Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: +xTGtM1CqFoK4X4RPWbWlCQhIr+Z3hd2+Iqgz0I0udA=
Subject key identifier: 13:E5:C3:C9:A3:0E:E2:AC:5B:31:62:5C:3F:0F:54:BF:7D:31:03:42
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 019D38D2F9AACC39E52C0CDD136627DD2CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: 38e1debnGbuUF3x2YWLVTadnl34.roa (hash: o46Cv8Q4FIZO6x9+lAsM0sqzeRD81h3lSOBcRfeJ5CE=)
2: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: S9bGwhoCOssJSHr21cLLnZqkJXZhGLrVT9/JHoYo+6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f9:aa:cc:39:e5:2c:0c:dd:13:66:27:dd:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=13e5c3c9a30ee2ac5b31625c3f0f54bf7d310342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:2f:2f:7c:e7:ea:d7:3c:92:21:1f:24:a9:
7f:bf:24:99:5e:82:34:57:07:e2:a0:a5:a1:2e:0e:
1b:8e:87:e0:d8:6f:1b:dc:9f:de:cb:6f:f5:43:b4:
41:8d:fa:80:54:98:6b:22:68:8e:3e:c4:4d:a1:8f:
2f:e4:03:19:89:66:22:fd:d7:04:67:94:33:ba:88:
7a:77:31:e5:c4:31:90:e0:0d:86:d6:1b:80:56:dd:
5b:c3:af:9d:80:ac:d0:a0:0f:2a:8c:15:a2:70:3b:
55:07:8f:ef:46:17:cd:59:96:6d:a9:16:4c:fa:a1:
d0:d8:37:39:3d:dc:9c:6b:a8:0f:ad:ef:f6:81:c8:
39:90:8f:57:41:91:d0:82:f0:cc:eb:11:66:21:eb:
5e:02:b9:f7:24:49:70:bc:c4:0e:a8:9a:b5:4c:77:
86:e3:3d:d7:24:a9:ab:36:e2:74:20:22:56:dc:a2:
25:ed:4b:3d:cd:99:e5:13:44:52:69:5a:bc:e9:15:
9f:90:b2:d7:b6:82:ee:80:98:53:33:6d:80:44:86:
69:48:91:e6:1f:e2:26:cd:81:76:1d:cd:f3:b9:b8:
02:9a:e6:c9:5b:ee:48:40:9e:79:3b:a0:78:85:91:
7b:6a:08:0d:e0:5c:f0:b9:11:0f:fe:13:2f:22:98:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:C3:C9:A3:0E:E2:AC:5B:31:62:5C:3F:0F:54:BF:7D:31:03:42
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a6:20:68:d3:7b:b5:a6:bd:1a:88:05:37:bc:24:e2:cc:fa:
31:e5:78:a4:07:4a:b0:70:39:81:56:71:06:f8:07:b5:34:d1:
31:0d:fb:07:2a:20:f6:a9:f7:a2:b0:29:47:72:0f:3f:ef:54:
51:fd:c8:a3:f5:87:36:8a:94:3e:38:49:b6:97:4a:20:20:0c:
2f:c4:b7:66:91:97:29:c6:d2:3f:e5:49:b6:1d:68:94:21:bf:
f6:83:39:87:27:e9:c2:46:2c:bd:c8:f4:0f:ea:48:49:0e:65:
5f:1e:8e:3c:23:96:f3:30:66:ad:74:08:65:ba:a8:19:c0:cb:
b0:c1:bc:37:67:55:41:90:4c:e4:56:be:f1:db:2a:77:5f:97:
45:c9:8d:fa:34:41:4c:48:9f:bd:9a:d8:12:ab:d8:9d:21:6f:
af:69:77:76:a9:30:ec:53:a3:14:17:74:d5:ea:7a:c2:df:9e:
23:00:95:f8:a2:ed:df:dd:bd:9e:e0:51:65:43:90:75:1b:2e:
f6:ba:c6:06:16:27:aa:35:44:94:5a:e0:0d:25:1d:4f:05:66:
a2:21:4a:27:96:07:41:7d:42:04:8d:8e:a2:c3:f0:e4:58:67:
cc:5a:0a:0b:15:3d:64:e1:3a:08:6f:a0:71:a0:5f:24:02:43:
2b:84:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:04 2026 by rpki-client