:9f:62:84:f1:93:b8:f1:a6:d0:78:00:cc:63:f5:
9d:d8:37:78:49:e0:f2:48:a7:9a:40:0f:63:7e:60:
c7:7d:7a:3a:cb:df:e1:79:f5:61:03:f4:4d:0d:4f:
3f:4c:02:54:a5:c0:82:95:c7:f8:d3:38:b2:41:83:
4a:0f:04:f3:36:2a:31:c0:21:55:b6:0a:41:46:ad:
10:e8:cd:83:ff:6f:6f:31:b0:07:2b:cf:7a:e2:ff:
9c:96:d8:00:49:25:05:89:47:c9:56:50:04:17:b4:
c8:bc:41:e6:fd:f4:83:4a:40:79:08:0e:06:f0:e4:
2f:ed:6a:5d:65:af:47:ef:24:69:80:89:11:b6:64:
4b:1f:b5:7a:c0:aa:3d:65:dd:54:8a:46:d0:3c:98:
d7:f1:6d:02:fb:8c:b8:75:10:21:c7:03:ee:fe:30:
9e:45:e6:84:d7:94:4e:13:bd:95:aa:e7:55:f4:fe:
a1:9a:c4:7a:d8:07:23:dd:f5:c3:d5:26:fb:cc:a6:
15:e6:78:9e:62:25:20:e3:34:c5:76:13:ca:59:3d:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:B5:A6:71:13:B5:7A:88:86:31:E7:7C:B5:34:67:EC:CC:96:6F
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:22:24:75:63:54:f8:4b:a5:57:36:a7:83:8c:45:8e:a4:e0:
70:91:c3:99:a7:52:4a:80:6a:b6:12:77:b1:2b:b2:ce:77:b0:
17:f2:65:95:69:15:41:12:e3:91:c4:af:52:d5:71:fe:9a:f9:
ed:dd:a6:86:58:81:84:c6:ca:ef:c3:87:28:3b:b1:86:5d:03:
9c:38:9a:11:9c:a1:7a:b3:08:9d:74:10:89:b4:92:5d:4b:ac:
70:1e:77:7b:c3:1a:a9:82:51:13:8d:31:8e:78:e5:55:d1:d8:
bd:fc:03:1b:f4:c3:2e:28:28:a6:b1:a7:75:97:98:54:d5:ed:
ef:e0:52:aa:f4:0f:02:9f:14:a0:da:70:80:19:60:3c:3a:17:
2c:07:01:e2:b2:d7:3e:78:08:93:8d:85:41:b8:d0:6a:b9:1c:
ee:d5:79:6c:3d:07:60:e2:ad:bd:8b:22:ce:ae:f2:76:94:da:
c7:8a:08:4e:49:1e:77:35:20:01:98:80:bd:51:e6:1f:5d:b5:
4c:b6:c9:5b:16:15:f9:66:cf:14:46:65:c1:e2:f0:46:5c:23:
ce:e0:d9:23:67:e3:d6:95:17:5c:9d:13:b6:93:e0:ad:04:5c:
a9:8b:e3:ed:82:98:87:66:9e:48:e3:fa:78:97:36:64:7e:9c:
86:be:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:12 2026 by rpki-client