Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: X6TT+ADcRhDX6yxcWF3iWqWkEmazROYGRe6q3EkY1i8=
Subject key identifier: A5:17:C4:29:F5:1C:84:E2:85:3F:5D:CC:70:A7:96:C0:6A:70:3A:C7
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019D3752DC8B615A3D0160B615BCE42F32D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: BcdnvgFk_BPjfJay48B0cMIpc0w.roa (hash: XfisUF3xoeDRYkIvVZku+7kk1qU1c+uuDUdRONEZgfE=)
2: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: MeeM5/E6WB+Fwyv987FfITakuSVUYFICnfmFJyfm5QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dc:8b:61:5a:3d:01:60:b6:15:bc:e4:2f:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=a517c429f51c84e2853f5dcc70a796c06a703ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:3d:28:02:33:e8:9f:05:c8:d7:6f:e9:20:
ed:42:54:57:ec:38:57:9c:4a:9f:52:83:9c:ed:af:
ce:d5:fb:3a:c7:23:c5:29:c4:a1:d6:11:bf:0b:b4:
8f:36:e2:33:86:9a:b9:4d:80:35:e5:14:58:b8:20:
15:d1:3b:2a:36:26:d0:7a:4c:bc:c0:bb:de:05:ef:
a1:d4:2a:72:33:c1:70:9c:13:fe:4b:20:ec:a3:07:
13:c3:73:dc:94:75:57:18:fa:c8:e5:85:77:33:23:
b6:83:7c:e5:e4:43:98:03:45:66:59:aa:9f:41:06:
7f:55:5f:94:3d:1e:71:6c:31:66:30:33:63:95:45:
c7:71:ff:81:a1:e4:f4:f9:e6:07:80:28:60:b8:65:
36:ec:fb:46:25:de:8d:87:23:66:25:07:68:44:47:
94:08:45:3a:8f:d0:02:4a:eb:45:ef:b4:a5:01:37:
c8:f1:a2:25:83:69:d8:e7:db:67:66:66:1c:1f:04:
02:83:fa:e0:02:f0:79:4d:b3:6e:ab:a7:ab:97:ab:
61:cf:58:14:dc:3b:fe:ef:5c:5c:0b:8b:04:93:e8:
55:c5:c6:c5:80:ad:5d:53:6b:41:71:f3:13:b8:77:
1d:41:0c:e6:66:67:bd:fb:d2:e1:53:99:65:9b:1e:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:C4:29:F5:1C:84:E2:85:3F:5D:CC:70:A7:96:C0:6A:70:3A:C7
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:28:2a:7f:ed:92:3e:b4:67:34:db:53:c8:76:c6:97:5d:
f6:df:7a:01:03:6f:c3:f3:73:1c:39:13:02:9c:c0:4b:e6:a7:
05:1f:b3:5d:f4:73:88:c2:3c:5c:de:1e:ce:9d:03:ec:f4:db:
63:86:b3:93:fc:8d:21:17:c0:78:86:a3:c1:2a:4c:55:13:f4:
77:dd:94:5b:77:c9:11:4f:8c:6e:9a:3c:80:89:30:5d:e2:50:
f0:03:4a:2d:0c:a8:a7:54:f9:22:7e:27:9d:5c:87:7c:b0:a9:
bd:a9:38:33:75:09:d1:03:c8:8b:e1:6e:66:ef:df:1e:a5:e7:
c3:a1:3d:f7:f1:27:89:b4:98:27:6f:ac:bd:3a:ea:38:8e:4a:
55:ea:5b:18:71:e3:a4:cf:d9:03:e2:0b:b5:74:bb:43:ad:8f:
da:15:50:a4:4f:c7:4a:00:1e:2b:b8:8e:f5:8c:25:b7:4c:2d:
98:84:9e:24:8f:cc:68:b2:5b:63:be:63:f5:e2:40:5c:14:e9:
f7:f7:c2:21:fe:a5:3c:e6:73:4e:e9:f8:e1:0e:df:70:8f:70:
c6:91:13:b3:6b:5f:86:b1:9d:54:da:3f:d0:9a:ef:7e:14:08:
39:9f:ff:b9:30:02:25:03:0b:09:cb:7e:e3:c6:b5:27:a6:e7:
cc:9f:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:40 2026 by rpki-client