Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
File: 1l15-Y5wsirX12oghap7hRqhhIM.mft (raw, json)
Hash identifier: 7ALEi5stgSn9YXregn5cW+6NyXGl1Vre/Qe15F9Xa9c=
Subject key identifier: 7D:64:48:26:DA:31:03:2F:E9:5A:1A:7F:89:FE:43:B0:FC:62:3F:9F
Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Certificate serial: 019D292975676EF82190CE1058A71474F58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
Manifest number: 0108
Signing time: Thu 26 Mar 2026 08:01:16 +0000
Manifest this update: Thu 26 Mar 2026 08:01:16 +0000
Manifest next update: Fri 27 Mar 2026 08:01:16 +0000
Files and hashes: 1: 1l15-Y5wsirX12oghap7hRqhhIM.crl (hash: v68fRH58Du4Mu3W5RJpxTz0Q3dIYE6tcuN6WzIZol6Y=)
2: uK-XNVHo9tYItPi3LFPZI8WJr_8.roa (hash: vEACxQ0R2A7CfLsvs58jY8ndJKAAaoNlmaFWAMwCX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:75:67:6e:f8:21:90:ce:10:58:a7:14:74:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Validity
Not Before: Mar 26 08:01:16 2026 GMT
Not After : Mar 27 08:01:16 2026 GMT
Subject: CN=7d644826da31032fe95a1a7f89fe43b0fc623f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:a5:33:0e:e4:a9:53:15:5e:a0:95:cd:bb:
92:5e:3c:fa:22:96:b4:e1:ec:82:41:32:08:66:04:
22:f5:f3:c8:85:c4:77:d8:a5:70:1b:6e:26:11:63:
9a:27:9f:0b:85:32:b9:97:4a:4e:8a:9a:a6:59:37:
1c:e8:bd:46:21:c8:d0:bd:80:48:98:a2:41:ba:04:
56:5d:b1:e4:b0:80:8f:4e:d2:d8:bd:e0:2b:fd:1f:
2f:3c:9e:b5:3d:b2:cf:76:24:4e:7a:fe:35:37:19:
e6:3d:2d:33:99:42:e7:ea:eb:4d:02:db:b6:12:cc:
18:b3:2c:99:ee:80:b8:16:53:8f:70:a2:bd:dd:85:
9a:d6:e0:4f:6a:17:77:7a:b0:cd:5f:8c:82:26:24:
45:62:1b:2e:9d:73:ec:83:46:d4:d2:b5:93:32:2d:
37:ed:7e:52:64:8c:59:3f:e2:3e:6e:06:75:e6:30:
67:06:62:25:75:f6:1f:05:24:e0:e9:fb:4e:10:aa:
8c:d3:41:11:22:81:54:db:9a:1b:af:f0:4a:6e:28:
b1:b8:a7:06:09:83:c1:1e:4c:0e:6f:03:10:a7:2d:
a8:67:26:d2:0d:15:cd:1b:f9:df:61:01:29:c7:a2:
9e:8f:0b:f4:75:bc:35:92:41:7f:68:ee:78:f2:60:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:48:26:DA:31:03:2F:E9:5A:1A:7F:89:FE:43:B0:FC:62:3F:9F
X509v3 Authority Key Identifier:
keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:50:7f:8c:5b:34:c0:89:94:2f:08:bd:9c:0d:f2:2b:3b:
f3:45:9d:22:f3:e5:0e:96:6f:29:8c:1e:6c:f6:18:23:c2:c5:
78:32:72:06:0a:48:ea:51:77:d1:2b:15:d6:61:fa:d9:ce:45:
93:d2:05:6c:3f:87:25:28:82:9b:cc:ff:a4:cd:64:1c:7c:9c:
f8:ff:bf:62:74:5a:6c:f2:a4:30:16:8b:c1:90:a9:e4:f8:f0:
90:27:3d:94:8b:1c:5c:d8:51:4e:61:0b:cd:9e:08:44:64:7a:
fc:7c:da:50:ca:11:81:10:f1:5b:8e:7b:4c:7f:3b:ee:04:dc:
0e:4b:bc:22:da:a3:90:39:dd:ee:1e:eb:1b:02:8c:55:f8:3b:
a7:5c:e6:bb:fd:65:1a:dd:d0:6a:b9:bc:66:a4:c4:5e:9f:d0:
16:b0:7b:4d:9e:55:02:44:18:f0:0e:5b:ef:0e:e2:06:0c:71:
c6:21:ed:27:49:92:4a:ac:cf:3e:b0:8c:93:80:7f:62:1e:31:
5c:84:e3:17:47:26:10:4d:61:9f:bc:fd:0e:03:87:99:75:6c:
e6:90:70:c4:8f:cc:77:6f:ab:85:f9:2e:8e:cf:49:97:ad:cb:
7d:7c:4e:a3:24:5b:cd:6d:9b:d6:2a:4d:99:a1:e6:ee:63:bb:
67:fd:0a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXVnbvghkM4QWKcUdPWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NWQ3OWY5OGU3MGIyMmFkN2Q3NmEyMDg1YWE3Yjg1MWFh
MTg0ODMwHhcNMjYwMzI2MDgwMTE2WhcNMjYwMzI3MDgwMTE2WjAzMTEwLwYDVQQD
Eyg3ZDY0NDgyNmRhMzEwMzJmZTk1YTFhN2Y4OWZlNDNiMGZjNjIzZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+lMw7kqVMVXqCVzbuSXjz6Ipa0
4eyCQTIIZgQi9fPIhcR32KVwG24mEWOaJ58LhTK5l0pOipqmWTcc6L1GIcjQvYBI
mKJBugRWXbHksICPTtLYveAr/R8vPJ61PbLPdiROev41NxnmPS0zmULn6utNAtu2
EswYsyyZ7oC4FlOPcKK93YWa1uBPahd3erDNX4yCJiRFYhsunXPsg0bU0rWTMi03
7X5SZIxZP+I+bgZ15jBnBmIldfYfBSTg6ftOEKqM00ERIoFU25obr/BKbiixuKcG
CYPBHkwObwMQpy2oZybSDRXNG/nfYQEpx6Kejwv0dbw1kkF/aO548mDm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1kSCbaMQMv6Voaf4n+Q7D8Yj+fMB8GA1UdIwQY
MBaAFNZdefmOcLIq19dqIIWqe4UaoYSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgt
MTcxMjNmZTM3YmU5LzEvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgtMTcxMjNmZTM3YmU5
LzEvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaBQf4xb
NMCJlC8IvZwN8is780WdIvPlDpZvKYwebPYYI8LFeDJyBgpI6lF30SsV1mH62c5F
k9IFbD+HJSiCm8z/pM1kHHyc+P+/YnRabPKkMBaLwZCp5PjwkCc9lIscXNhRTmEL
zZ4IRGR6/HzaUMoRgRDxW457TH877gTcDku8ItqjkDnd7h7rGwKMVfg7p1zmu/1l
Gt3Qarm8ZqTEXp/QFrB7TZ5VAkQY8A5b7w7iBgxxxiHtJ0mSSqzPPrCMk4B/Yh4x
XITjF0cmEE1hn7z9DgOHmXVs5pBwxI/Md2+rhfkujs9Jl63LfXxOoyRbzW2b1ipN
maHm7mO7Z/0Kvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:38 2026 by rpki-client