Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: eOB04wVVItBO8HQGrjiROqqI2P9so2sTFtWMLh8Um3I=
Subject key identifier: 08:17:E8:D3:76:34:9D:24:A1:70:E2:ED:C2:AD:68:AD:7B:AD:F1:B5
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019D39417E2D2AB1557D2334BB82E621734F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1879
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: SkM9MIhCsB/7FhwCniqv3c/8dJsA6BXQ2sIKqPfyQv0=)
2: dfRokVERntavg7crGxooophhw2o.roa (hash: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7e:2d:2a:b1:55:7d:23:34:bb:82:e6:21:73:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=0817e8d376349d24a170e2edc2ad68ad7badf1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:05:8b:93:3b:44:e6:b7:98:7a:3f:ad:25:
63:b6:0e:7c:2b:8e:9a:bd:04:0e:17:cb:36:fb:4e:
09:85:e0:f1:b6:0a:e9:6c:4d:9f:0b:98:de:10:a3:
ab:68:a8:95:93:5b:74:cf:1c:94:7a:27:82:de:ac:
19:82:c5:c3:40:c6:10:d0:38:1f:73:8d:66:fc:ac:
23:84:e5:ce:9e:73:e9:c0:e9:19:08:3f:74:79:ef:
78:c2:d7:30:ed:b8:94:0b:8b:70:11:d7:1a:04:37:
cd:d5:db:c6:42:bb:c9:5d:c9:bc:80:6d:f0:d4:0e:
17:31:3e:4e:d2:6d:21:ee:a1:14:84:c5:83:50:5c:
63:7b:ab:e5:14:46:8e:e7:08:dd:22:11:29:d0:51:
67:c2:13:77:19:c2:b6:ee:9d:74:bf:64:1a:8e:4a:
01:9f:46:c1:eb:a1:86:18:c0:2d:32:6c:e7:83:b6:
31:08:a9:5f:6d:bd:b1:b5:ca:2f:90:46:6a:55:13:
71:5f:22:c8:46:6b:4a:c0:ac:63:d0:36:03:35:f5:
8b:28:9f:53:29:c1:20:59:33:c7:f8:62:22:1d:ab:
09:d5:d7:a6:a2:aa:16:e6:9b:f6:e9:72:91:0b:c0:
e4:bd:fc:d8:0f:d5:c5:50:92:4e:80:3f:94:0b:10:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:E8:D3:76:34:9D:24:A1:70:E2:ED:C2:AD:68:AD:7B:AD:F1:B5
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:d8:10:c1:ee:1a:eb:47:a5:82:6b:3c:f6:45:5e:71:b5:
8c:61:ac:1f:14:a9:8a:3b:4c:28:8a:d2:b9:47:bd:97:aa:68:
53:1a:a1:35:e8:68:20:8c:d2:5a:63:85:16:4e:52:8e:5d:65:
4a:9f:3f:39:40:cb:98:59:a0:9c:ba:52:bf:07:dd:f3:10:a9:
2a:7c:2b:31:81:a5:60:a7:16:b4:1c:32:21:01:3f:9b:55:a2:
5f:59:75:ac:01:cd:07:57:77:da:14:9c:37:f5:f0:5d:08:43:
8a:db:94:41:ac:55:71:0b:1d:e5:b0:da:5b:90:90:a3:ac:db:
26:f4:92:c7:48:2c:48:c4:06:d6:96:ec:7f:f2:f0:dc:b6:1a:
73:a9:f7:66:b2:f7:d9:24:01:7b:95:d9:95:12:31:b7:1d:3e:
23:a9:1d:ba:c9:c9:e9:6b:2a:05:70:19:a3:13:73:1f:4a:71:
85:9e:4f:d4:70:54:d4:ff:86:33:dc:83:0c:c7:2d:c2:1f:f0:
6d:2e:d5:a2:1a:5c:60:1b:38:59:35:88:99:0d:9b:b3:3c:90:
56:2a:5b:e2:08:57:71:b0:2b:92:b4:b0:63:4b:bf:48:0d:e7:
94:6c:83:7c:db:13:72:c5:ea:69:1b:a1:43:26:14:94:85:b0:
18:28:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:53 2026 by rpki-client