Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: +3Lm3UU6gUQPYOLUaRSIIc7fdPdCk8J9/w4pjFdjP0c=
Subject key identifier: 35:6A:81:82:2B:67:44:CB:23:70:13:EC:E0:8C:3F:DF:84:CE:D1:A3
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 019CA9B3E3A8921CB3636E19EB64263B0D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0C48
Signing time: Sun 01 Mar 2026 14:01:04 +0000
Manifest this update: Sun 01 Mar 2026 14:01:04 +0000
Manifest next update: Mon 02 Mar 2026 14:01:04 +0000
Files and hashes: 1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: VWElo8rlJi+rhTdY+hWVpUOLTcCGLL7yUU7Qp3+Q8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e3:a8:92:1c:b3:63:6e:19:eb:64:26:3b:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Mar 1 14:01:04 2026 GMT
Not After : Mar 2 14:01:04 2026 GMT
Subject: CN=356a81822b6744cb237013ece08c3fdf84ced1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:98:8a:03:d4:90:51:b3:2d:91:60:c2:33:
5c:67:cd:ad:b6:8f:72:56:9d:f0:3e:9d:d2:2b:1b:
4f:77:be:1c:28:37:2c:2a:f9:4b:37:c4:5e:c7:ed:
0c:5f:67:78:12:11:c8:c5:de:64:fc:a7:be:53:fb:
af:4e:f0:2e:6c:77:15:4e:c9:fa:06:a1:b0:d6:b6:
cd:a6:b5:6d:25:16:b7:6b:8d:04:60:6c:0c:18:f1:
54:f0:2a:94:3b:fc:45:f2:90:b3:b1:9b:e0:a9:4a:
75:11:91:44:c2:36:05:36:94:55:c4:a8:f5:5c:0c:
98:71:33:2a:af:52:58:3c:32:59:99:11:85:41:1a:
93:46:35:30:0f:9a:ac:5c:dc:d0:22:fb:b6:29:b8:
db:23:1e:c9:a2:02:c3:cd:be:ab:e1:36:fd:12:44:
83:1f:a3:64:0c:11:88:42:8d:18:87:df:3a:9e:38:
e0:73:46:cd:26:47:d2:4d:42:08:3f:ae:4e:5e:b5:
78:3e:bd:60:44:bf:d2:bb:22:08:99:db:27:e3:00:
64:53:e1:92:f4:57:dc:20:c3:f3:84:77:c7:74:c8:
a2:89:62:95:f6:9f:88:a1:01:4b:d4:7e:97:ad:36:
a9:5e:f7:c9:77:db:f7:cd:c7:58:5c:ea:4d:d5:3c:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:81:82:2B:67:44:CB:23:70:13:EC:E0:8C:3F:DF:84:CE:D1:A3
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:96:32:e8:54:9f:49:6b:1e:50:df:96:90:2b:8d:51:91:55:
28:0d:71:df:a7:55:d5:64:1a:a7:88:a1:d1:3a:25:0e:eb:3d:
d6:37:ec:b0:c4:4e:09:c7:78:34:90:5f:68:33:0f:bf:f4:23:
81:40:d8:4c:c5:27:ef:72:0c:85:d9:b1:7e:d1:cd:a0:7a:63:
33:e7:21:72:ff:7e:28:21:94:1d:af:62:59:e7:36:f8:67:f0:
65:02:b5:b3:97:a4:2c:1a:12:cc:3e:9f:e6:70:88:a1:5c:18:
13:6f:12:7d:e0:30:28:ce:63:c2:ea:e4:b8:18:46:86:41:5e:
22:f2:20:e8:1c:c1:b9:8a:e0:56:7d:53:85:41:6f:66:c5:21:
52:ab:2e:96:7f:bf:64:16:b9:6a:57:52:37:d7:66:85:39:f7:
14:47:2a:14:68:dd:96:b1:ef:60:57:d0:d1:43:e3:41:15:db:
d1:76:41:10:8c:1e:3d:f0:f6:53:1b:95:eb:5d:3c:5b:07:62:
61:0a:52:f6:3b:93:d4:99:ae:ac:f6:e9:fe:04:00:27:17:dd:
54:e6:32:82:4b:5a:ca:e5:c4:b6:3c:c0:36:94:0f:38:65:87:
43:57:2d:c7:11:3d:b0:07:39:56:63:a8:b3:89:03:c1:70:74:
67:e3:d4:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps+OokhyzY24Z62QmOw1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj
MTZhODUwHhcNMjYwMzAxMTQwMTA0WhcNMjYwMzAyMTQwMTA0WjAzMTEwLwYDVQQD
EygzNTZhODE4MjJiNjc0NGNiMjM3MDEzZWNlMDhjM2ZkZjg0Y2VkMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmmYigPUkFGzLZFgwjNcZ82tto9y
Vp3wPp3SKxtPd74cKDcsKvlLN8Rex+0MX2d4EhHIxd5k/Ke+U/uvTvAubHcVTsn6
BqGw1rbNprVtJRa3a40EYGwMGPFU8CqUO/xF8pCzsZvgqUp1EZFEwjYFNpRVxKj1
XAyYcTMqr1JYPDJZmRGFQRqTRjUwD5qsXNzQIvu2KbjbIx7JogLDzb6r4Tb9EkSD
H6NkDBGIQo0Yh986njjgc0bNJkfSTUIIP65OXrV4Pr1gRL/SuyIImdsn4wBkU+GS
9FfcIMPzhHfHdMiiiWKV9p+IoQFL1H6XrTapXvfJd9v3zcdYXOpN1TwIfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVqgYIrZ0TLI3AT7OCMP9+EztGjMB8GA1UdIwQY
MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt
YzNiYjg0NzYwMGNkLzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk
LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5Yy6FSf
SWseUN+WkCuNUZFVKA1x36dV1WQap4ih0TolDus91jfssMROCcd4NJBfaDMPv/Qj
gUDYTMUn73IMhdmxftHNoHpjM+chcv9+KCGUHa9iWec2+GfwZQK1s5ekLBoSzD6f
5nCIoVwYE28SfeAwKM5jwurkuBhGhkFeIvIg6BzBuYrgVn1ThUFvZsUhUqsuln+/
ZBa5aldSN9dmhTn3FEcqFGjdlrHvYFfQ0UPjQRXb0XZBEIwePfD2UxuV6108Wwdi
YQpS9juT1JmurPbp/gQAJxfdVOYygktayuXEtjzANpQPOGWHQ1ctxxE9sAc5VmOo
s4kDwXB0Z+PUAQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:33 2026 by rpki-client