Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
File: 1l15-Y5wsirX12oghap7hRqhhIM.mft (raw, json)
Hash identifier: bMBXIHTuka0hp3r9YdA3QekEJAySbNGYskw8ijTmDck=
Subject key identifier: 7F:3F:AE:7A:33:C9:42:70:D8:BE:1A:74:1E:6B:26:1F:E7:55:D5:FC
Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Certificate serial: 01A040F346D6C59A94A967F50BC7FBACB2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
Manifest number: 02A2
Signing time: Thu 27 Aug 2026 02:01:20 +0000
Manifest this update: Thu 27 Aug 2026 02:01:20 +0000
Manifest next update: Fri 28 Aug 2026 02:01:20 +0000
Files and hashes: 1: 1l15-Y5wsirX12oghap7hRqhhIM.crl (hash: VlRiR8H2sgqumrxm+m/pnBq5h+zrNhQj+MVlE7NDpLg=)
2: uK-XNVHo9tYItPi3LFPZI8WJr_8.roa (hash: vEACxQ0R2A7CfLsvs58jY8ndJKAAaoNlmaFWAMwCX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f3:46:d6:c5:9a:94:a9:67:f5:0b:c7:fb:ac:b2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Validity
Not Before: Aug 27 02:01:20 2026 GMT
Not After : Aug 28 02:01:20 2026 GMT
Subject: CN=7f3fae7a33c94270d8be1a741e6b261fe755d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:9e:47:17:bd:a8:87:89:21:ab:9a:eb:6f:
36:48:ad:86:47:38:f9:25:54:59:f6:13:ce:71:66:
ae:17:4a:18:66:a2:55:7d:5e:83:6e:1c:b3:54:13:
89:aa:51:89:d7:1d:0c:6c:68:c8:c6:bf:c9:5f:91:
0b:17:ab:3e:6d:b3:57:84:51:b6:6a:63:31:a6:e5:
8e:6f:b0:76:27:f8:6d:6f:04:05:49:62:73:ed:e5:
90:77:3e:d6:50:7d:21:3d:d1:a9:72:d2:1f:df:0f:
91:59:86:d7:19:06:dc:91:fa:6a:15:d3:d9:40:72:
63:2f:d0:12:b9:26:17:55:a3:f5:f2:40:75:d8:dc:
80:a9:87:7c:7c:c2:86:a5:93:44:ba:b0:8e:cc:be:
a5:16:be:34:62:0d:39:30:2a:36:17:45:9a:f5:1d:
b5:4d:62:22:93:dd:34:ed:4b:66:90:72:71:ea:45:
c1:a7:c6:85:91:2c:34:14:1c:54:42:5b:91:4a:f9:
a2:50:19:16:69:c9:54:cd:56:84:98:79:7c:a2:79:
7b:ad:c8:df:37:e1:c0:ea:55:2a:49:12:b3:67:4c:
c8:d6:5c:be:fa:a4:70:84:45:0b:c5:59:37:14:99:
1d:40:a6:b1:cb:73:0c:e5:7a:4b:42:fd:26:ef:ad:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:AE:7A:33:C9:42:70:D8:BE:1A:74:1E:6B:26:1F:E7:55:D5:FC
X509v3 Authority Key Identifier:
keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3a:5a:1d:7d:b8:82:a8:2f:97:02:c5:e5:80:46:ce:11:91:
f3:96:a5:4b:e8:4d:eb:af:4f:07:b7:c7:26:48:58:a5:52:e6:
7b:b3:0a:18:66:ee:66:c8:08:51:a7:95:9b:c4:95:0b:6a:ac:
a7:95:12:62:c5:9f:55:50:90:08:d4:7c:88:c3:8e:cb:cf:71:
50:4d:2f:a4:f5:78:35:64:8a:8b:8d:34:39:7d:16:04:b9:66:
00:9f:c0:e3:de:2b:21:bd:0a:02:9c:65:88:ee:90:b6:8a:87:
52:81:15:e7:e4:69:71:3a:6f:11:93:04:5b:98:3d:e6:4e:dd:
93:f7:51:fa:a5:d4:1f:6b:6c:99:c6:7f:e3:5e:03:3e:43:ff:
0a:38:90:94:c2:41:dd:f4:4c:49:08:f2:72:9d:1a:ba:e0:12:
70:c4:a2:24:d1:8d:0a:52:3c:1c:c0:bb:2e:41:cc:75:a7:59:
b7:b3:12:6d:9c:ba:ac:8d:e2:32:a6:08:fb:37:3d:74:07:cb:
40:62:84:c5:9b:6b:26:cd:1b:54:4b:4e:ca:8a:23:9c:34:c0:
78:53:f6:e7:e6:d8:e3:67:81:96:8e:8b:35:90:a6:3c:62:8b:
47:b6:67:cc:fc:f1:87:1a:4c:6f:a6:f0:93:82:95:0e:57:38:
d5:55:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:18:20 2026 by rpki-client