Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
File: 1l15-Y5wsirX12oghap7hRqhhIM.mft (raw, json)
Hash identifier: 4rHahTrAlU2EHp1LeqtcZyQtj4BnGKVr7UA/MEnulTE=
Subject key identifier: 89:0E:C6:93:92:3F:D5:E8:19:88:BC:77:A0:0E:23:5B:E7:42:83:50
Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Certificate serial: 019D389BAE9167CAE65FE001E4EBA6C29470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
Manifest number: 0110
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: 1l15-Y5wsirX12oghap7hRqhhIM.crl (hash: iGB3x82tSeKq+N1Fyz6lCmhsGN1tIXzkBbGN6OoFQKs=)
2: uK-XNVHo9tYItPi3LFPZI8WJr_8.roa (hash: vEACxQ0R2A7CfLsvs58jY8ndJKAAaoNlmaFWAMwCX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ae:91:67:ca:e6:5f:e0:01:e4:eb:a6:c2:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=890ec693923fd5e81988bc77a00e235be7428350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:97:dc:cd:c5:ac:1b:1e:55:a6:98:92:03:
a2:42:82:3f:0e:f5:33:06:fd:7e:13:e0:46:0d:d8:
0a:48:80:14:cb:d6:91:10:42:8e:91:bf:84:c6:ef:
d4:99:8a:6b:24:2d:91:a7:0c:bc:5a:67:7e:e2:75:
b3:a0:36:8a:81:5b:af:31:6b:52:a0:73:6f:b1:0a:
34:02:8a:04:8c:af:29:29:6d:99:07:c2:52:e8:0c:
6a:af:e5:de:d0:ef:9d:df:2a:5e:2e:0d:1b:03:a6:
dd:6d:07:99:a9:2f:89:86:1d:27:7b:e8:e1:2f:f7:
81:a9:60:d2:b7:27:2a:51:fd:32:36:ab:55:69:28:
2e:5d:f5:45:de:e2:eb:07:31:1e:3c:28:b7:cb:7d:
b0:d0:f7:7c:f6:af:20:28:bf:0e:ab:24:c1:0b:1b:
7e:de:05:82:e2:f0:55:bf:1b:cb:11:f7:4f:5f:5c:
7a:af:dd:3b:b1:5e:4d:a7:16:58:9e:da:e1:dc:82:
01:b9:21:86:08:0e:73:8e:77:64:29:aa:02:0d:13:
69:43:95:99:82:44:bb:c4:78:79:de:55:df:69:92:
88:76:7d:b9:72:af:bf:3d:6a:51:4b:41:87:4b:ce:
28:a6:15:30:1c:a3:d7:d8:64:85:21:ed:00:a9:d2:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:C6:93:92:3F:D5:E8:19:88:BC:77:A0:0E:23:5B:E7:42:83:50
X509v3 Authority Key Identifier:
keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:bc:87:e5:1e:5f:3f:35:41:26:b3:fd:41:b0:b2:b4:b0:
a5:01:2f:56:90:56:99:96:83:b0:a1:64:ab:60:4a:32:66:e2:
dd:32:3f:80:08:cf:59:b5:5b:08:2b:84:ea:5c:4d:f6:2a:d3:
e6:99:8c:4c:78:03:3b:c2:c7:82:bb:a2:7b:c2:33:f6:4b:dd:
1f:e4:d8:28:92:20:e0:a0:82:46:a6:10:a1:58:8c:4c:40:a5:
7f:06:78:52:ad:29:4c:4c:95:24:13:0a:cb:64:78:2c:77:ca:
0e:61:05:d2:3b:4e:61:c5:fb:2c:23:b1:8e:5e:ec:06:1c:0b:
3c:f3:ea:62:75:0f:29:a2:82:bc:39:7a:ac:02:4a:fe:54:77:
90:cf:27:ef:5e:89:4e:5a:6b:a5:10:ad:52:46:5c:00:e5:6c:
4b:a0:f8:af:fc:08:f0:e2:92:5b:ef:34:d9:f5:8a:30:2a:22:
93:01:89:d9:cf:0a:23:e3:0c:fc:b0:48:ca:03:02:67:f4:c6:
c0:6b:6b:f5:90:5c:fe:c2:15:d6:be:21:4f:66:bc:dc:dc:7a:
93:33:4f:2e:bd:62:f5:0c:ab:ce:70:ce:b9:83:50:00:29:3f:
5e:a0:2d:e1:0b:22:9e:09:c1:37:cb:65:8d:93:46:39:43:8c:
ff:ba:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:33 2026 by rpki-client