Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: AXoHbmSO67EauZYsGyFehc8n74y7cWI4Kd8PCX9ymEA=
Subject key identifier: DE:E1:8C:A5:32:22:B4:A4:70:48:35:AD:1E:EC:22:A2:D2:EA:34:29
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019D3865FADF12C10F99A10043FE99FB4659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0AD8
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: hRRyLOV+H0p21rEhNB/5cj2Hwn2884RKtbxlryxjbq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fa:df:12:c1:0f:99:a1:00:43:fe:99:fb:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=dee18ca53222b4a4704835ad1eec22a2d2ea3429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:6a:86:d3:e8:28:b3:1f:76:57:c3:9f:b3:
60:b0:81:e0:b5:e4:cd:00:0f:de:cc:03:24:e9:23:
44:6b:96:66:fa:28:f4:14:cb:6a:2a:d2:b8:85:aa:
df:1c:f5:fb:ee:24:e7:67:b6:c1:18:45:bb:6c:33:
21:7b:92:2e:d9:af:85:1b:51:ae:90:17:23:05:ad:
ec:54:1f:93:e8:52:fa:08:94:a9:5b:c3:7f:dd:5d:
f0:75:4b:df:0a:a2:61:38:af:40:6d:5a:76:14:18:
99:af:9a:d6:fd:3c:46:d5:43:23:6c:a3:0c:75:76:
7a:4e:f0:06:34:f7:d8:ad:a2:63:95:ce:34:67:da:
4e:69:38:3d:30:24:ee:c2:00:ec:ba:a2:b6:cc:33:
bc:48:d8:be:e6:c1:28:03:36:46:71:67:bf:d3:3f:
74:21:84:75:af:11:7a:00:de:87:96:8d:aa:72:60:
29:a3:11:5e:9b:00:a2:08:98:8b:1a:20:f6:81:a8:
21:96:4d:d9:f7:4d:3e:bc:ee:f5:75:b0:48:45:82:
61:81:51:7a:04:4c:fa:25:2d:96:e5:5c:e6:55:2a:
7b:a7:05:0e:1e:7a:09:a3:b1:41:62:66:cc:53:23:
11:cd:93:1e:d5:ef:4e:99:33:ca:82:84:b9:36:07:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:8C:A5:32:22:B4:A4:70:48:35:AD:1E:EC:22:A2:D2:EA:34:29
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f5:12:64:68:d9:9a:09:98:f6:ff:fb:f5:4f:9c:8e:34:1b:
1f:ee:c0:4d:58:a9:56:53:49:f7:1a:a5:31:d8:f3:33:fd:61:
b5:c6:23:71:1a:ac:1b:46:9e:18:9c:d9:62:42:ec:7a:67:65:
a2:b9:a5:6f:5b:eb:7b:a9:9a:fe:10:34:06:d9:20:3f:5e:7e:
89:26:82:3f:b1:81:fe:fc:7c:cf:7f:79:f4:18:f4:a7:cb:27:
7e:da:3d:79:65:f5:4a:2b:ed:ad:62:80:91:b9:9d:f8:a4:e2:
c2:29:a1:07:20:b2:1b:75:61:ad:b2:23:3b:a7:69:a1:d6:04:
bf:28:58:75:e6:80:fd:41:5c:7f:27:ac:9c:e7:98:3e:2e:ff:
eb:e6:b2:40:20:e2:dd:80:7d:15:9e:93:35:5c:5d:ff:25:c1:
e3:07:93:96:59:0a:2b:7a:8f:fd:62:1d:f3:99:ca:a3:c5:90:
a8:12:3b:52:e3:1e:25:68:40:be:5e:b5:4b:44:69:83:65:08:
c3:a2:80:8d:67:03:50:64:e9:87:f4:af:8e:1d:b4:84:92:12:
66:d0:be:c2:fe:3f:14:07:ec:53:d4:17:8b:b2:51:8d:47:56:
f2:5f:51:67:32:14:2a:e5:0b:aa:f3:0d:66:32:a2:1e:28:55:
0f:9a:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:07 2026 by rpki-client