Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: vXuNG0Py8JaetQ1v+H8lBZTCFAG86+f3LLduRineafY=
Subject key identifier: 9B:45:4F:94:A8:E3:FA:65:0B:44:D4:60:B3:8B:6D:50:12:57:A8:32
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019E1DFE357D18ACA2F3B6AAD36E59E777F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0B09
Signing time: Tue 12 May 2026 21:00:59 +0000
Manifest this update: Tue 12 May 2026 21:00:59 +0000
Manifest next update: Wed 13 May 2026 21:00:59 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: V0yY8gayy0sOjiRq7njOKBu4iG6AxjHLK6DiQNTElrw=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:35:7d:18:ac:a2:f3:b6:aa:d3:6e:59:e7:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: May 12 21:00:59 2026 GMT
Not After : May 13 21:00:59 2026 GMT
Subject: CN=9b454f94a8e3fa650b44d460b38b6d501257a832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:04:f3:dc:03:67:2c:98:b1:c8:44:b7:3a:68:
bf:1f:11:ef:3b:b7:90:a0:f9:1e:61:a5:06:1a:79:
07:93:61:cc:75:f9:83:58:35:68:ca:75:2c:18:23:
5c:bf:3b:3a:55:d6:67:5c:0c:4b:08:c7:88:72:5e:
ab:51:70:02:94:f5:21:90:05:e0:f4:85:4e:68:0e:
c9:02:cc:08:65:28:d7:20:61:6d:e6:af:ec:84:a9:
b7:2e:53:86:8c:77:e5:c2:ae:90:b8:19:2b:0b:7b:
aa:32:be:85:f3:58:16:35:2c:9e:d4:40:3d:44:11:
98:41:b8:d6:0e:98:c4:50:85:34:a7:a0:cb:cb:e0:
e9:49:8e:e5:b9:c2:c2:ba:63:81:38:7f:67:c2:86:
4a:bf:f8:97:83:18:fb:c0:5f:d7:4e:ed:49:ac:65:
53:a6:d3:20:9a:cf:5a:91:7b:c2:93:e9:5a:e1:f6:
55:a8:74:07:5c:3d:32:32:fa:2a:cc:cd:64:55:7c:
30:3c:89:68:b2:9b:69:99:2c:81:0c:96:43:99:29:
3d:3f:3e:11:d0:37:41:64:bc:8e:54:42:9f:a0:c5:
7d:34:25:f7:c5:49:0b:f2:a3:ea:ed:e0:92:99:c8:
ac:8f:63:d1:75:29:40:2e:83:7b:25:2e:8e:8a:43:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:4F:94:A8:E3:FA:65:0B:44:D4:60:B3:8B:6D:50:12:57:A8:32
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f1:88:b5:87:ec:b9:9c:49:32:c6:7d:19:48:b8:46:6f:ec:
38:11:5e:c1:51:85:7f:c6:03:e0:e1:2e:17:1d:8e:e8:f8:96:
a7:f4:9f:cc:91:b2:11:2a:d8:c9:4d:c2:f6:45:19:81:62:44:
e5:78:03:4e:47:51:d9:ca:40:6f:a2:49:41:44:aa:cf:88:54:
86:26:d3:18:52:1c:c9:cd:df:63:8d:eb:6f:8c:ae:c3:95:74:
e3:fc:d7:16:54:4a:8e:dd:9a:a0:3b:0a:cb:ae:42:39:1a:08:
04:94:a7:17:68:88:ca:a5:72:d5:43:b9:2c:99:aa:a6:a8:36:
9d:c7:8c:0c:c6:60:a0:f3:e6:d5:45:7b:7c:86:cb:92:5d:4c:
4f:8e:b0:48:b0:06:02:fa:d4:40:79:d5:98:b1:9f:fb:66:33:
42:57:d4:99:10:a8:a4:a2:2c:9b:3e:df:7d:88:48:1b:9c:eb:
38:78:dd:ba:49:65:3d:0e:30:04:6d:be:84:ad:bf:b4:58:6c:
9c:87:7b:6f:5d:28:cb:74:45:ab:1f:53:f2:a6:ee:a5:47:bd:
43:cc:f1:81:9a:b7:24:74:67:ee:82:97:8e:aa:8f:da:71:9f:
8f:fb:de:8e:2f:9d:17:4d:c6:92:e1:2d:45:aa:a5:e6:9f:95:
49:0e:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:04 2026 by rpki-client