Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: KBTd80iTf54aNf/8YiRCOxhMvuBqcp+ue049KanoUrM=
Subject key identifier: B5:3B:4D:02:77:93:1F:38:10:3F:45:D6:7B:9E:B4:C5:28:AB:C7:FA
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019D371BD5A5892596790B9D598669FA5782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 01:01:04 +0000
Manifest this update: Sun 29 Mar 2026 01:01:04 +0000
Manifest next update: Mon 30 Mar 2026 01:01:04 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: nQX7ZGPm6AjsI/N1pig1oQe8lh3z7D4W+LigTXbcBcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d5:a5:89:25:96:79:0b:9d:59:86:69:fa:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Mar 29 01:01:04 2026 GMT
Not After : Mar 30 01:01:04 2026 GMT
Subject: CN=b53b4d0277931f38103f45d67b9eb4c528abc7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:1d:bc:bc:e5:4b:ad:72:e3:bd:66:49:e9:
ee:3c:c4:f5:37:89:bc:80:e6:c7:d3:6b:3b:b2:00:
f0:10:3e:4f:37:ec:d2:e6:0a:49:cd:54:65:d1:13:
fd:3f:09:b7:ea:f9:ea:16:aa:a4:5a:db:e4:ef:3c:
0d:73:fc:7e:3d:f8:5c:0e:cc:c9:2d:1b:3b:70:8a:
bc:93:a8:b0:7b:ea:52:c8:8e:65:f8:73:e1:39:46:
09:47:f7:dc:aa:3b:a3:63:f9:5a:1e:04:3b:b0:50:
98:a6:ef:71:34:36:88:e1:44:d0:73:e8:20:17:17:
74:80:94:8a:5e:df:59:4b:2e:8f:24:91:fd:6d:b3:
2a:06:1c:1a:25:db:c1:92:da:5b:17:cb:5c:7f:d0:
6f:7b:1e:7d:3d:21:8f:a6:dc:57:ce:d8:b2:a2:68:
d1:0d:6d:b1:eb:c6:85:60:96:a0:51:dc:13:bf:32:
41:b3:00:57:9f:ac:94:9d:fb:83:08:c9:7e:9f:a4:
f2:e8:f2:ff:b4:19:f1:f3:ce:a6:d7:4c:f5:d6:9d:
be:76:61:4f:4e:54:0c:f1:39:2d:32:b0:36:6c:5d:
d1:61:87:59:73:1e:47:d1:cd:d4:75:b8:cd:51:68:
f6:77:b3:31:a7:ed:55:56:71:29:97:f3:71:29:61:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:4D:02:77:93:1F:38:10:3F:45:D6:7B:9E:B4:C5:28:AB:C7:FA
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:5c:9a:2c:1b:ac:01:78:4c:ce:5a:fa:a2:76:5d:38:10:
67:02:b0:55:51:dd:c2:b3:dd:a7:ec:62:71:cc:6c:bf:3b:d1:
6d:f8:19:65:f7:c1:88:74:88:b4:a1:fb:4d:06:7a:c6:ac:e4:
11:87:e5:81:0f:6e:06:4a:87:c1:2c:d7:8e:e3:18:5b:a9:aa:
93:8f:59:2c:3c:fd:9e:e4:89:74:63:a1:07:cb:b5:96:a7:75:
58:d4:80:a1:97:c6:b9:da:a1:f4:f0:1a:74:76:2a:47:e7:aa:
71:cd:ef:bd:31:28:03:a0:cb:28:9b:1a:52:aa:63:01:75:09:
60:7d:b7:99:5c:10:8e:7e:60:56:3c:75:a0:af:82:1f:47:4d:
58:4b:01:91:03:74:c1:1b:e7:4b:d9:a3:4f:8b:05:b5:34:07:
e8:54:e5:51:a6:db:4c:ec:57:b3:3f:e0:03:b7:6d:89:26:4f:
90:ff:d1:50:eb:df:c1:7b:f4:d9:fa:49:6b:8e:d4:24:6c:bc:
6d:4e:c7:a6:aa:e0:af:db:98:5d:9b:e3:82:85:16:df:fb:38:
b2:d8:85:77:d9:b2:93:b7:ab:92:c4:95:96:5a:eb:e9:0e:fb:
48:61:ec:88:7c:7a:9f:dc:c6:68:81:ef:e1:00:c2:4e:b6:ed:
f6:b7:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client