Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
File: 1l15-Y5wsirX12oghap7hRqhhIM.mft (raw, json)
Hash identifier: K7K9h3/+WDZMESm04pCdnxbz38lJHCpnDuU2RTY1ark=
Subject key identifier: 60:92:9C:6C:C9:80:F9:42:39:E7:D6:56:69:96:F9:5A:40:1A:68:0F
Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Certificate serial: 01A0D1C9377948DC58D47081BCE9D329B7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
Manifest number: 02ED
Signing time: Thu 24 Sep 2026 05:00:20 +0000
Manifest this update: Thu 24 Sep 2026 05:00:20 +0000
Manifest next update: Fri 25 Sep 2026 05:00:20 +0000
Files and hashes: 1: 1l15-Y5wsirX12oghap7hRqhhIM.crl (hash: 44e+tWwWtGefYjWgU92A8AE3o+ylN3pbC7FW9zaU0hM=)
2: uK-XNVHo9tYItPi3LFPZI8WJr_8.roa (hash: vEACxQ0R2A7CfLsvs58jY8ndJKAAaoNlmaFWAMwCX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:37:79:48:dc:58:d4:70:81:bc:e9:d3:29:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Validity
Not Before: Sep 24 05:00:20 2026 GMT
Not After : Sep 25 05:00:20 2026 GMT
Subject: CN=60929c6cc980f94239e7d6566996f95a401a680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:32:bb:55:6e:1d:c6:58:32:be:7f:c2:d7:
76:f7:3d:3d:a5:db:db:d0:7e:31:39:e2:46:3d:9e:
21:22:cf:1a:78:1d:3c:0c:2a:48:dd:22:22:f0:a2:
4a:53:37:39:16:98:07:f7:4f:d4:ce:9e:7a:37:ef:
79:11:df:9d:7e:77:c2:4e:82:f8:96:30:73:eb:41:
55:42:dd:d5:37:44:44:8f:f0:ef:5c:ac:e8:8f:07:
51:eb:b8:c8:5d:c7:27:dc:a7:1d:9a:74:70:b8:e6:
c2:6e:e8:32:ee:30:c7:0c:43:bb:d7:d2:f5:9b:e0:
c2:f5:ac:19:99:d5:88:64:06:80:63:8e:7d:94:1e:
4a:68:ae:33:7e:6e:8c:d7:52:85:df:0b:db:87:72:
94:ce:f3:38:d5:62:56:11:72:71:e2:97:8c:1b:87:
24:91:6b:57:6f:03:6d:75:7c:bc:04:39:57:53:f7:
75:c6:1a:0e:e6:c3:25:39:ff:82:ed:38:d2:ff:74:
3a:fa:66:60:f8:6e:9b:9c:2c:e0:1b:04:2a:7f:2b:
73:bb:e3:75:38:98:6a:0e:7a:65:f3:27:29:dd:eb:
f3:8e:fa:8b:c1:b4:0d:c2:ab:22:54:21:c2:52:31:
8f:45:27:56:05:9a:17:fb:d8:bc:0e:d7:11:f8:99:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:9C:6C:C9:80:F9:42:39:E7:D6:56:69:96:F9:5A:40:1A:68:0F
X509v3 Authority Key Identifier:
keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:8b:5c:e3:20:6a:0f:2f:94:de:64:4d:6b:78:bd:8b:46:
bd:11:14:a9:2a:48:3b:23:1f:95:55:54:47:57:16:f1:ba:27:
4a:e5:ba:29:52:e9:b8:8d:f6:b2:72:00:bd:ee:ae:23:18:1b:
65:d1:24:19:84:f8:de:14:ac:54:df:be:9f:f1:96:28:e4:f3:
19:27:08:b2:9b:3c:3e:53:c9:03:91:63:e8:ec:2b:b8:9b:6e:
2b:6e:eb:de:13:94:0d:d7:03:98:8e:37:f7:33:ce:5f:39:be:
df:de:42:d8:67:ff:71:fc:99:b4:16:2e:af:bf:88:1b:c4:d7:
4a:63:a3:18:bb:4e:42:99:c7:68:f2:43:ad:26:85:2f:e7:49:
c2:14:16:dd:d5:bf:f1:6d:2f:1b:10:68:b4:8e:89:cf:ab:ea:
0d:02:7c:9d:83:87:b8:c6:7d:47:fe:6d:e5:14:83:05:12:db:
04:75:5f:07:07:16:ff:f9:2b:c8:ed:fc:39:4d:34:1a:54:98:
c7:b1:d0:a9:c5:da:5b:9e:e4:41:17:4d:5f:ff:ad:5c:6c:6a:
11:3e:e6:30:08:b1:49:ea:79:78:21:ab:dc:67:79:40:15:f2:
6d:09:da:65:c1:5f:0f:d5:ef:f7:16:c5:ba:39:43:1c:9f:82:
82:bc:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:33:11 2026 by rpki-client