Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: +dag9IgQgVd5lGW35/tKQs6WimBVpMSDDH4GiGe6Geg=
Subject key identifier: B1:44:C5:0F:C4:25:C6:C9:E8:73:54:5D:23:E2:64:2B:DC:A9:37:D7
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 019EB8460049118B4C6ABAD7295D954F5584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:55 +0000
Manifest this update: Thu 11 Jun 2026 20:00:55 +0000
Manifest next update: Fri 12 Jun 2026 20:00:55 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: DnmOUliw5Hb2nJruU07L3EtnoFZ0QRUW5P+JYNkq79I=)
2: r_ry2JrMgNkI0y2bqAVwL47xsmU.roa (hash: RFscHxkchgcCfOVhcpYJ+VpHovmhXd8iHfZgJ7NGod8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:00:49:11:8b:4c:6a:ba:d7:29:5d:95:4f:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Jun 11 20:00:55 2026 GMT
Not After : Jun 12 20:00:55 2026 GMT
Subject: CN=b144c50fc425c6c9e873545d23e2642bdca937d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:c9:59:ef:e7:06:ed:ed:da:68:eb:25:89:
66:12:17:57:82:37:32:3d:1e:e7:8f:5e:43:75:50:
4b:24:d6:7d:ef:97:4b:86:b7:25:77:53:a6:8c:2d:
1e:52:77:28:c4:be:cb:e0:1e:21:61:95:87:7f:65:
97:10:17:be:2b:a0:ee:74:6c:31:e3:86:7b:e0:8f:
dc:d9:d4:e5:a0:2c:7d:d9:68:2b:d5:16:23:9f:e1:
0c:37:05:14:12:a3:37:d1:c5:ff:83:59:0b:01:02:
b5:8f:44:a8:34:bb:81:26:83:1e:89:a1:b3:4f:7d:
58:75:aa:7a:50:87:d7:01:5e:b7:ec:fb:92:90:57:
4b:80:2e:43:2d:a0:e2:64:91:58:ff:77:96:f0:52:
80:5b:d9:35:59:5b:cc:79:32:a5:0f:57:39:a2:0e:
3c:92:95:e3:d3:2b:32:0f:c9:28:95:66:14:de:61:
c6:3a:d3:a2:2c:8c:79:6e:e5:28:27:52:db:85:96:
0c:49:a1:5d:50:59:10:d5:82:14:cd:85:ce:1b:5b:
ca:92:25:e4:55:f8:02:2d:54:f7:67:8d:cf:1b:b6:
ff:ce:84:0a:4f:11:94:08:f0:f4:54:0c:fc:b6:c5:
7e:db:30:cf:e8:7c:1a:c2:2e:33:2b:ce:68:8e:68:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:C5:0F:C4:25:C6:C9:E8:73:54:5D:23:E2:64:2B:DC:A9:37:D7
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:19:8d:8f:86:ea:ef:7b:8d:5c:fb:13:c4:1b:77:03:6b:
9f:5b:31:b1:b7:e7:60:6b:a9:8d:f9:03:bd:cd:8a:98:17:5a:
27:ec:2c:a6:ad:48:b7:14:c8:94:58:f5:79:0f:42:7f:9d:87:
14:39:62:81:2e:bf:78:95:09:6a:27:c2:d8:0a:33:e5:8d:2b:
5b:10:a4:e7:c1:89:de:c4:4b:8e:7e:4e:72:bf:39:95:78:23:
00:ee:1d:b9:d9:b9:c4:bb:8d:72:29:21:c5:2f:b6:2c:d4:90:
3f:2b:4f:5e:01:00:ca:79:33:a0:a7:02:64:ec:24:34:2d:dd:
44:15:7d:42:e3:c5:6d:3d:77:88:99:85:7c:ec:d8:4e:fa:93:
68:5b:93:48:05:ca:a8:d4:1f:20:35:78:1d:7c:ce:e9:0a:6f:
2f:47:64:84:05:ad:4a:8d:57:34:73:c3:2c:b7:6c:4e:ad:e7:
e2:3d:a1:a4:25:eb:32:e8:dc:ed:fb:dc:d3:9d:a5:1f:94:36:
d2:2e:8f:6a:7a:12:13:71:3e:92:10:b0:63:3a:b1:a0:aa:75:
96:01:f1:5a:04:69:c7:88:62:7f:b8:1b:d6:93:84:9b:72:83:
c5:74:17:19:22:90:72:ac:81:28:d2:04:1f:16:dd:15:e4:fc:
37:7b:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:56 2026 by rpki-client