Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: BmT1wOPIeezopsIJo3rCdue1WfG5+YkX4wT8+T9qonI=
Subject key identifier: 0C:05:19:26:C7:2A:DC:DC:88:21:82:88:E2:86:2B:59:41:73:3D:64
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019D9AAC42E2BBD2C41EBA172581576166C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0AC5
Signing time: Fri 17 Apr 2026 09:01:13 +0000
Manifest this update: Fri 17 Apr 2026 09:01:13 +0000
Manifest next update: Sat 18 Apr 2026 09:01:13 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: rsggLjBP164xGSxhNhWJt5x9QFy8a1ncqnaMUiCQ4Uk=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:42:e2:bb:d2:c4:1e:ba:17:25:81:57:61:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Apr 17 09:01:13 2026 GMT
Not After : Apr 18 09:01:13 2026 GMT
Subject: CN=0c051926c72adcdc88218288e2862b5941733d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:e5:e4:95:ed:78:9e:65:12:c8:7d:2e:35:
2f:03:9d:7e:c9:35:09:c4:fc:2b:8d:7d:dd:e7:87:
0d:3c:94:70:50:4a:9e:8f:01:88:4a:74:98:ec:7d:
4e:6e:58:f0:df:14:e7:db:97:ab:dd:aa:e7:20:4f:
1b:0c:a3:16:2b:77:42:20:b4:83:79:61:9c:e7:64:
dd:b6:61:c1:2d:ec:71:1d:bc:e2:e8:13:04:35:9a:
55:f2:9b:dc:31:c5:a5:06:e4:a8:2b:f6:85:0a:db:
67:09:9a:f6:a4:90:62:67:25:1b:0f:1f:6e:b1:cf:
5a:35:07:d0:61:0b:57:9c:85:55:5d:45:79:bd:db:
2e:f3:84:de:06:81:b6:de:82:57:09:1b:df:31:f9:
76:af:ef:a9:3f:81:e5:4c:9f:ed:1f:b0:64:57:10:
ca:78:96:6c:df:09:bc:8c:e9:92:b0:ae:41:4e:eb:
fd:4b:bb:54:71:a8:84:ad:30:a3:08:d1:9c:7f:19:
04:02:90:b8:30:69:82:03:dd:11:94:67:67:b4:47:
47:0f:a0:d4:93:2e:04:20:ff:7a:b7:9b:51:dd:da:
d8:be:13:33:e0:46:8d:d9:3d:d5:a8:ae:e5:57:d0:
a6:ba:be:8a:8c:41:68:d0:96:48:61:6c:74:13:91:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:05:19:26:C7:2A:DC:DC:88:21:82:88:E2:86:2B:59:41:73:3D:64
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c8:9f:b9:5d:0f:89:a1:a9:fc:85:81:b6:54:ca:d6:ed:4d:
bd:48:63:6a:ee:4d:6a:2b:e1:90:a0:ba:50:a2:dc:a9:8a:86:
6f:fe:bb:ab:30:3c:c2:25:7d:ec:75:79:2c:75:04:26:24:c0:
cc:93:e3:30:92:07:a8:23:63:ab:a9:ac:ba:c3:7a:05:dc:76:
09:6b:7d:8d:47:6d:60:ff:4c:85:12:54:0d:34:2d:27:d2:1a:
5a:c5:fb:c6:98:12:d8:c2:50:45:6c:b6:50:ad:dd:50:f5:a7:
40:a5:9f:00:4a:fe:72:36:9c:72:2f:75:90:ce:38:33:7d:2c:
57:5b:bb:4f:41:66:4d:a0:6c:dd:47:6c:c4:44:8f:f3:3b:ae:
7e:05:79:ce:43:98:7a:3c:93:da:dc:3d:ae:6f:56:f7:28:5f:
5f:cc:3f:13:78:94:a8:78:af:65:fe:19:38:47:53:02:dc:6b:
f8:86:a8:6d:72:91:a8:d6:bc:b7:dc:a7:b6:12:68:be:e3:63:
b3:df:b6:ab:03:69:b5:cb:66:76:38:10:4a:11:ba:b9:99:99:
cf:3b:5f:72:a8:b2:1b:29:3f:9a:bc:48:62:b5:02:8a:90:4c:
70:ed:a1:8b:8d:41:1b:8e:06:03:bb:c7:14:f0:c3:b6:99:0a:
19:5d:e3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arELiu9LEHroXJYFXYWbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjYwNDE3MDkwMTEzWhcNMjYwNDE4MDkwMTEzWjAzMTEwLwYDVQQD
EygwYzA1MTkyNmM3MmFkY2RjODgyMTgyODhlMjg2MmI1OTQxNzMzZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mTl5JXteJ5lEsh9LjUvA51+yTUJ
xPwrjX3d54cNPJRwUEqejwGISnSY7H1Obljw3xTn25er3arnIE8bDKMWK3dCILSD
eWGc52TdtmHBLexxHbzi6BMENZpV8pvcMcWlBuSoK/aFCttnCZr2pJBiZyUbDx9u
sc9aNQfQYQtXnIVVXUV5vdsu84TeBoG23oJXCRvfMfl2r++pP4HlTJ/tH7BkVxDK
eJZs3wm8jOmSsK5BTuv9S7tUcaiErTCjCNGcfxkEApC4MGmCA90RlGdntEdHD6DU
ky4EIP96t5tR3drYvhMz4EaN2T3VqK7lV9Cmur6KjEFo0JZIYWx0E5FffQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwFGSbHKtzciCGCiOKGK1lBcz1kMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsifuV0P
iaGp/IWBtlTK1u1NvUhjau5NaivhkKC6UKLcqYqGb/67qzA8wiV97HV5LHUEJiTA
zJPjMJIHqCNjq6msusN6Bdx2CWt9jUdtYP9MhRJUDTQtJ9IaWsX7xpgS2MJQRWy2
UK3dUPWnQKWfAEr+cjacci91kM44M30sV1u7T0FmTaBs3UdsxESP8zuufgV5zkOY
ejyT2tw9rm9W9yhfX8w/E3iUqHivZf4ZOEdTAtxr+IaobXKRqNa8t9ynthJovuNj
s9+2qwNptctmdjgQShG6uZmZzztfcqiyGyk/mrxIYrUCipBMcO2hi41BG44GA7vH
FPDDtpkKGV3jSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:11 2026 by rpki-client