Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: bXkmWWb0Y8Ak+K03fPqJ4c9uILfjRgYo/bt25Ru11KQ=
Subject key identifier: 2C:FF:49:2A:74:45:0B:12:F0:04:50:DF:C1:E5:2B:0C:58:78:2E:4C
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019F94A505D3C558BFF3D40505EA09954C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0BCB
Signing time: Fri 24 Jul 2026 15:01:10 +0000
Manifest this update: Fri 24 Jul 2026 15:01:10 +0000
Manifest next update: Sat 25 Jul 2026 15:01:10 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: UB5XSaQkW9c5skevcx679l+rI5MdGGLpSz0lHKVdHSc=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:05:d3:c5:58:bf:f3:d4:05:05:ea:09:95:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Jul 24 15:01:10 2026 GMT
Not After : Jul 25 15:01:10 2026 GMT
Subject: CN=2cff492a74450b12f00450dfc1e52b0c58782e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:3c:03:b1:0f:4c:45:95:c1:0a:92:2d:ee:
54:81:f2:0a:09:fb:7f:b0:0a:84:15:a8:50:db:83:
ba:7c:41:75:db:bf:52:a7:64:dd:f6:2d:53:25:0b:
74:12:1e:ab:10:d0:b1:31:9f:2c:77:c8:df:bd:17:
91:53:27:ca:37:c3:fa:60:da:f4:1a:0a:a0:cd:e6:
9a:7f:59:c3:86:0d:21:6f:61:de:47:3f:dd:96:23:
48:e7:41:29:79:11:a7:d4:d1:be:7f:6b:1f:14:b4:
d5:62:58:08:9f:85:73:98:95:d3:5d:05:38:b4:28:
99:0c:6c:bc:99:9a:ab:5b:72:1e:4b:49:be:f5:72:
d6:02:de:9b:d7:08:2c:fb:f8:6f:51:bd:4c:eb:96:
bc:8d:82:46:86:2d:52:a0:b7:a3:bf:44:95:28:fd:
f5:4d:29:5b:a9:3c:32:eb:bb:f2:e7:42:c8:cb:f1:
85:d6:42:41:5d:11:e3:3b:c0:21:c5:ca:65:a8:b5:
1b:f3:3b:3e:49:a4:32:31:ed:6a:d4:a4:95:56:af:
a1:2b:0e:9f:56:fd:07:32:aa:7b:67:68:fe:d9:9e:
45:9c:b7:2f:1c:a1:ac:75:a8:52:af:5c:62:fe:a1:
18:f1:f0:ce:6a:11:78:b8:37:9e:85:ec:86:80:49:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:49:2A:74:45:0B:12:F0:04:50:DF:C1:E5:2B:0C:58:78:2E:4C
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:86:e6:a0:19:f1:45:be:46:48:01:fe:2a:24:ac:a4:bf:
57:81:f7:a3:0c:b6:40:eb:14:37:56:a5:01:1f:fa:32:0f:73:
c9:79:ae:9a:1f:65:05:53:d0:83:53:0c:70:f6:f1:25:62:ad:
fd:9b:9e:41:d7:f6:7f:68:ba:35:5d:c1:68:8f:c1:54:33:ed:
07:e7:dd:07:a1:b3:cc:22:a2:85:70:3c:70:d0:28:67:ac:48:
a6:58:43:ab:eb:77:3a:8e:29:15:69:e3:d6:a5:7b:97:8f:7e:
12:07:57:91:e4:44:58:5f:5f:5f:dd:88:44:65:a3:0a:27:2a:
61:f2:86:75:aa:5c:a6:59:a9:d7:17:f5:b6:05:28:a2:c1:4e:
6c:a4:26:bd:62:e8:f5:24:f2:11:20:73:11:2a:a7:8f:98:fe:
1b:66:66:7d:f8:29:fb:5a:b8:34:a2:69:b1:af:b1:30:61:13:
f1:1c:a7:57:00:de:44:1c:b4:e2:e0:37:d6:8a:aa:19:d0:ff:
57:36:2f:9c:32:84:e1:17:8f:bf:a0:1e:e0:43:e5:cf:2c:15:
a3:4b:6d:2b:51:01:45:7e:c4:25:f7:3f:fb:14:e9:32:c0:b7:
54:d1:28:2c:78:17:85:b7:9e:1f:2a:95:16:f4:e2:06:75:65:
04:4b:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:00 2026 by rpki-client