Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: EoVaxS+9r74nVFNQIDApz2q12szqOuD7AVfPclJ7faI=
Subject key identifier: 30:1B:29:AE:E2:8B:6A:2C:74:34:83:8C:26:BE:82:51:7F:A5:CC:12
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019CA97CFDED9F524E3ACDDAE6C7CBD24A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 08CF
Signing time: Sun 01 Mar 2026 13:01:06 +0000
Manifest this update: Sun 01 Mar 2026 13:01:06 +0000
Manifest next update: Mon 02 Mar 2026 13:01:06 +0000
Files and hashes: 1: D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa (hash: jViXNh0mGGwVxxVrUk5eRxQ1z7TU/R1eWWRkMk+2l7U=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: coUSpssn5086LzKbBBVysK/m9X9Pk1KwAg/LM37699c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:fd:ed:9f:52:4e:3a:cd:da:e6:c7:cb:d2:4a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Mar 1 13:01:06 2026 GMT
Not After : Mar 2 13:01:06 2026 GMT
Subject: CN=301b29aee28b6a2c7434838c26be82517fa5cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:63:be:23:74:ec:30:50:b7:ee:e1:f5:e3:
02:cf:c9:b0:ea:5e:f7:b9:57:5b:b4:62:f0:a5:63:
4c:74:31:19:b1:09:9d:68:37:b5:e3:47:0e:77:d4:
9a:ea:ba:7f:aa:16:f3:2a:51:9a:b5:a5:d8:f3:9a:
6a:4b:d0:c2:0c:2a:3b:0d:99:ec:8c:c7:ea:6c:df:
e2:1d:d1:a4:e2:9e:06:e2:d1:e1:d7:d0:27:2a:d9:
5f:14:2c:57:03:ae:0b:f8:6a:0a:d9:6d:80:13:7f:
e4:d3:a9:ed:20:33:d6:b3:4b:29:2d:cf:1e:04:fe:
ca:aa:76:75:6b:28:ac:28:da:fa:1e:96:db:00:4d:
9c:50:00:ff:45:5d:bd:37:82:5c:0c:f6:57:b4:3b:
19:2e:3e:2a:be:4d:b6:90:94:ef:3b:0a:ae:70:fd:
56:85:3b:1e:11:e4:ea:8e:9a:61:4f:29:4f:93:01:
a8:44:f6:9e:d0:8c:01:09:6d:c4:ab:ac:c5:ec:3b:
b2:5a:92:e9:91:e1:6c:53:d1:dd:06:f8:98:3c:92:
47:92:1b:6c:80:e0:0e:d9:74:c0:df:29:ed:81:27:
66:1e:ca:68:b0:8e:22:68:bc:d7:17:6e:b3:c2:58:
10:6b:d4:68:e7:c2:85:1c:49:e4:c8:0e:5d:69:ad:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1B:29:AE:E2:8B:6A:2C:74:34:83:8C:26:BE:82:51:7F:A5:CC:12
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:09:9b:6f:11:55:10:95:ad:0f:77:db:c5:cc:32:d0:82:
27:24:a5:67:ed:23:ce:a4:f1:0b:12:e8:58:2e:6a:a2:55:22:
20:9d:91:d4:e3:ef:95:38:77:00:03:95:80:13:39:91:9c:96:
d5:a0:cb:55:ae:b2:2c:a9:16:9f:df:63:5a:ac:aa:74:1e:02:
ba:6b:f1:c2:13:e4:c0:3d:4c:50:d1:2c:f4:38:5e:ff:5d:a5:
e9:ae:d6:81:51:db:1e:2b:13:8a:e4:8b:65:f1:6c:d8:83:1c:
aa:69:58:50:bb:23:0b:1e:e5:1a:a2:0f:ee:a8:e8:3b:a1:4f:
86:f0:06:1d:f5:b2:1e:d3:95:9d:42:cb:5e:f5:f0:65:90:dc:
4e:01:24:64:d3:8a:73:1f:18:64:f3:70:69:5f:ad:b3:5d:3f:
e1:4d:5a:bf:1a:28:9d:9a:9e:25:d5:18:f6:8d:19:de:1f:ee:
c9:9c:4d:4e:8b:41:35:73:c5:78:a4:55:b8:3f:63:8b:88:ea:
a4:6d:7f:5a:79:97:99:fd:4c:ba:73:b8:d6:de:0e:8d:fa:04:
81:b3:e5:d1:b6:30:4a:eb:77:6f:70:59:51:dc:cb:4b:54:08:
08:24:10:b1:1b:06:9c:c7:90:ff:51:1b:d7:26:a7:43:f5:47:
4f:fe:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client