Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: BuA6v3Qz4eqtCMejdqDfCqtiUSQv9F4o6IjMzMYHTPo=
Subject key identifier: D5:2E:4D:B8:90:AB:3A:34:F9:4D:12:F8:81:CB:D9:65:5A:27:B1:C9
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 019FA184315BBC6F79609C13847CF4D1AC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0FBC
Signing time: Mon 27 Jul 2026 03:00:22 +0000
Manifest this update: Mon 27 Jul 2026 03:00:22 +0000
Manifest next update: Tue 28 Jul 2026 03:00:22 +0000
Files and hashes: 1: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: xHXCn4ior54wBQUY8b2x5MRCJeK9Gk6QITTjt5vYDUc=)
2: uWpjW8EwvAg8xDTN_thfrhA4LAw.roa (hash: ymWyRdJuJht5zV2QVlIv93b0gP0KmipQqoXtKDEDweQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:31:5b:bc:6f:79:60:9c:13:84:7c:f4:d1:ac:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jul 27 03:00:22 2026 GMT
Not After : Jul 28 03:00:22 2026 GMT
Subject: CN=d52e4db890ab3a34f94d12f881cbd9655a27b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:aa:fd:80:37:8b:72:fb:1b:36:8b:53:12:
7e:82:6e:18:80:27:9c:72:7c:f8:06:46:fb:e4:aa:
45:13:02:f0:06:62:8b:4d:94:8f:14:a3:a7:b5:cf:
e2:ae:aa:01:6c:30:56:d0:06:32:19:c8:58:48:9d:
e8:58:4c:c8:d6:60:11:a5:c7:05:aa:b8:c5:59:44:
9c:29:74:64:b6:76:14:8a:e1:5b:08:37:08:55:92:
6d:8e:f7:14:c6:4c:e0:ac:34:d8:6f:59:74:b1:2d:
0e:1b:e6:0f:5a:8a:22:04:6d:22:34:cb:a3:52:54:
58:c1:a0:85:1f:97:a2:f1:90:58:0f:b8:f8:78:90:
45:d6:8c:4f:31:c5:5f:28:13:3b:2b:4e:83:7d:d9:
88:af:5d:6f:22:38:b9:3f:75:ec:c0:0e:6f:a1:31:
a9:cf:72:73:4c:32:9e:da:0c:eb:95:31:b5:5e:af:
07:d7:7c:97:20:22:ac:9e:76:88:44:76:c1:b8:e5:
67:14:8a:79:f3:a7:8f:52:59:94:a2:c7:32:0b:20:
91:39:7c:1a:9d:0b:58:dc:fa:eb:2d:79:59:46:76:
b8:55:e7:6c:7a:a1:b6:47:b5:7a:08:fc:6d:ae:70:
bf:f9:74:81:bd:be:de:ad:d9:a3:d0:c4:19:2d:55:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:4D:B8:90:AB:3A:34:F9:4D:12:F8:81:CB:D9:65:5A:27:B1:C9
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:35:b7:cd:13:b9:95:f4:fd:42:90:3c:76:d0:71:3f:c5:
ed:61:e6:8f:20:65:45:21:e7:33:7d:be:31:27:6c:78:d3:c0:
71:6d:8d:2d:53:d0:f3:13:be:a3:8f:8b:57:f3:17:2a:4c:72:
1c:8c:b2:17:1d:46:29:4d:c4:12:e9:44:d7:67:df:c4:df:53:
37:03:89:8f:73:7d:32:c4:01:d4:4c:5d:01:84:27:15:1d:0d:
dd:22:72:6a:a6:3a:51:ab:d8:fe:03:40:4d:6e:ef:4d:52:28:
a5:ab:f4:11:75:79:40:01:e4:60:46:af:88:b6:cf:6b:e1:f4:
b0:99:06:7a:75:6a:3f:3a:33:7a:13:ae:45:5c:75:65:15:85:
9e:72:90:7b:de:81:24:4d:43:8c:09:0b:19:42:57:71:47:62:
e6:29:e8:26:08:44:63:8f:a4:a2:28:e7:69:d1:18:e0:a6:65:
34:1c:c5:c5:fb:99:fe:eb:7a:32:3f:eb:e9:bf:b7:e8:64:6f:
d5:47:2e:0f:74:f2:3b:39:16:3f:cf:41:a3:d8:90:08:9d:ba:
cb:f4:b1:ba:2e:2f:87:6c:c1:b7:46:e1:45:33:a0:c8:ca:98:
f5:63:39:70:68:d0:3c:76:bc:16:f8:59:c0:ea:fb:5d:fd:f3:
9e:a6:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:09 2026 by rpki-client