Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: wmZbOP45BW5jNWbj47ruZS7lbK9sn6U/6gcuv593lM4=
Subject key identifier: 3B:5C:26:AB:55:5D:84:E9:CE:54:DC:59:6D:3A:DE:BF:02:46:EB:51
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019DA567329D6B5CEE367D7127E3630BEAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 18B1
Signing time: Sun 19 Apr 2026 11:01:36 +0000
Manifest this update: Sun 19 Apr 2026 11:01:36 +0000
Manifest next update: Mon 20 Apr 2026 11:01:36 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: ZbmB82zhY+JExa97ROucg9pXUMfC9M7GBVUqZyLEK9Y=)
2: dfRokVERntavg7crGxooophhw2o.roa (hash: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:32:9d:6b:5c:ee:36:7d:71:27:e3:63:0b:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Apr 19 11:01:36 2026 GMT
Not After : Apr 20 11:01:36 2026 GMT
Subject: CN=3b5c26ab555d84e9ce54dc596d3adebf0246eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:f4:bc:4f:01:e5:50:79:80:ac:21:3f:4e:
35:f6:e6:2a:d0:79:63:e3:9f:d8:00:0a:67:f7:a3:
dc:3e:aa:1e:67:be:69:0c:d1:04:c5:f9:1a:47:69:
b0:a5:7c:82:c3:ff:2d:ab:78:c4:61:41:9f:71:5e:
89:87:b2:9e:f4:fd:7c:59:3b:ab:d4:79:0b:17:a7:
7c:9a:60:4f:84:20:56:a6:1f:ba:8f:8c:1c:bb:75:
2e:68:9b:5f:bd:c5:1a:e6:96:1c:72:b8:32:00:eb:
1c:b7:04:55:07:06:40:b9:91:11:97:0c:d5:7a:29:
fe:8c:ef:1f:0a:16:b8:08:bd:1e:c3:05:37:95:4d:
40:19:8b:c5:8c:b8:f9:14:9b:c3:8b:71:57:2a:31:
1c:b0:1c:a6:d5:69:29:08:79:2d:47:32:27:c7:7c:
fa:f0:ad:d9:90:52:7b:d4:09:90:35:64:49:ec:23:
33:35:71:b9:ab:76:84:bf:c2:f1:1a:81:bc:0d:bd:
28:e7:98:e5:a5:23:36:0a:aa:bb:04:4b:f8:33:ba:
b1:81:2b:44:b4:6d:23:9e:97:da:65:23:88:b9:cc:
52:7b:72:ce:f3:07:58:79:59:90:08:c4:08:5e:3b:
f7:27:6d:47:d5:67:7c:11:fb:41:7c:81:8c:2e:95:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:26:AB:55:5D:84:E9:CE:54:DC:59:6D:3A:DE:BF:02:46:EB:51
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:1f:33:a2:96:96:d7:2b:19:e9:20:a0:dd:31:4a:cf:9d:
cb:59:3b:5b:7a:78:21:35:15:1a:83:63:2d:f4:19:08:26:eb:
89:ea:9a:6d:e5:cf:33:d2:cc:3b:0b:c9:29:49:0d:22:7a:b7:
a7:95:27:f4:ed:dc:39:ee:7d:78:82:ec:fd:1d:84:ae:12:64:
e6:11:69:81:63:c6:ca:27:8a:c1:27:89:fc:a3:62:b8:ef:be:
b1:5d:cb:da:39:66:81:92:90:cf:ef:73:14:8f:ab:a7:cd:d6:
c0:03:68:b1:28:e5:02:8b:80:a1:96:ce:09:97:d7:2c:68:7e:
40:ec:0f:36:88:a4:6d:59:e9:fd:a0:66:f6:a0:41:0d:3d:52:
33:45:70:4a:95:86:d7:32:f1:80:b4:e2:19:e5:b6:2d:93:a2:
30:cc:ac:ab:48:62:81:74:d3:11:34:a6:9f:bd:4c:05:8f:91:
44:7d:23:f0:bc:56:7f:e2:fb:ca:0b:c5:59:20:9e:0c:9d:66:
8b:fa:a5:8e:d8:8d:02:0f:a9:be:9b:1f:1d:e3:7c:e9:38:27:
f9:00:56:04:12:ed:e0:88:8b:01:68:0b:55:ed:3f:10:3e:a5:
79:48:6b:04:e8:c7:4c:fd:02:e7:f5:2e:37:90:14:04:15:a9:
b0:62:69:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZzKda1zuNn1xJ+NjC+q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy
YjY5MDEwHhcNMjYwNDE5MTEwMTM2WhcNMjYwNDIwMTEwMTM2WjAzMTEwLwYDVQQD
EygzYjVjMjZhYjU1NWQ4NGU5Y2U1NGRjNTk2ZDNhZGViZjAyNDZlYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYf0vE8B5VB5gKwhP0419uYq0Hlj
45/YAApn96PcPqoeZ75pDNEExfkaR2mwpXyCw/8tq3jEYUGfcV6Jh7Ke9P18WTur
1HkLF6d8mmBPhCBWph+6j4wcu3UuaJtfvcUa5pYccrgyAOsctwRVBwZAuZERlwzV
ein+jO8fCha4CL0ewwU3lU1AGYvFjLj5FJvDi3FXKjEcsBym1WkpCHktRzInx3z6
8K3ZkFJ71AmQNWRJ7CMzNXG5q3aEv8LxGoG8Db0o55jlpSM2Cqq7BEv4M7qxgStE
tG0jnpfaZSOIucxSe3LO8wdYeVmQCMQIXjv3J21H1Wd8EftBfIGMLpUEpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtcJqtVXYTpzlTcWW063r8CRutRMB8GA1UdIwQY
MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt
YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx
LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKF8fM6KW
ltcrGekgoN0xSs+dy1k7W3p4ITUVGoNjLfQZCCbrieqabeXPM9LMOwvJKUkNInq3
p5Un9O3cOe59eILs/R2ErhJk5hFpgWPGyieKwSeJ/KNiuO++sV3L2jlmgZKQz+9z
FI+rp83WwANosSjlAouAoZbOCZfXLGh+QOwPNoikbVnp/aBm9qBBDT1SM0VwSpWG
1zLxgLTiGeW2LZOiMMysq0higXTTETSmn71MBY+RRH0j8LxWf+L7ygvFWSCeDJ1m
i/qljtiNAg+pvpsfHeN86Tgn+QBWBBLt4IiLAWgLVe0/ED6leUhrBOjHTP0C5/Uu
N5AUBBWpsGJpXg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:26 2026 by rpki-client