Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: gZo8MA8GLI03sBcmyFw6SId2m2n14X3T8Sda+GF7N3c=
Subject key identifier: 9E:4C:F2:0F:0D:93:FF:A4:41:7A:2E:18:34:CB:E2:E5:C6:D2:70:4F
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019CAB344F349F5596E0526CFE7AD6CBFB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0A49
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: BPhsWofxhSXRops3hoAd8z7AW7p79vVaQD68UlR2byA=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4f:34:9f:55:96:e0:52:6c:fe:7a:d6:cb:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=9e4cf20f0d93ffa4417a2e1834cbe2e5c6d2704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:20:da:08:43:2d:80:72:0f:7b:66:9e:e3:
04:57:6a:c8:8d:e7:6c:c6:be:bf:e3:d0:ee:9a:dc:
ff:d6:5a:5a:9b:3a:86:dc:cc:31:f2:37:c4:98:f9:
a2:93:c5:32:9c:df:a4:bf:36:99:b1:74:02:23:d9:
f9:7a:8e:e6:6d:f9:ea:da:e6:13:3d:1f:58:c5:4d:
7d:01:5c:6e:df:ca:da:68:67:aa:a3:d3:3b:a9:b4:
3d:0c:f6:4c:1d:7f:c2:bc:a8:1b:e2:f6:18:6d:dd:
cf:37:54:f5:77:e3:cb:f2:89:2e:0d:b4:75:d6:a7:
d8:d2:42:e4:ba:ca:fd:f9:2a:bd:15:89:0e:82:72:
a3:2c:70:69:2e:25:ee:e9:99:9e:de:68:84:5a:c2:
d2:e6:d2:36:0c:02:b5:87:46:f4:94:f3:b2:b7:61:
44:ac:2d:96:a0:93:7b:29:b6:59:fa:b2:7e:b7:ed:
a5:7d:10:7c:ef:8b:d0:93:6b:8c:2a:4e:e8:3d:2e:
ca:27:30:9f:26:ac:11:bb:a8:33:1d:9e:b3:d4:b0:
0a:da:19:25:f5:ff:59:a0:d2:fe:e3:23:b3:83:ef:
63:53:e3:9a:dc:1e:6e:20:ba:91:63:70:55:70:16:
aa:71:ff:c9:18:b9:87:e0:92:6f:d5:46:f8:29:1e:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:F2:0F:0D:93:FF:A4:41:7A:2E:18:34:CB:E2:E5:C6:D2:70:4F
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:fc:7d:d6:c4:5b:fd:6c:95:53:75:3c:f9:be:f3:54:7a:
53:f4:51:7b:0f:65:b5:e6:27:6b:19:94:90:02:c2:82:35:79:
8d:dc:c1:77:16:a5:d5:c1:09:f0:54:bd:36:9c:6e:76:b3:4e:
19:e1:3a:20:e5:2e:fc:75:14:12:17:99:14:88:02:78:a5:12:
40:1f:a4:2d:68:d5:2b:d8:3f:df:27:71:90:8c:7b:ff:62:ea:
fa:b4:33:68:41:51:27:b5:14:5f:c5:1b:b4:62:b2:69:6a:31:
1e:ce:28:b2:c1:2a:28:6d:7d:a9:71:6d:d7:31:cd:ba:2a:ca:
f6:a2:ee:38:27:8b:cd:d8:d7:c2:45:28:b7:d9:cf:16:95:32:
3c:01:3f:4e:d4:0c:46:a5:ea:ab:66:3f:59:62:ee:fb:b8:22:
fc:65:af:72:21:8d:5e:b3:ca:a4:03:a5:ff:e7:8e:33:05:d7:
00:e3:86:a3:78:60:a7:77:ed:4b:d9:00:8f:29:77:05:ff:ab:
c0:2f:ea:53:e4:ba:8d:b9:e9:0d:fe:1c:88:71:a0:56:0d:85:
84:f6:c0:b1:ef:11:0b:c1:c7:98:bb:40:a0:2f:09:3f:dc:b8:
d4:9e:85:64:45:b5:92:c2:14:0e:9c:fa:e4:9d:77:25:16:b0:
a1:4c:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:51 2026 by rpki-client