Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
File: L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft (raw, json)
Hash identifier: WEsTyjD3oJUnDnKfZXgkGTEM8gn6t/mtZds4K5vlkHI=
Subject key identifier: 40:92:E9:CD:BC:3B:0D:64:B1:61:80:1C:DF:90:B7:30:C6:8C:C6:D7
Authority key identifier: 2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
Certificate issuer: /CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Certificate serial: 019FA2299006A0BBD1950F10FB0966AE7CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
Manifest number: 0F
Signing time: Mon 27 Jul 2026 06:01:00 +0000
Manifest this update: Mon 27 Jul 2026 06:01:00 +0000
Manifest next update: Tue 28 Jul 2026 06:01:00 +0000
Files and hashes: 1: L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl (hash: mhxNUXq9oHWb9v+hysvYuPzL7a9Waf6vKM+bQtluBkk=)
2: XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa (hash: BUCSZEjdFaY1WzA8rUkzwkz2gqTUrzX9Z/dRqbYJ/Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:90:06:a0:bb:d1:95:0f:10:fb:09:66:ae:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Validity
Not Before: Jul 27 06:01:00 2026 GMT
Not After : Jul 28 06:01:00 2026 GMT
Subject: CN=4092e9cdbc3b0d64b161801cdf90b730c68cc6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:a9:ea:1d:93:08:4a:aa:76:c4:6a:7c:32:
10:9f:f1:17:be:6e:d8:8a:a9:0d:11:08:c8:06:ba:
ae:a0:e6:93:7b:49:ee:9d:d3:8a:5e:4b:39:57:c0:
70:97:a2:c8:ca:52:21:a0:9c:12:33:52:19:08:d9:
00:29:a0:a0:d5:64:cc:f7:d0:41:a1:e9:ca:4e:8a:
58:20:22:e3:9e:49:c5:6d:ce:04:fb:14:27:fe:da:
07:4f:1f:7e:2b:6f:6b:2f:30:4b:9d:2b:1d:18:7a:
d3:c9:f2:24:64:7f:5e:ba:ee:a4:9d:8e:4c:ab:0d:
40:c3:7d:cf:d6:ad:81:b3:c3:02:11:80:9f:c1:46:
d4:34:a4:03:df:02:7b:33:94:4e:1f:73:a7:26:02:
53:da:61:8a:5d:b9:5d:0b:f6:b6:da:05:80:fa:b9:
e1:c1:fe:db:0b:19:86:d4:6a:92:7a:b3:41:2f:a4:
20:4c:6b:fa:d6:7a:6f:cf:06:b4:4a:c1:19:80:95:
cf:8a:b2:1b:54:1d:ee:c0:d5:6e:67:14:52:80:7d:
5c:8d:07:03:3a:7c:1d:b2:e6:df:c6:bc:95:d4:f6:
e4:75:64:64:a4:69:d3:a6:6b:d2:a4:c5:f9:3e:43:
8e:6e:ec:f3:1d:d9:ef:03:21:c4:ed:ba:ba:dc:c8:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:E9:CD:BC:3B:0D:64:B1:61:80:1C:DF:90:B7:30:C6:8C:C6:D7
X509v3 Authority Key Identifier:
keyid:2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:eb:0f:84:67:43:e4:0d:29:ea:4f:2f:dd:84:06:09:e2:
b5:82:ba:ef:e1:d8:7c:30:3e:d9:b4:36:68:c7:fd:49:5b:10:
d0:9a:0b:a4:5b:94:84:47:94:46:86:99:87:9f:8f:98:bb:92:
0a:39:88:e5:2d:dc:71:0b:13:a5:e4:67:a7:c7:53:58:6e:9c:
72:e9:ca:58:66:92:15:fc:3f:cb:39:be:56:ee:5e:d0:74:b0:
94:e3:58:e2:8a:70:63:06:54:e7:78:85:3a:46:e8:05:00:a5:
f1:8b:db:42:9c:f7:6a:46:3a:71:e6:52:21:fb:7e:0e:c1:18:
f3:c7:4b:8e:1a:f9:cc:20:e1:fc:7f:c4:c5:da:35:8f:cf:22:
65:3a:4c:d1:6a:84:a9:f3:8a:ca:26:0d:8a:dd:78:3d:5c:de:
53:18:57:66:5a:b5:77:d6:9e:d0:2d:c2:41:f3:03:9c:bb:3c:
8d:ac:6d:48:30:d9:a4:d4:24:33:dc:97:42:39:74:b6:c8:8e:
eb:e6:24:27:c4:05:63:ee:dc:01:c3:c9:d0:5e:10:61:15:58:
6a:bc:65:4b:d7:78:1e:63:53:10:43:55:a2:41:41:80:e0:43:
ed:57:1e:c8:2f:70:50:b2:eb:f3:14:65:80:5a:ba:59:d4:4c:
01:50:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:24:24 2026 by rpki-client