Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: YlZNoZhWb0uYZ6PZnR49CQNYZxDPI7xtvpBMvoRrbNc=
Subject key identifier: 60:FF:86:FA:BD:5B:9C:BB:0C:8A:66:85:92:D2:AF:99:9F:29:2F:FA
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 019D386663CB998046444A7E46C0C1971976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: PlEp7UEwTsmabKnbEFpxHyh1Lhx3ZJvfFyv4ku9J4IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:63:cb:99:80:46:44:4a:7e:46:c0:c1:97:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=60ff86fabd5b9cbb0c8a668592d2af999f292ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:ad:25:92:dd:68:a3:94:ba:df:f2:ae:9b:
77:60:a4:21:cf:e5:48:84:31:01:6b:27:c0:0d:ed:
1e:a0:2d:af:74:78:54:df:1a:20:7e:27:7f:e7:b1:
31:b8:75:f8:63:28:29:ac:aa:fd:68:25:ce:42:14:
0d:5d:76:a0:35:d5:68:71:58:36:cb:b0:cf:73:75:
74:b1:7d:c5:c3:f1:39:2a:ae:db:d6:d8:03:df:c9:
ec:7a:e4:c0:85:6c:5a:39:cd:0d:ea:3a:f5:d0:25:
98:85:53:b2:7e:52:ea:ce:af:d5:1b:d2:94:0d:0a:
cd:8c:a0:d5:ba:f8:a6:34:34:28:70:fe:5e:03:0e:
fa:ee:7e:28:e1:fe:32:4f:d2:dc:6b:0d:0a:3e:3a:
ad:f1:3a:35:28:f3:42:56:f6:bd:1d:63:93:cd:fc:
9d:fb:ab:aa:c3:0e:10:7f:8b:e5:fb:d8:b2:b5:a5:
94:27:bf:de:2f:76:45:10:77:67:d8:bb:7e:4b:00:
a9:ef:dd:1a:5e:13:a5:70:09:46:53:3d:cf:6a:c3:
51:85:41:ca:c5:0c:f4:a3:a4:fa:e4:c4:2a:4b:d6:
a0:87:19:56:e5:e8:7f:a6:b7:c3:44:6f:e2:d7:62:
9a:eb:0d:a1:c4:5b:94:45:e0:53:32:4a:17:c9:2d:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:86:FA:BD:5B:9C:BB:0C:8A:66:85:92:D2:AF:99:9F:29:2F:FA
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2b:89:99:13:46:47:5c:9d:f3:7a:80:26:e2:64:f5:22:c3:
f0:c1:3f:fd:ac:1a:b8:ef:20:f0:92:1c:41:5e:4c:7f:b9:bd:
3b:f4:2c:59:6f:67:1d:0d:4d:7a:49:d8:70:d9:03:c8:b1:59:
df:7c:70:22:08:38:34:f5:26:e2:84:bc:52:eb:2c:28:38:38:
01:02:2e:ef:13:6f:bb:23:1f:d4:26:ab:bd:e0:ce:bd:75:52:
26:78:f7:ce:d3:63:dd:14:69:ff:20:1a:d1:8e:9f:19:91:fa:
db:21:a6:d4:9a:b2:50:a4:ef:c9:9c:a5:fc:70:1f:fb:49:bc:
88:4f:26:45:99:7d:58:cb:f0:a4:db:c0:65:54:75:a5:d2:1b:
3a:b9:f7:af:9a:19:7e:a7:11:27:0d:1e:b6:16:a2:a1:6c:21:
97:7b:cf:e6:53:9e:7b:8f:b9:73:12:46:01:87:33:d9:e9:d6:
73:57:7b:2b:96:78:a3:78:e0:6f:33:61:60:bf:7f:db:00:2c:
9c:37:bf:19:77:10:b0:a8:0f:89:3b:2d:0b:ba:cb:2e:e1:33:
17:6e:75:9d:79:51:4c:16:03:aa:d4:09:a9:63:2f:2b:dc:ef:
98:19:e0:a4:bf:6d:fd:1f:8b:d9:10:e9:9b:01:d6:31:a4:fa:
b1:33:04:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmPLmYBGREp+RsDBlxl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm
MGYxMjAwHhcNMjYwMzI5MDcwMjA3WhcNMjYwMzMwMDcwMjA3WjAzMTEwLwYDVQQD
Eyg2MGZmODZmYWJkNWI5Y2JiMGM4YTY2ODU5MmQyYWY5OTlmMjkyZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRStJZLdaKOUut/yrpt3YKQhz+VI
hDEBayfADe0eoC2vdHhU3xogfid/57ExuHX4YygprKr9aCXOQhQNXXagNdVocVg2
y7DPc3V0sX3Fw/E5Kq7b1tgD38nseuTAhWxaOc0N6jr10CWYhVOyflLqzq/VG9KU
DQrNjKDVuvimNDQocP5eAw767n4o4f4yT9Lcaw0KPjqt8To1KPNCVva9HWOTzfyd
+6uqww4Qf4vl+9iytaWUJ7/eL3ZFEHdn2Lt+SwCp790aXhOlcAlGUz3PasNRhUHK
xQz0o6T65MQqS9aghxlW5eh/prfDRG/i12Ka6w2hxFuUReBTMkoXyS2OrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD/hvq9W5y7DIpmhZLSr5mfKS/6MB8GA1UdIwQY
MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt
NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1
LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyuJmRNG
R1yd83qAJuJk9SLD8ME//awauO8g8JIcQV5Mf7m9O/QsWW9nHQ1NeknYcNkDyLFZ
33xwIgg4NPUm4oS8UussKDg4AQIu7xNvuyMf1CarveDOvXVSJnj3ztNj3RRp/yAa
0Y6fGZH62yGm1JqyUKTvyZyl/HAf+0m8iE8mRZl9WMvwpNvAZVR1pdIbOrn3r5oZ
fqcRJw0ethaioWwhl3vP5lOee4+5cxJGAYcz2enWc1d7K5Z4o3jgbzNhYL9/2wAs
nDe/GXcQsKgPiTstC7rLLuEzF251nXlRTBYDqtQJqWMvK9zvmBngpL9t/R+L2RDp
mwHWMaT6sTMEKg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:00 2026 by rpki-client