Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: rxBTGav/xydjIbAu4HU8gRLDitiOP68Y1C/u8mxt11I=
Subject key identifier: 26:91:07:C5:07:11:60:D4:81:78:C4:04:96:BC:A2:42:D9:BC:4D:D5
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019D39AED2712D35DF4B2C5A296702FBE62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: DE6qzK8ZbTdn2sj6nzXv59atG6c.roa (hash: 9YeaePMUl74JdFaiRSC0VTGbzx1hAN55igQj80uecEQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: hTqtfJVThkz52oArRHCTDsfzqxpS63iD5/m7CGT7sMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d2:71:2d:35:df:4b:2c:5a:29:67:02:fb:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=269107c5071160d48178c40496bca242d9bc4dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:69:b7:1f:e5:76:00:a2:de:80:0b:11:3a:
a0:88:45:0b:9f:e2:73:4b:ac:06:5d:f8:03:e8:cc:
cb:48:2f:4b:76:cd:92:99:26:dc:c5:92:a6:66:8c:
80:9e:11:90:c1:f6:1e:35:45:3f:83:d9:a8:01:d1:
96:c1:4b:b0:1f:0c:83:2d:2e:6c:1e:a6:70:22:f1:
bd:2f:81:12:65:c3:59:46:b9:4a:47:4f:68:db:22:
0c:c7:71:9b:d9:1f:44:1f:18:a9:9b:d7:25:6f:06:
fe:89:3f:af:ee:3e:b6:5f:11:73:59:9a:a9:2a:07:
3d:9c:bf:a7:f3:41:a5:80:e5:99:17:57:23:5a:92:
51:62:43:9b:7d:be:a3:96:8f:9c:85:2e:ff:c7:64:
ff:ec:9e:09:8e:c7:e3:cd:7d:e8:e5:29:26:c2:1f:
d3:26:70:a5:b9:96:ed:79:7f:31:ae:7c:5c:ff:cd:
bf:71:11:9d:ac:5a:b0:67:d2:8d:77:79:03:96:1b:
4f:84:8c:50:17:d1:0a:a6:78:12:34:b8:0c:1c:89:
82:2c:30:fb:9b:9e:63:c4:18:f3:63:97:19:71:ba:
2c:6a:8d:84:0b:10:95:bd:a8:69:dd:90:d5:db:7a:
24:7d:96:09:ee:b0:10:a5:e2:c2:ca:a3:f7:ad:55:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:07:C5:07:11:60:D4:81:78:C4:04:96:BC:A2:42:D9:BC:4D:D5
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:1b:9d:c3:86:f1:ee:cf:5a:ff:68:2e:17:1e:44:8a:2a:
58:1b:8d:a6:91:d8:9c:a8:3d:20:0d:64:f1:c6:b8:ae:89:39:
21:8e:9f:6e:77:35:1e:3a:f0:35:d4:42:69:2f:22:7d:74:ee:
a3:d9:41:d2:9a:eb:3d:56:c6:5a:17:33:31:48:73:89:44:7f:
71:db:59:17:5b:8a:1c:37:83:9d:ab:a9:ac:91:f6:52:7b:dc:
e7:55:56:0c:78:46:f5:bc:3b:58:95:74:5a:b7:c1:b5:4d:d7:
f9:6f:be:c2:a2:7b:95:6f:a6:96:79:86:96:89:3f:d9:25:70:
77:ea:84:b8:4b:5a:a8:ce:36:74:8e:e5:ed:d7:07:5f:e4:8d:
ee:86:fd:4f:2c:76:52:a7:d8:c3:9c:61:ed:0a:46:90:a4:05:
8e:54:ab:6c:39:c9:1e:50:ba:ff:f6:2e:6c:52:11:f3:c3:e3:
43:ec:1c:b5:c9:7f:25:ad:9c:c3:ef:4c:f1:26:74:17:25:83:
32:c5:e5:61:f0:1a:cd:02:d9:15:8b:72:00:92:25:a3:0f:fd:
f5:ec:42:7b:27:91:e6:a7:f3:ed:d1:f5:ab:37:13:95:12:02:
79:ad:75:52:7f:b0:5e:c5:f2:4b:84:1d:50:c2:77:48:fa:59:
53:44:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:12:41 2026 by rpki-client