Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: ylXMHtW/85RkWBuZBtqEW9josJ2lrVgI9aO64N+/nnw=
Subject key identifier: 9C:08:D3:EE:2E:1F:2B:56:DA:F4:3A:57:EE:44:10:EC:53:A4:83:45
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019D36E4B0542E8FF8B08565C712D247289E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 00:00:50 +0000
Manifest this update: Sun 29 Mar 2026 00:00:50 +0000
Manifest next update: Mon 30 Mar 2026 00:00:50 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: DdqG15B+BMIzBX2g1E7rlqqPyAPIJvgdS1TRJSkKez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:b0:54:2e:8f:f8:b0:85:65:c7:12:d2:47:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Mar 29 00:00:50 2026 GMT
Not After : Mar 30 00:00:50 2026 GMT
Subject: CN=9c08d3ee2e1f2b56daf43a57ee4410ec53a48345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:05:6d:56:2e:40:73:4b:60:f8:34:d1:a1:dc:
a2:eb:a9:10:69:20:8f:9d:41:e1:bd:1f:1e:cc:3b:
08:84:dd:61:e0:65:c1:a1:59:f4:6c:d8:d5:3e:86:
02:aa:79:53:1e:1a:a0:7e:8d:10:62:8e:15:1c:f3:
14:35:81:ad:15:8c:b8:11:87:0b:0f:02:7f:ee:11:
98:f9:ec:7b:1f:b0:e8:a8:70:56:58:a6:c4:f3:2e:
fa:ab:4c:cf:bc:9a:46:3f:83:cd:63:e9:ca:97:b6:
31:8d:fb:0f:d5:0d:de:fa:ad:88:28:71:bf:ad:56:
79:41:67:12:56:24:ca:fb:c4:db:6b:f1:c4:bc:6e:
eb:b7:88:96:4f:21:cf:f8:dc:50:f8:42:79:40:3f:
cf:b3:4c:e5:95:ff:d1:78:89:63:da:19:c6:ea:40:
37:ba:ed:51:54:00:37:e4:5e:8f:2a:38:9a:90:de:
f5:69:1a:b3:78:7f:7b:05:90:1c:42:93:fd:c2:8f:
a0:54:3a:0a:6b:78:3b:6c:56:6b:71:88:a2:24:6a:
8f:26:18:de:2c:01:b3:b7:2c:98:ee:5f:17:f7:8c:
a2:22:32:91:30:ac:5e:12:86:0a:22:00:70:ec:a9:
0d:47:68:4d:4d:f9:17:d2:22:92:7d:3f:10:8a:f5:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:D3:EE:2E:1F:2B:56:DA:F4:3A:57:EE:44:10:EC:53:A4:83:45
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:99:e6:b9:e7:c0:09:69:00:12:9b:b2:b1:8c:0b:04:11:
6b:f9:23:c3:68:ba:86:2b:82:01:4a:ed:c5:7c:7c:09:78:2d:
ef:8a:a2:08:44:58:83:59:1c:f8:87:48:e1:71:cd:c1:27:0f:
ce:54:c1:56:1f:2f:36:49:98:7e:3a:b6:93:ea:ac:b5:fb:8d:
e5:c1:49:83:23:b8:0d:66:b8:4a:08:82:ea:0b:e2:7a:03:ec:
67:7d:04:41:15:eb:28:f9:e3:42:c4:1c:57:c1:af:65:b2:74:
89:9c:23:b2:7f:1d:6c:ce:76:32:60:bf:f7:08:08:66:fd:0a:
29:df:e2:c8:9f:ad:f9:56:99:28:8b:2a:7e:a6:ba:39:56:d2:
04:35:30:4f:35:02:56:34:77:b1:40:c2:f2:43:03:bf:00:77:
74:22:86:9f:d4:db:7e:01:a6:c4:8a:9b:90:ea:aa:dc:15:3b:
ca:0a:ad:c9:e3:ec:b7:b7:35:c8:c6:de:d0:68:4b:69:17:e0:
9e:ed:a1:68:e1:c2:3f:2f:2c:2c:8e:31:6f:56:c2:28:d0:da:
56:05:2e:84:0b:20:b5:cc:f5:d8:fb:9b:47:79:9e:23:5b:ee:
b8:d6:de:62:b2:3f:81:e7:de:b7:58:3f:b5:56:99:e8:18:d6:
86:fc:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:10 2026 by rpki-client