Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: wRXrfYP+nGpS5hh4Rs3w4y7JWSEzEklq2Kk2noLR7tg=
Subject key identifier: 25:3A:F0:E4:BA:71:27:69:EB:CF:3C:62:4A:29:2F:5E:09:60:8D:7A
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 019CAD5A412D41FBC8777047F51844DC98C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 0795
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: 2n1oysBsLoiaYcanB-5u9wHCku4.roa (hash: N9Y8sdrm6t7ka/+qYdutIPmZstG6eMi6hXnCFfXaBBI=)
2: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: 7+irbh8zF613WgYulFggc7UPiO7gvj48COKAMpWmMPc=)
3: o7Mh-e1vqi6VEezsIe8usF1WqvY.roa (hash: PFuzeZNfVF7MAR1EKpSC2koEaTw4wzxZUsj6BIdCeKE=)
4: oa7xclPWOANlu86ailSyWI_SQhI.roa (hash: o8aDlt3R/Sz/MaNPGXv2qlYMmPH0QqPJXMaia7wcAjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:41:2d:41:fb:c8:77:70:47:f5:18:44:dc:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=253af0e4ba712769ebcf3c624a292f5e09608d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:b9:6a:17:0e:26:83:03:60:b7:c5:04:72:
f5:58:b8:3a:e9:e0:fa:49:19:2e:db:3c:52:2d:9e:
0b:e7:82:33:70:3b:9c:d8:a2:4d:c7:61:f9:81:c4:
9c:6c:fb:0b:de:89:d6:3f:f6:3c:54:07:13:c4:d0:
74:cc:ce:58:93:5b:80:8d:f0:03:80:67:5a:a7:41:
54:85:5c:22:a7:cf:2f:65:40:32:23:c8:a3:1b:b9:
51:53:96:07:bd:2b:e7:70:81:44:1c:49:6f:56:11:
a1:7a:21:f7:36:cc:58:5b:c7:1c:39:2e:ae:25:49:
00:9d:1e:59:31:03:2d:60:d5:63:a0:f3:53:98:de:
15:67:52:46:69:6b:4f:80:cd:45:c2:93:d4:6f:fd:
c9:6e:40:c0:13:18:40:14:fc:10:07:50:78:3e:d0:
79:4d:66:87:db:fb:68:92:b1:2a:87:b2:76:8e:28:
e8:48:fe:8c:8f:f0:24:1f:cb:71:11:8e:7b:3c:14:
8b:c0:2e:fd:3d:bc:59:ad:5d:b8:26:ba:5d:2b:8d:
fe:bb:8f:40:a8:b7:46:7a:f3:49:e9:62:8b:78:17:
cf:4e:f3:f1:33:ca:ea:89:e0:f3:9d:77:d9:8e:9d:
9b:ad:a6:55:3a:b5:dd:90:9a:ab:bc:49:24:fa:de:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:F0:E4:BA:71:27:69:EB:CF:3C:62:4A:29:2F:5E:09:60:8D:7A
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:3c:0d:21:e1:fb:ba:63:73:09:32:d0:1f:d5:09:f4:86:
05:00:57:ff:10:ad:df:af:17:87:10:3a:a3:a9:3f:6c:4e:73:
16:9d:da:8d:c8:d9:24:a9:3c:42:7a:85:0b:b9:b4:fd:56:75:
6c:11:16:9f:1b:58:97:dd:bc:ea:62:39:fe:fd:b1:cb:bc:6f:
7e:f2:e5:14:cd:54:8a:23:63:a0:6c:c8:92:74:0c:46:a9:52:
5a:9f:bf:58:e8:87:45:77:03:d0:94:65:bb:24:3d:a0:5c:33:
e2:f3:a7:fb:84:1c:3b:a8:7f:48:58:1d:2d:5c:ee:f0:a6:f8:
4f:c7:4c:22:11:a1:02:bb:94:81:6f:04:68:cb:19:d2:e9:0f:
89:fb:36:0c:e5:fc:94:f2:59:dc:c2:41:d0:21:ac:4e:d2:13:
0e:f2:0e:9c:01:69:53:2f:9f:f2:4a:60:e0:c0:37:c4:24:4e:
ff:b2:37:4e:0b:d6:c3:48:33:48:74:bc:8c:26:d8:c4:e5:16:
a4:dd:32:3c:d5:b7:56:9e:54:f5:ca:ab:64:38:58:17:81:ce:
bf:dc:41:a1:12:57:ff:e3:cf:00:d0:2d:43:15:d3:a3:b0:21:
67:f0:fc:aa:53:46:84:da:fb:44:8a:ad:be:d4:ca:49:7f:77:
8f:05:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:29:56 2026 by rpki-client