Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: 1g56jJqkSmaP3MPfWx8/a225Aq/HrUJaZunM2dK+bQM=
Subject key identifier: 3A:7E:E1:04:53:87:C8:C7:04:37:3F:8C:97:52:3C:39:FC:00:8A:F2
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 01A0E2BE204E4384ADB930764CC228AD4BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0C78
Signing time: Sun 27 Sep 2026 12:01:45 +0000
Manifest this update: Sun 27 Sep 2026 12:01:45 +0000
Manifest next update: Mon 28 Sep 2026 12:01:45 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: z0BpxxEzMgs51nqrDNhKaTtdNggwThIUYVSSpzUD8RU=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:20:4e:43:84:ad:b9:30:76:4c:c2:28:ad:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Sep 27 12:01:45 2026 GMT
Not After : Sep 28 12:01:45 2026 GMT
Subject: CN=3a7ee1045387c8c704373f8c97523c39fc008af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:c3:4e:0c:f8:ce:74:b3:42:3a:7c:a8:14:
03:b0:c3:ae:9c:51:37:6e:4a:53:82:12:33:5b:78:
fb:0b:6d:04:b8:f8:56:3d:45:a6:9c:fe:ea:4e:61:
27:db:b3:1c:6e:eb:24:21:24:d5:97:e2:c4:7f:c8:
2c:ba:5f:42:ec:a6:e7:96:1d:ed:db:97:77:76:69:
93:e4:20:f6:47:e1:5f:ef:58:f5:23:73:db:0c:0d:
ea:4a:5f:29:c0:7f:10:65:31:8b:9d:1e:3d:15:ec:
01:9f:3d:f9:ae:0d:26:fd:c6:3b:af:4c:a0:5f:99:
43:78:6c:61:14:d5:89:89:32:8e:1b:14:c9:4a:2e:
58:f3:98:c9:52:db:b8:b0:33:84:9a:6a:4d:ca:47:
fb:40:4f:ba:5b:be:19:62:be:bd:0e:55:43:f3:12:
24:34:15:91:c2:2c:b7:c8:a1:87:76:fc:dc:12:a8:
c0:97:61:e6:fa:6f:e0:8c:e5:a0:3b:97:84:38:90:
e0:8f:66:b1:b9:ce:dc:32:83:d3:c6:a6:30:43:3c:
d2:17:20:e7:2e:17:1a:97:a5:55:4c:67:62:82:2b:
bc:5a:f3:5e:12:c2:37:d9:b2:1f:6b:7f:99:d6:1d:
5a:47:f5:f6:78:9a:b1:e8:e7:5e:05:b0:bb:86:ed:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:E1:04:53:87:C8:C7:04:37:3F:8C:97:52:3C:39:FC:00:8A:F2
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:7b:fd:ce:10:ea:2e:49:16:8b:53:67:43:88:fe:00:4f:
9c:bf:d2:30:6c:2e:7a:3e:7d:ba:19:80:63:aa:08:5e:19:86:
9f:53:84:22:97:47:0e:bf:1d:05:31:7e:5c:89:30:9c:3a:c9:
d6:43:4e:75:ec:f0:f6:c2:53:35:2a:77:7e:09:93:73:f6:09:
e3:08:bc:53:0d:25:dd:0e:7c:c9:e1:ab:ba:8e:51:98:44:02:
83:95:e5:79:af:d7:3f:6e:04:4b:67:72:dd:ec:fe:c1:4c:5f:
d3:75:53:a1:8b:a9:49:00:36:4e:30:ab:3f:c6:2c:72:a0:27:
14:84:87:68:4c:f2:38:c3:bb:62:ad:6c:0f:5d:8f:2f:69:02:
50:97:46:da:d5:3d:11:0a:39:37:57:41:84:bd:18:8f:a0:44:
7b:0d:9d:01:0b:05:7b:88:ca:46:62:76:34:ec:6d:d0:94:26:
c9:65:a1:9f:23:76:cb:a3:9c:6a:6a:b2:b5:4a:56:ed:2c:dc:
d8:1c:51:d5:b6:62:44:81:29:d2:14:85:f9:df:89:8d:96:22:
a3:2f:5c:d3:93:17:9a:f7:31:da:bd:4d:42:0f:71:38:7c:1d:
35:0c:28:56:b6:cf:11:7a:22:0e:02:84:ab:53:82:6b:8a:3e:
ae:59:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:31:18 2026 by rpki-client