Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: tvJELl6rYzb85/4zsnGhFnXvGunD6B8MQ+oNuRVPu+A=
Subject key identifier: 3C:2E:3A:60:D1:07:C1:45:F4:AA:78:EF:24:87:E4:AF:25:28:10:DE
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 019EF94AAE15C98F5278BA14B2C3E4D46205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1977
Signing time: Wed 24 Jun 2026 11:01:21 +0000
Manifest this update: Wed 24 Jun 2026 11:01:21 +0000
Manifest next update: Thu 25 Jun 2026 11:01:21 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: WHLSPAZ1ZPqw+v7IWdMX9fEIR9vvbnCvzUe0ao03x2o=)
2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4a:ae:15:c9:8f:52:78:ba:14:b2:c3:e4:d4:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Jun 24 11:01:21 2026 GMT
Not After : Jun 25 11:01:21 2026 GMT
Subject: CN=3c2e3a60d107c145f4aa78ef2487e4af252810de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:65:e8:4e:78:58:72:c3:10:49:d1:40:1b:
ee:97:b6:c8:83:68:5a:36:05:7f:5f:60:dc:84:40:
a0:78:10:4f:17:12:35:02:3c:74:a1:3d:64:9b:c6:
12:3a:8d:ec:78:be:20:d9:ac:ad:d0:23:c1:da:4f:
75:83:e2:26:b7:d0:3a:9d:24:c5:aa:60:76:58:2d:
8a:8e:2a:5a:68:e0:7a:d7:f9:e0:8e:64:62:6b:29:
eb:bf:07:8b:d9:b9:24:36:31:b2:69:a7:b1:34:d6:
22:3f:09:08:21:01:91:03:a3:2e:e9:1d:e3:84:8d:
37:d6:53:2d:6b:79:23:f1:24:6f:0c:54:9f:a7:d6:
e4:20:c2:df:58:a7:4b:49:fb:bb:b9:95:88:da:d2:
d0:ee:cb:ff:12:ea:c9:87:20:b0:56:88:eb:c9:0e:
77:5f:63:2c:79:1c:21:0a:17:f0:ed:15:db:8f:cd:
cd:87:d5:d5:30:a0:6a:f4:c9:7d:32:5c:11:f6:f9:
23:48:63:6a:f8:b2:bf:b2:e3:7b:63:56:79:bd:c2:
bf:36:b8:c8:35:67:7f:50:50:b1:e1:7f:12:5d:b4:
c6:90:c0:21:f0:ed:46:98:11:53:c4:c0:07:cb:81:
57:cf:8e:c6:32:09:a9:ef:9c:0c:66:fd:d1:90:e2:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2E:3A:60:D1:07:C1:45:F4:AA:78:EF:24:87:E4:AF:25:28:10:DE
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:bb:4f:aa:19:d5:37:c6:0e:48:c0:48:60:50:c7:8d:e6:
3c:a0:f3:77:b4:75:54:95:70:64:97:78:72:1a:e2:fc:f6:d8:
7f:46:be:66:74:3e:48:89:d6:d5:54:1c:71:d9:e0:34:6e:e4:
a4:8b:e3:84:7a:da:01:5b:21:23:5e:c3:25:aa:39:1c:f5:ab:
52:a2:12:07:69:f9:c4:80:d7:0f:18:e6:00:32:77:bf:bf:77:
2c:53:2e:ef:2c:48:84:a5:4b:6b:1a:a5:a5:57:b1:0d:df:f9:
1c:b7:4e:37:a2:ec:b7:73:ca:b2:ae:4e:15:48:21:bd:45:83:
e1:5f:7e:5e:fd:c7:39:e6:2c:8d:5e:8a:6f:13:71:14:d3:8f:
8f:09:65:21:35:63:e0:08:3c:33:dd:93:89:13:e5:f3:6c:3e:
0f:25:43:38:7f:65:1f:e1:95:a9:be:3f:fe:92:15:e6:58:33:
0f:a8:47:6a:39:af:20:42:e9:c3:25:25:d5:f4:0b:cd:34:6f:
14:92:77:61:08:1c:d3:2a:a1:44:58:33:05:cf:d8:85:d4:cb:
9d:c3:0c:a2:b5:7a:52:26:34:83:ba:47:ed:42:16:97:b9:80:
a5:03:65:57:5d:61:24:b5:de:e5:48:ec:d9:79:6c:8c:e6:d5:
70:9a:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 13:19:11 2026 by rpki-client