Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier: xOro5LICYyA7WZ772/fbvqdAlmwG5mES8NTXnAZhApY=
Subject key identifier: AC:33:11:16:6E:C8:6B:1A:B6:D9:F8:A1:BE:B3:7B:4D:DE:29:04:50
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial: 019D37F77F3B10192ECB30B3E46BFAB2B041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number: 0B49
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: xq+sHyV6/gFSL4GtjhWmJPVg8ERF4b3w6dO6UQjECeM=)
2: jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa (hash: TzMlgxV3OUMprU97ffZezJnIgPb7d7fyoeggJfBlulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7f:3b:10:19:2e:cb:30:b3:e4:6b:fa:b2:b0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=ac3311166ec86b1ab6d9f8a1beb37b4dde290450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:39:cc:c6:7c:96:46:5d:8e:52:7b:c1:ab:
e8:d9:a9:8e:10:bc:ea:c7:5c:68:f4:d0:12:4a:48:
40:2f:b4:d2:6a:e9:01:1b:aa:09:fd:a4:0e:48:7e:
b1:4c:f5:4c:65:d1:6f:f6:11:b2:2a:57:6a:d6:e1:
1f:9c:68:77:88:c3:f7:68:1a:1a:94:a2:b6:ba:45:
54:b1:8c:3a:b9:1f:da:a0:8a:b1:27:34:98:27:d5:
96:50:e8:bd:15:14:3a:b6:a7:4b:a6:41:6e:69:e5:
8f:b4:e2:4d:87:5f:e8:6f:85:8e:cb:78:ad:25:a3:
48:3a:f4:3a:29:80:30:90:c6:24:7a:ef:7e:df:c0:
65:38:47:9b:73:cd:6c:df:2c:c7:e2:2d:4c:d1:56:
ff:1f:d3:d9:e5:ff:90:91:2d:26:ec:d9:06:f1:4d:
52:db:ff:64:ce:c8:74:5e:d6:54:2e:07:e9:fb:b6:
60:23:34:45:40:46:79:c1:47:9c:e1:98:44:7b:8f:
9c:8a:70:16:81:6f:be:ad:97:c5:fa:c6:c8:3d:08:
31:cd:fa:b7:37:70:ff:f5:b6:ad:db:11:c3:df:00:
a1:73:ed:82:61:29:aa:20:81:be:cd:91:6a:0a:44:
70:36:3f:63:a1:48:6e:43:0f:c2:3f:c6:74:da:27:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:11:16:6E:C8:6B:1A:B6:D9:F8:A1:BE:B3:7B:4D:DE:29:04:50
X509v3 Authority Key Identifier:
keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:77:4f:f7:b4:2f:cf:2b:b9:2b:7e:a9:59:21:9a:d4:88:
d5:01:2a:e0:0f:54:bd:f1:16:e3:16:81:7f:c5:a2:aa:aa:f8:
45:15:55:68:0e:7e:f9:ee:db:c6:eb:8e:36:d1:f3:64:9e:33:
33:f6:74:26:6f:38:93:2d:4f:61:73:be:07:20:20:26:96:f8:
2e:3a:32:f4:0a:d4:10:4b:01:d2:f2:60:f9:c8:0f:8c:27:58:
83:3a:9f:b8:30:60:36:8c:3f:30:c2:b9:22:f2:70:7f:a8:c5:
9e:cc:90:e6:14:82:b9:61:a6:cb:68:ca:f4:9b:20:9e:e7:2f:
c0:b2:78:6c:6b:dd:b4:f6:3e:f4:21:9d:8c:60:62:14:68:44:
f2:35:8d:c7:79:55:c0:09:25:72:a2:d7:70:e5:75:b6:ca:83:
8c:04:8c:e6:c3:57:dd:7e:43:c7:da:bb:d4:1f:51:73:00:31:
63:0d:ed:3b:ca:2d:36:5f:56:18:2b:a5:2c:61:23:46:2c:53:
40:2a:e6:b9:74:a3:95:c3:69:d8:f5:ed:9d:46:19:0c:a4:fe:
cd:84:0c:8d:b6:f7:44:fd:b3:5d:91:af:2c:48:36:01:a7:9e:
7b:5c:12:12:65:9d:90:fd:ac:25:5c:7b:ed:16:52:cc:6c:22:
98:78:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:48 2026 by rpki-client