Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: 212m2Uy8bZtbh/y9zyyzxOAIR4HWHk2a7BfvtJosR+I=
Subject key identifier: 57:3E:7D:4B:17:CC:78:75:6A:D6:4D:AB:CC:B3:FB:9A:F6:E5:91:EB
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019D28BBD2C67FE78C49909A67A08BE50BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0A8A
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: sAOEilPLCHPZFACIl4Dyfr3tSAkVUt8HGq6gnCQ1NpE=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d2:c6:7f:e7:8c:49:90:9a:67:a0:8b:e5:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=573e7d4b17cc78756ad64dabccb3fb9af6e591eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:2c:0e:57:1f:b2:be:ab:78:4e:84:14:89:
d7:f0:37:43:0f:b5:af:d4:fe:ff:bc:7f:c6:56:fa:
07:fa:29:83:a7:19:ca:a8:f7:b0:92:ae:73:36:75:
b0:6c:b8:17:e4:ce:43:5c:39:7f:ca:2b:e8:a2:34:
17:f6:73:f5:0b:ca:56:ce:c7:80:47:14:fe:2a:65:
08:4f:63:30:94:26:7a:a0:7a:42:ef:91:8b:e9:87:
7f:f7:85:c9:48:66:4d:63:2a:95:3a:ca:94:06:b2:
04:b7:7e:5f:fc:8d:17:a2:44:57:6e:2e:a7:e6:3e:
53:31:94:0e:c8:b7:ff:3c:8c:13:ff:df:f0:d0:9f:
1c:7c:d9:6d:f7:1d:f9:83:21:d3:71:9a:65:47:59:
8e:41:2c:3d:16:c3:d1:2e:45:d4:70:88:6c:3d:22:
12:cb:b0:d6:48:56:ed:74:76:77:88:84:de:55:88:
9b:d4:b6:15:ff:de:b6:5a:d3:95:37:b9:b0:af:d0:
65:52:16:91:c6:11:38:b3:19:43:b7:84:e2:9d:42:
97:30:92:4e:37:9a:81:95:05:fd:08:fe:6f:f1:c8:
97:47:da:06:82:93:55:e3:8c:53:7a:09:fb:49:4d:
85:1c:5a:e0:2c:1c:a3:0d:70:f4:bd:70:d8:30:c2:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:7D:4B:17:CC:78:75:6A:D6:4D:AB:CC:B3:FB:9A:F6:E5:91:EB
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:69:a3:6d:06:fb:f0:eb:d7:0c:14:52:98:38:7a:c0:24:
83:14:30:5d:ec:ff:a8:2a:07:08:c0:50:50:40:45:98:97:59:
d3:0f:18:e2:4b:bb:61:c6:70:31:c1:d5:ba:93:0f:68:64:fa:
58:af:8b:67:59:75:91:7b:fb:36:c1:e0:70:91:8e:15:17:61:
d9:dc:56:f4:72:a2:fe:ff:fd:c7:10:de:6c:ef:c2:1a:5c:64:
18:a5:b5:80:0a:43:75:b7:e2:33:2e:a9:33:c3:7b:8a:0c:e8:
30:2a:85:bc:40:86:7e:82:e4:45:19:75:c0:89:06:bb:a8:87:
71:04:b4:7f:4b:22:44:66:8e:b4:64:d4:70:93:76:e8:95:4d:
1d:85:03:16:ef:e1:a8:51:f8:ca:9d:31:f8:f6:d7:b2:d9:a2:
23:16:03:e6:13:6b:94:94:5e:68:6a:01:9b:1a:f4:67:d5:18:
c0:43:e0:86:ed:0c:92:bc:78:59:ff:d4:20:db:bb:4f:cf:80:
56:01:52:27:a2:2d:8f:7c:5c:4c:b5:c5:4a:d6:ff:4a:b8:24:
40:db:ef:da:cd:4d:30:5c:d9:f5:47:de:ab:17:96:f2:2f:bc:
84:4f:10:b5:39:71:99:a0:ce:34:a1:90:51:d4:5f:6b:85:9c:
a0:5c:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:57 2026 by rpki-client