Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
File: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft (raw, json)
Hash identifier: SJApb6p+Wq9TGpYPVC07kdcfweruHonc0+pMIZkggEU=
Subject key identifier: 5A:7A:3B:80:13:A0:4A:7A:7B:7B:7B:D8:65:4D:31:60:C8:99:81:A9
Authority key identifier: DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
Certificate issuer: /CN=da5f25e8950f69e2d75b93b92f5404199e044762
Certificate serial: 019D3909B6C8049BB62EFA163F1581DA7455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
Manifest number: 0172
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl (hash: PndntgE31OH8xUmSJbwnnO8d8z4CJsa/nz8y9y1NKXE=)
2: RstBPFjM6RZLydCSF_gstYqTNio.roa (hash: AQIsrapA+jjaaRR0kQmSSklLBZ57sqiJJ2/Lw3zxZ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b6:c8:04:9b:b6:2e:fa:16:3f:15:81:da:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5f25e8950f69e2d75b93b92f5404199e044762
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=5a7a3b8013a04a7a7b7b7bd8654d3160c89981a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:57:40:19:cd:ed:97:96:63:d2:5d:30:bb:
67:fd:ae:cf:28:29:5a:2c:e9:06:ff:4a:b1:48:ba:
35:ce:2d:90:22:4e:d2:cc:54:a8:b9:18:e7:ad:64:
d7:3a:10:c8:f7:8d:f7:db:5c:35:43:0c:74:99:24:
b5:2e:7b:a0:f8:dd:e8:d5:f5:c2:b9:e6:03:19:4b:
d8:6c:de:38:e7:63:17:2f:11:4a:33:f3:6d:9f:3d:
da:4a:57:f9:c7:9a:7a:df:85:50:7a:5c:1a:79:6a:
e6:95:b1:43:88:c1:03:d2:7d:ec:09:b7:fd:48:48:
6b:80:5f:1a:74:c3:5f:63:ee:c4:aa:17:70:c2:93:
96:8b:ec:ed:c1:2b:9c:79:c5:3c:00:c2:e1:eb:24:
f1:ad:b1:ff:22:8a:b1:3f:f4:27:63:6c:a9:40:97:
9d:29:e5:ba:65:7c:cd:76:37:35:a9:26:c1:64:b6:
38:30:b3:f0:11:73:ab:f9:e4:6a:6c:1b:dc:32:f3:
ac:38:03:c5:54:f7:6e:9d:0c:e6:e5:b7:65:ca:43:
e3:a2:0e:f2:5e:0e:a3:03:3d:d4:f0:2a:ea:3c:74:
28:b4:e8:b1:b8:8b:c1:87:d5:d1:8f:9a:f3:d6:2d:
cc:da:5f:e9:59:d0:3d:85:ef:87:84:6a:f9:6d:0d:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:3B:80:13:A0:4A:7A:7B:7B:7B:D8:65:4D:31:60:C8:99:81:A9
X509v3 Authority Key Identifier:
keyid:DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e6:7a:e1:43:01:d9:7e:b7:9a:b9:a2:15:c7:d8:d1:e9:b2:
b0:cf:00:fd:8e:d4:01:5c:d9:6f:49:8f:c4:39:b0:fc:29:4d:
7e:e2:ed:85:8b:da:8b:bb:36:51:34:c2:55:91:23:f4:eb:35:
64:fd:18:c2:92:b2:48:ba:2a:9f:88:bd:9f:97:7b:b3:07:b8:
a3:c0:05:54:5f:d6:a7:5d:12:77:1a:0b:5f:cd:96:00:c5:73:
21:32:c3:0e:c4:6d:55:67:ad:de:b2:48:73:3f:18:f1:37:3c:
ff:87:17:1b:8b:91:92:a0:09:f7:17:6f:0f:b1:55:1d:67:ba:
22:cb:88:db:1d:2d:b9:13:6b:f9:aa:90:21:3d:16:6c:b4:8e:
27:08:7e:4f:e4:6a:2f:e7:d6:0a:2e:bc:9e:bb:71:50:29:bf:
4c:1f:ed:07:1a:f7:d5:e1:1c:ab:9d:29:ed:13:d5:c5:b3:0e:
98:d8:a9:43:55:f4:7d:37:5c:c4:10:00:7a:1b:48:97:d1:60:
2a:d9:a8:28:78:51:ce:99:ef:e5:ab:5a:4c:3a:17:44:0b:c9:
17:76:cc:5f:06:ac:4d:69:54:21:14:f8:b4:77:7a:f4:01:37:
d7:4b:01:49:f5:ff:14:13:96:7b:dc:31:11:3a:22:64:1c:23:
cc:be:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:09 2026 by rpki-client