Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier: r5fPmBGC8jBk2/+FHwi3E4BYz3LQi9x8AIatD1YXiuk=
Subject key identifier: 8F:C5:E3:AD:5C:96:44:E4:DD:8A:B3:CA:D3:BA:01:B4:60:1B:3B:C3
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial: 019D386656AE8B90533490B5336C7D2087B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number: 14FB
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: ldx2Ii4fJaCIrYBjPfdMnPbA6z8uL3l+68OFcPend5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:56:ae:8b:90:53:34:90:b5:33:6c:7d:20:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=8fc5e3ad5c9644e4dd8ab3cad3ba01b4601b3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:f7:5c:98:03:d3:0e:df:02:45:cc:1b:13:
5a:10:de:cb:e9:5f:0b:69:b0:96:e8:b3:c5:c9:df:
79:b4:74:c1:1f:3b:3a:a2:23:9a:8b:2c:22:f2:8d:
39:e9:90:58:82:75:32:a5:e9:26:b8:86:a5:99:f4:
05:73:dc:9b:06:69:dc:17:45:fa:f9:5f:43:03:97:
01:be:2c:d1:05:67:9c:7a:08:5e:75:79:ca:5b:d2:
6d:0d:c3:4c:3d:62:d3:7b:a9:eb:4a:7c:ad:2a:9a:
5e:67:f1:1f:30:52:e7:be:b8:1b:ac:9c:88:33:10:
70:00:c9:39:28:d0:a9:53:0b:22:92:6f:05:b1:ee:
ba:b7:08:fd:1d:82:d0:ff:88:d1:bd:df:37:66:26:
dc:19:04:db:84:ec:42:af:d5:5d:c2:22:30:89:4b:
be:1f:f1:a8:00:75:87:a3:91:20:2c:f6:73:6c:97:
fd:fb:78:f3:cd:06:98:e5:8d:a2:fb:56:4e:35:1c:
f5:7c:35:af:51:41:f6:1c:fd:27:ea:12:db:6c:de:
5e:eb:cb:58:81:8f:44:78:e3:92:aa:a8:67:f2:17:
f1:a2:71:42:33:13:60:a2:76:6b:1f:75:70:b5:5f:
f9:49:52:1e:70:29:4a:a9:6b:18:6c:e6:5a:2c:14:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:E3:AD:5C:96:44:E4:DD:8A:B3:CA:D3:BA:01:B4:60:1B:3B:C3
X509v3 Authority Key Identifier:
keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:dd:d2:fc:65:ca:b2:07:1d:98:de:20:66:72:f9:d1:6c:
bf:45:cd:0e:87:bf:86:d3:25:c8:4e:f5:c5:bc:ae:5f:96:c1:
87:48:63:f9:d0:9c:fc:38:8c:13:28:1e:57:b9:86:20:ad:91:
2c:20:dd:b7:a9:75:0d:90:8d:fa:1a:1a:1e:13:c8:d2:78:b1:
1e:85:68:f5:62:cd:1b:ab:29:ad:ce:b4:e0:57:b1:fe:74:e2:
b7:5c:8a:f1:0a:db:b5:c2:19:be:f8:a4:88:e4:ab:86:dd:b4:
69:f3:98:88:eb:48:d3:7e:5b:9b:5c:33:41:7d:f7:7c:f6:0e:
f9:90:43:bf:d4:90:35:61:ec:0f:0e:5f:ec:16:59:02:f1:72:
44:1d:c5:1f:af:f6:e8:0a:84:49:8f:10:80:6e:63:87:17:39:
ec:56:88:d9:25:28:4d:2f:80:4b:2e:3e:c7:de:45:3f:9b:29:
e9:03:f0:d6:31:b5:f7:26:6a:fe:f3:5c:5d:63:8f:78:42:c9:
1b:60:45:d2:b2:82:32:3a:ad:9c:59:59:ea:c5:b4:7b:b6:3b:
8f:a1:15:82:4e:54:85:51:46:6a:7a:a3:26:c4:ce:ae:6b:24:
c6:23:52:f1:9b:8f:dd:3b:5f:0d:06:e0:e1:88:81:4c:5e:4d:
7d:a5:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:31 2026 by rpki-client