Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier: 3wb+IP3WdTSSJonxfxDmSNTziIWxZpemJM0hzOB6PQM=
Subject key identifier: 43:40:F1:58:0A:9F:FD:39:16:DA:56:D5:3E:A4:2F:09:6A:19:8E:6F
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 019D3977CDA99F57193BA2DCBF4780D339D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:45 +0000
Manifest this update: Sun 29 Mar 2026 12:00:45 +0000
Manifest next update: Mon 30 Mar 2026 12:00:45 +0000
Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: kHtN4VSHvGWIPLbNG3sCLspQ+dkU//XI3S/loiWcn2k=)
2: aw5b-GS78H33XXfacv-uPagCZEM.roa (hash: WE8zP14TgI7idwZsYOKIvyET3IUB8iBRDb7tO1zrfRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cd:a9:9f:57:19:3b:a2:dc:bf:47:80:d3:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Mar 29 12:00:45 2026 GMT
Not After : Mar 30 12:00:45 2026 GMT
Subject: CN=4340f1580a9ffd3916da56d53ea42f096a198e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:b8:a2:04:d8:4c:a2:c7:34:d7:9e:24:71:
b7:97:da:67:e4:16:ca:2e:76:84:0d:ae:d6:f2:ba:
2a:21:ef:fe:55:23:cd:38:52:24:f9:39:f1:7f:ea:
b8:09:fe:9e:15:f5:e5:08:6d:1c:ee:5e:93:b4:86:
6f:41:8a:ad:db:96:92:73:ce:58:24:37:b3:fe:b0:
5d:96:b6:e3:95:77:76:d9:8f:94:97:89:55:ac:32:
90:34:3a:37:e7:40:a2:34:51:93:02:81:7f:f1:51:
31:db:a7:c8:42:63:ac:b5:ea:3d:29:fc:f7:c7:dc:
25:5e:81:38:ae:e3:52:b5:38:66:b7:91:f9:a7:f3:
82:fd:aa:90:28:66:2f:5c:56:cb:22:e1:e3:f3:d2:
21:8d:e9:61:ba:6d:ae:55:68:fc:1e:80:ee:92:bf:
74:3e:7f:fc:9b:2a:cb:8a:1f:20:92:f8:ff:a4:6c:
9c:ae:bf:94:9e:cc:3b:56:f7:c0:44:25:d8:dc:1b:
04:1d:b7:b1:72:58:ca:0a:14:84:37:e5:02:48:6c:
ac:0d:4b:81:17:09:bf:12:40:e6:9f:d3:cb:7a:61:
c4:04:cc:ca:39:8e:69:2d:3a:bb:e5:e2:3b:c1:29:
27:1a:61:2d:c8:c6:a7:43:01:eb:52:af:0c:86:e7:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:F1:58:0A:9F:FD:39:16:DA:56:D5:3E:A4:2F:09:6A:19:8E:6F
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0d:99:e6:8e:b0:f6:8b:bd:48:38:4f:e8:f3:bc:38:da:78:
86:06:f1:cb:b0:e5:61:7a:65:fd:60:12:86:06:f3:69:75:5e:
06:28:3e:24:13:88:af:50:c7:ce:fa:d6:ef:0e:0e:00:bc:0e:
5d:97:d7:ca:1f:75:9d:81:ca:1e:31:b6:74:9d:ce:17:98:3f:
f8:47:f7:1e:6d:d2:cd:01:9c:c0:4c:7c:d4:1d:53:a7:ec:fe:
7f:d7:80:d0:e4:cc:a1:b0:bc:1e:7a:de:0f:ba:6c:28:b1:94:
47:91:80:66:ed:8e:61:9f:63:1f:6d:76:eb:c6:cb:9a:22:21:
0f:33:fa:93:89:47:45:7c:b5:ae:0d:df:56:75:4c:06:1b:8c:
89:20:28:ee:84:33:0b:58:d0:23:07:79:b8:79:7b:b6:b5:78:
5b:34:99:66:8c:01:3c:2b:e4:da:79:4f:f5:ce:90:f9:99:b8:
53:51:44:1a:80:86:45:e1:4c:96:ab:e6:99:eb:9c:d0:d7:9c:
3f:5a:38:49:75:bc:16:ac:cc:ee:b8:bf:da:bd:8b:49:a7:0f:
ec:56:88:4b:db:c8:a7:97:60:4d:a5:6d:5e:ed:db:c3:99:ef:
fb:ac:bf:58:ec:fb:7e:6c:65:7b:bd:da:07:71:86:c2:64:0d:
3f:de:c3:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d82pn1cZO6Lcv0eA0znTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm
YWFiYWMwHhcNMjYwMzI5MTIwMDQ1WhcNMjYwMzMwMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg0MzQwZjE1ODBhOWZmZDM5MTZkYTU2ZDUzZWE0MmYwOTZhMTk4ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0q4ogTYTKLHNNeeJHG3l9pn5BbK
LnaEDa7W8roqIe/+VSPNOFIk+Tnxf+q4Cf6eFfXlCG0c7l6TtIZvQYqt25aSc85Y
JDez/rBdlrbjlXd22Y+Ul4lVrDKQNDo350CiNFGTAoF/8VEx26fIQmOsteo9Kfz3
x9wlXoE4ruNStThmt5H5p/OC/aqQKGYvXFbLIuHj89Ihjelhum2uVWj8HoDukr90
Pn/8myrLih8gkvj/pGycrr+Unsw7VvfARCXY3BsEHbexcljKChSEN+UCSGysDUuB
Fwm/EkDmn9PLemHEBMzKOY5pLTq75eI7wSknGmEtyManQwHrUq8MhudJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENA8VgKn/05FtpW1T6kLwlqGY5vMB8GA1UdIwQY
MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt
MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy
LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw2Z5o6w
9ou9SDhP6PO8ONp4hgbxy7DlYXpl/WAShgbzaXVeBig+JBOIr1DHzvrW7w4OALwO
XZfXyh91nYHKHjG2dJ3OF5g/+Ef3Hm3SzQGcwEx81B1Tp+z+f9eA0OTMobC8Hnre
D7psKLGUR5GAZu2OYZ9jH21268bLmiIhDzP6k4lHRXy1rg3fVnVMBhuMiSAo7oQz
C1jQIwd5uHl7trV4WzSZZowBPCvk2nlP9c6Q+Zm4U1FEGoCGReFMlqvmmeuc0Nec
P1o4SXW8FqzM7ri/2r2LSacP7FaIS9vIp5dgTaVtXu3bw5nv+6y/WOz7fmxle73a
B3GGwmQNP97DjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:09 2026 by rpki-client