Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: Eol68fLMikCCeZCRnMJXv2YqX/PhmztzLyVrbTAEF2Y=
Subject key identifier: 01:D8:5B:F7:00:BB:FD:B8:8A:57:3C:06:B0:89:4D:94:5B:79:BE:33
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019D2A051FA04194C529728E3F98CDCA26C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 083E
Signing time: Thu 26 Mar 2026 12:01:11 +0000
Manifest this update: Thu 26 Mar 2026 12:01:11 +0000
Manifest next update: Fri 27 Mar 2026 12:01:11 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: hjGtiVbNjoGm7nTgfk4yZwZoaDljLdhMAt9TDSetpaQ=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:1f:a0:41:94:c5:29:72:8e:3f:98:cd:ca:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Mar 26 12:01:11 2026 GMT
Not After : Mar 27 12:01:11 2026 GMT
Subject: CN=01d85bf700bbfdb88a573c06b0894d945b79be33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:a7:a8:9d:50:62:d5:2d:aa:44:57:ba:d6:
5c:1a:b4:f6:62:52:d6:04:8e:99:e4:53:e4:ae:03:
b4:b3:bf:21:2f:03:d3:2d:15:ab:0d:5c:f5:f2:79:
de:44:5e:b7:20:6b:fd:b2:c4:38:13:f9:b2:ba:3e:
16:ed:a7:00:89:6d:7e:ea:f5:0b:25:be:e4:86:ca:
0c:27:1b:22:09:6d:ab:ac:a5:13:97:93:d8:fc:99:
11:17:9e:4a:3c:b3:6a:49:8f:6c:4f:37:1f:be:70:
01:63:4c:f8:db:12:4a:d9:6b:74:f1:f2:5c:b0:40:
c4:32:4b:b1:98:81:c9:58:32:64:2f:91:02:0e:b5:
24:07:11:ff:fe:8b:e6:5e:43:c2:95:34:25:53:4e:
86:df:02:fd:50:75:2a:c1:59:eb:56:90:bd:86:a1:
21:4f:e8:fb:52:7d:1e:ed:75:ef:8b:6c:41:3b:b9:
66:38:2b:3e:18:c4:2c:79:48:d7:ac:58:2c:1d:30:
43:a2:9a:4f:26:35:d3:a3:26:43:95:c3:0b:47:e5:
4d:57:42:c2:12:a1:65:21:77:78:1f:b2:43:8b:16:
13:9d:47:6d:19:5f:3d:15:6a:b7:3b:bf:fe:ee:31:
d1:1b:72:27:f9:e1:e2:d4:71:27:8c:9d:73:80:cf:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:5B:F7:00:BB:FD:B8:8A:57:3C:06:B0:89:4D:94:5B:79:BE:33
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:10:73:52:2e:90:c9:c7:1f:1e:41:8f:f9:ba:8d:4a:74:db:
73:2b:c5:50:80:71:95:98:6d:9f:51:78:10:fc:7e:c9:88:8d:
dd:2a:d5:13:29:04:d3:68:d9:43:74:d6:45:51:ab:f5:bd:d2:
7d:aa:54:db:b6:d1:ba:ec:90:ff:f4:82:34:8a:80:95:21:f4:
9b:32:72:a4:71:90:32:83:df:37:99:9d:cb:7e:73:b6:26:f9:
39:16:26:cf:4b:8b:14:d9:18:2a:4b:12:80:d1:1c:6a:16:17:
42:ff:42:9a:53:e6:e4:2f:da:7b:73:f1:c5:27:e8:4b:34:35:
a3:f7:b9:08:c2:11:a1:43:67:c9:26:a7:f7:ed:f4:5b:65:d5:
d1:f6:86:c2:6c:3a:fd:9a:4f:fb:ba:ac:97:53:c3:39:72:15:
05:ea:69:b9:c6:79:d7:2c:63:ee:6c:43:e2:d6:3c:3a:8e:8e:
91:8a:f2:22:28:10:c8:04:04:6a:ea:45:eb:7b:5b:f9:10:72:
da:71:fe:49:8f:15:c9:60:3d:c3:eb:5f:03:b3:59:1f:28:31:
5a:93:2a:6a:a4:35:8a:47:89:5b:3c:73:3c:88:da:8d:a4:d6:
71:20:19:49:eb:78:a7:b5:f0:d2:d8:81:1a:c1:da:72:ea:a5:
a1:18:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:49 2026 by rpki-client