Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: +5oPMmmp4il8P9oDQN7KEarX6E5SUMZHut1nthO+RQc=
Subject key identifier: 28:2F:38:69:99:7B:3E:94:2D:85:F4:DF:E0:E0:BA:75:77:A1:42:E0
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019D382E3338481D825C28D9C6ACD8592567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0A92
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (hash: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: CU4F/CsL1LmHqvWQavxxIFB1DVORJwijh5JRehRIldg=)
3: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (hash: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:33:38:48:1d:82:5c:28:d9:c6:ac:d8:59:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=282f3869997b3e942d85f4dfe0e0ba7577a142e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:f2:39:c6:ee:37:81:00:e1:b1:09:8a:2d:
8f:ad:7f:b9:96:ef:fa:80:95:73:e3:49:e7:4c:98:
af:96:40:02:38:44:e9:ac:f9:81:76:5b:98:73:8a:
a9:ee:24:79:5a:38:88:47:eb:44:3f:37:07:27:cd:
26:76:5d:72:ff:ce:74:d6:e7:5c:9c:39:1b:b7:52:
13:de:95:23:0c:e0:de:41:8d:f1:7b:91:54:6d:fe:
ba:0b:66:d0:50:c3:ee:63:13:e1:f0:a0:da:2f:68:
35:08:ed:d4:64:f5:60:12:54:7b:73:dc:fc:3f:43:
49:3b:79:9c:95:3d:8c:9c:91:99:42:bd:41:de:f4:
54:47:f6:a1:1b:cf:23:64:7c:6b:18:6e:84:2e:70:
9f:ae:27:b6:52:e4:a7:30:48:a5:70:c4:4a:f2:bd:
d0:aa:67:bf:2e:13:b1:25:23:2d:92:a4:c0:13:a0:
4e:ea:ec:1b:2a:31:33:cc:3e:18:ad:76:de:62:29:
f8:ff:4f:f7:26:1d:fe:a2:dc:69:03:93:e6:6d:fa:
cc:f9:24:e9:cb:aa:c0:13:ca:9d:0a:a0:31:67:b5:
6a:ee:98:27:40:a5:9e:36:09:ac:29:9a:8d:35:b2:
34:36:4f:be:c5:7a:15:d7:7f:be:2b:4d:fe:12:d6:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:38:69:99:7B:3E:94:2D:85:F4:DF:E0:E0:BA:75:77:A1:42:E0
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:c3:7f:12:73:7c:2e:2a:7a:bc:ad:0a:b6:66:55:f7:d8:
f2:dd:84:65:48:3d:02:f8:ba:3d:ff:45:80:90:70:37:3f:b0:
8e:18:9e:48:54:00:fd:8c:8f:8b:bf:db:6f:56:59:8b:1f:2b:
fd:bb:78:f7:fa:5f:90:f5:ed:a9:04:24:31:c1:f9:2d:2a:2a:
10:fe:78:7b:cf:89:ec:f1:6b:f6:cf:4b:b8:e8:0b:71:78:6b:
3d:53:bc:3c:a7:bf:11:c5:46:c4:71:94:e8:89:ce:ce:9f:a7:
ff:11:28:f1:61:a3:30:6e:96:cb:67:72:16:32:e9:b5:85:ab:
da:e1:44:2a:3f:55:29:68:7a:e2:7d:05:f5:87:ba:86:f3:eb:
0a:f7:3d:17:a5:b8:42:34:a9:b7:b3:4f:ac:87:07:7d:62:dd:
09:6c:f9:da:45:8e:1a:fd:57:d8:3d:e1:dc:4b:fe:ce:7b:cc:
f7:c9:8e:5a:b5:5d:2c:ba:40:da:f5:ee:b3:63:b6:c1:8b:fb:
8b:33:c8:f9:68:12:9c:60:df:38:88:9c:07:7b:83:25:5e:25:
29:30:06:6e:fb:12:26:ed:67:96:d5:d6:ba:ca:fe:32:5e:fd:
c9:fd:1d:f1:ef:f7:6f:05:8e:64:9e:a6:1e:34:79:ba:d4:28:
87:e0:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client