Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: icraz5t78KxJOiOKVvxoxJ8uu5RNWKOBnnS6GasJM6c=
Subject key identifier: CF:AF:25:5E:FD:50:C3:27:EF:7D:B7:F9:BE:8B:84:A7:55:D4:39:53
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 019CAA214454A0A593F33E2658614397DAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 1546
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: 4jGHXl6kWOAh36sYuELN1LaN2J8.roa (hash: pteCQ8qTw2Dl8AAbMQbGtibM3E4YRXrmS1BWfb6Hkt0=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: /UpnYYG0rF7wg7Veme69Mx0JRF0cRQ1qzBBsC+bCRBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:44:54:a0:a5:93:f3:3e:26:58:61:43:97:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=cfaf255efd50c327ef7db7f9be8b84a755d43953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:09:04:6f:d2:ae:b1:33:7d:54:f8:33:05:
5a:68:c1:ca:8a:9b:d4:9a:ca:50:bd:cd:94:a2:d3:
9d:03:4e:f4:fe:8f:60:34:49:d1:16:0f:f5:73:24:
bf:6e:8c:9c:b5:27:6c:9a:d8:17:01:33:ae:e6:c1:
e9:a0:74:d1:bc:58:2d:d0:3c:9e:84:45:69:f7:52:
a8:2e:4b:07:f5:9b:f4:71:d7:7b:84:33:c6:77:3e:
fa:5d:50:f3:f2:40:bc:86:fc:fa:d9:55:13:7b:53:
7d:62:07:10:7e:6a:70:10:7b:54:39:88:26:9e:64:
87:67:a4:23:48:c3:a9:1a:a6:3a:3a:2c:18:5f:c2:
6e:cc:50:30:16:cd:df:be:c6:fe:22:4c:2f:71:34:
29:79:f6:56:09:3b:89:e6:f3:1d:b4:7c:7c:48:3d:
3a:27:08:3e:9c:d1:a4:fc:e1:ac:e1:52:ba:94:7b:
1a:1d:7a:59:4b:b5:e2:4c:a2:87:92:6d:51:ff:c0:
db:ab:61:db:b7:e8:06:66:bf:7c:31:a7:fe:78:05:
ba:10:b9:5c:35:d0:e5:3b:9f:bb:28:72:7b:c5:de:
3c:02:00:7a:c1:15:8b:6f:51:b0:f6:61:1f:84:62:
70:53:e3:78:13:11:62:e2:1f:3a:0c:94:a0:ba:87:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:25:5E:FD:50:C3:27:EF:7D:B7:F9:BE:8B:84:A7:55:D4:39:53
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:bf:bd:06:91:cd:a5:e6:9a:cb:58:0f:0d:b8:aa:8b:ca:
da:40:67:45:47:df:3a:43:48:b8:af:7e:e8:46:30:88:36:d9:
da:98:0e:20:14:d3:ae:3f:ae:ae:64:db:08:21:f2:03:d9:e1:
43:a5:b9:a3:58:2a:22:66:4d:59:88:8a:c7:45:c4:7e:6f:da:
b3:58:fd:7a:35:6c:b4:1a:a6:b4:4d:02:a7:71:44:66:df:20:
63:22:43:01:cd:61:cd:52:71:82:3d:71:9d:f8:58:1a:24:a7:
95:5f:b8:10:3d:06:14:36:2b:0e:ba:3d:63:73:60:b3:4e:a6:
fb:6c:5b:2b:af:67:a9:87:d1:bc:b2:5d:3d:2d:32:21:0b:27:
d1:f9:23:f2:50:5b:da:25:2e:23:65:79:de:71:97:65:74:79:
ab:e1:3d:7a:ae:f9:7f:ba:f0:ae:59:8a:02:09:37:10:3a:01:
35:0b:8f:29:27:42:3b:a0:0c:97:be:b7:a9:24:bb:3a:10:2f:
7d:14:0e:a2:d7:e6:eb:e8:da:71:cd:31:e5:5b:5f:c2:47:15:
73:a6:67:62:e3:69:e1:6d:fd:ce:fb:48:4c:e9:ab:ba:95:f0:
93:2d:8d:1a:17:82:46:d1:3b:f9:0b:99:d4:75:91:2d:57:8f:
d1:9f:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:25 2026 by rpki-client