Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: dgLEWKMQCWWqnryKnI1QrSTn68V3j+tS/hJSEKmeGVE=
Subject key identifier: 37:0D:4F:54:6A:9E:BC:6D:48:BB:93:5D:FC:0B:A2:FD:8E:56:0A:AD
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 019CC3AAC6B6BB10E482ACAE0DA48501DAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 0901
Signing time: Fri 06 Mar 2026 15:01:14 +0000
Manifest this update: Fri 06 Mar 2026 15:01:14 +0000
Manifest next update: Sat 07 Mar 2026 15:01:14 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: bkb1Jzu1eFJoG3aAd/ofcus6SeQgpqE0WmLJX0Bdz0g=)
2: pIAhj8amHnd0fjLTUVpUmZpe45o.roa (hash: F6Vq2qEf6nCrdvdX7pWrP/aHN1l9RhEoh7QDzNTcEVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:aa:c6:b6:bb:10:e4:82:ac:ae:0d:a4:85:01:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Mar 6 15:01:14 2026 GMT
Not After : Mar 7 15:01:14 2026 GMT
Subject: CN=370d4f546a9ebc6d48bb935dfc0ba2fd8e560aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:61:23:d2:e5:3c:9f:43:1c:55:a4:bf:4d:72:
50:ab:fb:af:16:ba:b2:3b:c5:ca:7d:ea:26:e7:b3:
82:6c:88:12:04:16:a5:dd:1a:49:f2:05:a7:47:a7:
a3:49:10:ac:50:ea:a0:d8:37:f6:95:39:18:03:a5:
c0:0a:ca:45:1c:87:4f:8f:ee:8b:b6:24:21:8f:02:
53:e1:5f:c5:9f:25:e1:3d:e9:d7:36:de:ad:b8:ad:
98:9b:8d:d6:84:23:f3:dc:3a:b3:e1:32:fc:0e:69:
81:1e:6d:0a:d4:55:60:73:3d:d7:92:d2:99:f5:96:
e8:f6:f9:7e:eb:36:46:2b:0f:29:c3:ad:22:82:74:
55:42:0c:ae:ad:96:b0:fa:4c:a5:b2:dd:66:f9:b7:
d2:13:56:69:a6:70:e0:f3:46:eb:1a:ff:f2:0a:93:
52:54:e8:2f:19:54:6c:9a:33:79:fa:2b:3c:0d:8e:
39:84:c6:37:94:1c:b7:4b:9e:8c:0a:0d:8b:e3:e8:
e2:f7:b7:56:ff:3e:a6:04:66:e6:ab:a9:07:7a:38:
cd:23:17:26:08:62:ee:69:b5:c7:78:66:98:6c:7e:
7f:75:95:cf:24:7c:b2:28:64:37:87:fb:03:ff:aa:
ad:da:2c:07:88:60:07:df:1b:22:2f:be:58:5f:01:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0D:4F:54:6A:9E:BC:6D:48:BB:93:5D:FC:0B:A2:FD:8E:56:0A:AD
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:20:40:96:c8:9e:7a:c7:7f:80:51:bc:ff:2c:81:3e:8b:
af:08:e7:ae:fc:25:e2:2a:84:91:78:c6:f1:25:07:5b:28:e0:
6a:70:39:54:97:0c:a7:13:ff:e5:97:f6:26:71:58:b0:75:ef:
e6:ac:86:a0:13:10:54:0a:02:eb:db:ae:f4:e1:2b:d4:ed:cb:
7b:ae:1f:8b:30:99:b5:22:88:ff:4e:d5:a7:9a:e0:a2:fa:60:
29:1b:be:2d:1b:da:29:db:43:94:1c:44:6a:32:27:59:a2:ef:
40:5b:fd:70:ee:88:d5:38:c7:cc:08:04:53:45:26:ed:13:c2:
85:76:f0:3c:01:4c:7c:7a:e9:60:01:ed:81:7f:92:66:6d:d9:
4f:49:6e:3e:6c:30:68:66:de:1e:94:31:30:1f:1d:a1:1c:a9:
c6:c7:48:25:4b:f2:e2:fd:f7:64:93:ae:ea:ed:68:f6:8d:44:
08:ec:43:fc:9b:10:35:7d:26:92:71:69:44:12:85:46:ce:d0:
a5:80:52:86:13:6c:3f:7c:29:b8:99:f3:7f:8a:b2:df:74:d9:
00:f8:70:a9:19:35:d7:2e:25:f2:ac:cc:a5:b9:e8:53:98:73:
bb:a8:03:d4:d9:68:9a:cd:ab:96:a0:11:f4:0e:d8:03:2f:1a:
bd:06:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:04:07 2026 by rpki-client