Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: EfTK1/jbciJljlAoiXFOd2MaAiWRrWFB2yARWzdR/VA=
Subject key identifier: 69:13:9A:24:76:3F:82:98:2E:B2:05:C7:87:0B:A0:FE:C8:01:2A:1B
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019CAC46AEE56ADCF5FB460F771AB09879D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1830
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: GY7+i5bUR9kE8N+792eAG09VFfiLoSt6poRcFtQBSDc=)
2: dfRokVERntavg7crGxooophhw2o.roa (hash: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ae:e5:6a:dc:f5:fb:46:0f:77:1a:b0:98:79:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=69139a24763f82982eb205c7870ba0fec8012a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:3c:32:a3:dc:92:4d:b0:5d:bf:12:84:c4:
0d:4a:1e:9c:04:91:37:a5:19:8f:ee:01:7a:11:a2:
c0:f9:e2:7f:91:62:d9:b1:57:14:08:58:8d:8a:50:
fc:67:e2:ab:cc:93:be:dd:d3:8d:cd:dc:c3:f1:3c:
66:7e:11:47:13:a0:d1:5b:72:65:a4:60:d8:26:d7:
b2:0b:f2:87:d8:a4:3a:fb:f5:02:ec:50:df:37:13:
53:af:90:f9:12:fa:f2:be:7b:ff:67:32:7e:f3:85:
ba:07:94:6b:43:cf:e0:02:9e:24:c5:53:3a:89:40:
8a:61:c2:55:46:6f:b4:58:26:9f:6b:70:4d:36:e7:
6c:6e:e2:7d:0c:19:5f:62:cc:45:6d:89:f2:1a:39:
95:64:38:10:19:74:56:30:7e:8e:bf:7c:c7:dc:c9:
09:b9:54:f1:b5:2c:7f:0b:46:a4:c7:4a:c0:89:c3:
be:e7:d3:13:5b:11:d1:d0:33:ca:47:cf:4e:7e:58:
e2:b0:4a:c8:88:c0:b5:36:79:6c:c3:4a:87:8e:b4:
28:f1:91:42:f8:a3:1b:fc:3c:ec:6b:79:d2:20:3c:
7f:cf:bf:d6:f6:9f:92:77:e1:45:63:48:ac:99:96:
59:ef:1c:7d:48:f0:4d:95:9f:c0:f5:29:9d:5e:4d:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:9A:24:76:3F:82:98:2E:B2:05:C7:87:0B:A0:FE:C8:01:2A:1B
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:1a:b4:0a:6c:45:bb:64:5a:5d:c5:8d:91:08:a8:e1:c3:
64:93:ec:a6:2c:57:28:ec:39:37:30:d8:48:f5:92:bb:3f:60:
83:df:a2:00:c2:17:2f:79:0f:b8:8b:1b:4e:ba:bf:83:23:74:
49:76:46:12:a7:82:fa:52:e2:60:2c:d7:1b:fc:37:b8:46:96:
87:12:1d:11:57:b3:b5:58:24:58:65:f7:d3:a7:ff:c9:f1:94:
e3:a5:79:34:78:80:22:a0:9d:45:a5:16:9a:30:6f:d9:07:0a:
f6:d3:a0:f8:f8:a3:e8:74:b6:95:58:27:ba:e3:ca:59:06:29:
3a:44:55:fa:31:89:70:ab:cc:cf:e3:c0:6e:ab:68:67:7b:e7:
0c:93:d2:46:ec:c4:37:5a:6a:2f:03:4e:20:2d:6b:22:a0:0c:
96:71:49:78:5f:85:12:25:6d:e8:05:77:9e:e1:63:20:ca:c4:
8e:99:ad:a0:ef:69:4d:aa:1c:12:4e:07:79:c5:47:02:ac:f7:
9a:d4:8e:2b:a2:2a:88:10:0e:08:f9:09:31:d6:48:9a:76:78:
74:f9:d4:de:c0:14:7c:2e:df:fe:78:51:c8:45:d1:1c:c1:be:
44:fd:41:49:a4:e4:76:1f:b1:6e:93:47:fa:c4:fd:23:da:57:
d4:03:4d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:40 2026 by rpki-client