Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier: K11mxLfppX31jGsivCMR1BCMJ7UZfgmFRH2WBIZ3HjI=
Subject key identifier: 0C:A1:08:2E:EC:AB:6B:52:73:DD:EA:E2:9B:A7:CF:55:1F:BC:7B:68
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 019CAC7DB7456C4178B6E9B1F84AB5F0FD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: JcdBlOuJyyg5H4WKDuy90wsRixSPdebgF9m6Va7JSoU=)
2: aw5b-GS78H33XXfacv-uPagCZEM.roa (hash: WE8zP14TgI7idwZsYOKIvyET3IUB8iBRDb7tO1zrfRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b7:45:6c:41:78:b6:e9:b1:f8:4a:b5:f0:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=0ca1082eecab6b5273ddeae29ba7cf551fbc7b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:af:24:7c:72:83:aa:46:e0:b9:8e:c2:9c:
db:b8:ab:13:19:87:b4:23:64:5b:ff:40:3e:14:82:
b6:16:28:7d:98:13:66:c0:69:6e:3a:a8:1f:26:3a:
2f:e5:30:55:3f:4f:b6:7d:59:e3:fc:f0:ad:41:38:
5b:e3:60:39:23:b7:79:1d:b8:0c:fd:15:06:c4:ee:
05:d3:5a:86:09:7e:6e:93:98:83:b3:27:9d:97:83:
ba:51:e0:1a:fe:c2:c9:66:74:21:d1:fe:a0:b8:e3:
fe:29:be:79:26:9b:6d:0e:13:6d:ca:b4:7a:e3:34:
1d:b6:90:9a:a3:9d:55:e5:9e:5f:fd:56:e9:47:8d:
13:01:da:20:05:be:f4:7f:e5:cb:7d:f6:98:1d:7f:
a2:6c:1c:c1:1e:b6:bc:6f:1d:cc:8f:42:d9:6f:7e:
95:1f:f6:04:9c:ad:c8:d9:f7:e2:f6:e7:a1:ae:52:
c7:89:73:19:10:95:ad:0a:45:f6:14:eb:d7:dd:eb:
3e:29:68:54:8f:56:6c:15:b7:e0:0d:91:ed:e6:35:
a0:94:5f:08:44:5d:b8:c3:d9:6e:5c:33:32:68:6e:
9c:e4:e4:a1:a7:3f:25:b0:d5:1e:b7:d9:6a:5d:42:
68:aa:87:51:76:2b:08:d6:3d:95:6c:a2:0d:a9:1b:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:08:2E:EC:AB:6B:52:73:DD:EA:E2:9B:A7:CF:55:1F:BC:7B:68
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:29:c2:90:da:11:a3:02:64:e8:13:0c:c1:37:a9:96:82:a8:
31:fd:67:e1:6b:c4:a8:0f:1c:ee:f0:67:51:32:4e:e4:ea:2a:
c7:9a:b7:c6:9d:5b:74:65:9f:d5:29:ea:82:2b:ba:da:64:6a:
94:9b:71:29:e9:79:5b:54:9d:17:34:8f:04:96:a3:f1:e5:41:
30:90:6d:8a:85:31:ed:2e:6b:01:20:e7:39:8a:eb:7a:d6:d6:
ec:06:e0:28:c6:35:bf:1c:39:ae:ee:6b:6a:bb:ce:62:d1:8c:
e4:22:2f:29:e0:ad:5f:6f:5b:e0:1e:35:2d:f7:23:2c:ee:e4:
08:2d:08:d6:f8:67:11:11:09:5c:d8:45:18:28:61:b0:ca:1e:
65:c2:4c:e4:57:8c:70:90:d6:f2:47:1b:96:e9:2b:11:94:24:
30:df:60:45:bb:ca:d0:42:37:4e:60:2d:aa:cf:7c:72:40:8e:
88:46:32:e5:37:12:8e:c6:46:f5:04:72:f6:7d:4d:d3:84:d2:
ab:70:71:fb:8f:f4:48:9f:a3:12:5b:cb:59:7d:72:93:26:59:
27:69:31:56:e3:25:78:88:fb:cb:7f:b7:f3:d8:af:e0:87:42:
28:15:4e:93:03:06:29:15:46:8e:f2:0b:54:f2:56:9d:bb:7e:
38:ee:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:47 2026 by rpki-client