Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: Atk8bULvzUdEzzhyC9g+D/QaoH2cM0kzQpMqiWr0ugY=
Subject key identifier: AE:65:3D:F2:32:9E:D9:B2:89:D6:9B:A4:02:9E:B1:68:AB:E3:02:79
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 019D3865DDE6D4D0D49EA0528D1AEB68E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 12A4
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: Fe56eCFw9GNdxYoh0CxUHKswnjM.roa (hash: FzvgcuW9uxmiyyUobhc0pF//vMfe4DZUVNz9/YMPy14=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: 24/7Lx+2GhKDd530PusG6n/DhneEZCXmMbqaACH9ok4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:dd:e6:d4:d0:d4:9e:a0:52:8d:1a:eb:68:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=ae653df2329ed9b289d69ba4029eb168abe30279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:3f:f0:de:4e:a6:e7:cd:f0:77:5a:32:52:
1f:88:34:5f:1b:01:87:9b:a0:28:5d:7e:c3:22:1f:
30:7c:b9:33:73:82:ec:ce:d8:72:8d:00:be:53:99:
36:8f:00:60:0d:6b:c1:0b:75:d4:4b:a2:c9:38:0b:
99:ff:f9:5d:d5:77:bd:63:30:1e:74:aa:60:7c:b0:
a9:53:ec:64:bf:3e:21:a2:70:ff:12:81:1a:30:e6:
e6:91:21:fe:2b:0f:3a:68:5f:15:9b:16:b3:9b:60:
99:f0:ec:4a:d0:44:76:92:d3:d3:60:2c:ac:7c:41:
5b:f8:db:18:82:3c:da:35:50:f4:64:64:00:06:0f:
f0:04:b4:0c:41:d4:5e:43:f4:e8:95:e3:21:ab:6c:
bf:e7:84:c9:e4:e4:7b:57:27:ca:14:4b:b4:6e:27:
17:60:02:33:df:5a:48:77:f6:29:08:5b:59:fe:c2:
e0:14:f1:38:07:84:32:c4:40:61:e5:ce:2b:bb:1e:
55:c2:f3:27:e7:77:c4:1f:b8:ef:1e:38:cf:72:b9:
55:26:93:92:e5:cf:47:31:53:4b:50:7f:28:c0:99:
3f:4a:97:3d:ad:56:77:02:3e:e5:68:87:4c:27:f6:
5b:8c:b7:50:23:df:c7:fc:a7:14:fd:70:6c:55:5d:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:3D:F2:32:9E:D9:B2:89:D6:9B:A4:02:9E:B1:68:AB:E3:02:79
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fe:d1:49:71:45:c5:67:ed:c9:fb:f7:d0:19:30:92:16:94:
03:ee:19:4e:fb:aa:ed:cd:a4:5e:80:0d:f5:63:c6:6b:1c:c2:
06:f7:e7:89:ac:d3:20:0a:b6:e6:31:a9:df:49:47:c2:49:1b:
b9:38:88:28:18:7a:6b:d3:b5:d2:98:34:f5:1f:c8:a9:c4:c7:
20:c0:e4:8f:66:cf:7d:4d:d3:f2:87:b2:60:d0:66:26:f3:f4:
25:8b:94:a6:d4:2a:eb:ef:e5:e9:98:e0:d3:0f:ba:2f:fb:8e:
40:7b:6c:93:29:c7:69:51:7a:0d:b9:f6:31:71:8a:01:14:1a:
21:e0:9f:b7:dd:07:29:2f:88:ac:0a:24:ed:6f:cc:e4:72:5e:
eb:28:ef:15:ca:45:1d:92:5f:e3:9a:4e:0e:46:01:b2:fb:9a:
5b:c8:65:84:37:91:fa:27:f8:2c:86:37:8a:1c:c7:36:13:81:
e0:91:3d:6e:c8:e5:69:4d:6c:24:24:c2:4c:02:8b:d5:24:62:
09:f3:74:12:7c:43:a5:a5:27:cb:16:83:18:94:43:e1:9d:01:
3d:33:4c:68:c7:6e:f0:1a:b5:56:6c:8a:46:c1:be:cd:c3:74:
ed:6d:9c:8f:07:84:0d:d3:93:96:2a:19:20:f4:45:11:d3:90:
a5:5b:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:40 2026 by rpki-client