Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: dcpf6TgtpvaAAVecaCuW2EU4M3ePdrZohdw0J8TxyUo=
Subject key identifier: 5E:0A:F3:21:9B:36:92:77:52:18:10:F6:20:60:D4:9A:0F:39:DC:99
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019D38D30E06D591CC0F46370163A0ACB938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 109C
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: UaROMVKMyDO3jiIRpOnK09lCDZYedAIReRnb+VeEtrU=)
2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0e:06:d5:91:cc:0f:46:37:01:63:a0:ac:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=5e0af3219b369277521810f62060d49a0f39dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:ee:00:38:61:57:2f:a3:82:7e:7e:2a:cd:
5f:8f:46:c0:b1:3d:dc:29:d5:a1:bb:26:db:0e:a9:
1f:f0:e7:dd:bc:21:a3:c7:69:1e:be:4d:c1:42:21:
de:ce:3c:af:40:41:cc:c4:5d:01:8c:c2:bd:3d:8a:
d6:32:e8:34:96:48:eb:a2:36:e5:17:74:17:37:08:
26:ef:34:23:ad:0f:1e:f2:fb:d7:5a:3a:8b:3b:f4:
a6:2f:5f:a0:e0:a8:36:da:c2:f4:4d:39:c3:ae:c1:
77:b7:01:bd:42:0f:4b:d2:90:5f:8a:be:59:e1:31:
47:bc:2a:e9:36:40:3f:ad:87:f2:ef:3a:5e:e7:eb:
dd:9c:00:22:5e:d8:9c:95:ef:ae:ef:cd:0d:31:cc:
86:de:3f:98:89:2d:ce:51:92:2a:7a:9c:93:5f:a8:
50:f0:29:71:d0:fb:9f:95:a5:f7:fd:2f:3f:cb:47:
48:1c:e5:98:1d:2b:18:83:fe:bd:8d:91:d3:38:5f:
41:0f:e5:8a:75:9b:d6:66:93:1c:a9:90:b2:e9:f2:
1b:88:1e:f5:44:e8:05:be:f0:0b:be:bf:de:99:82:
35:82:8a:de:c1:3a:ee:e4:5f:01:f6:93:40:fb:e0:
73:38:0e:4a:cb:de:94:51:77:ba:d5:36:5e:21:cb:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:F3:21:9B:36:92:77:52:18:10:F6:20:60:D4:9A:0F:39:DC:99
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b8:ec:fe:58:c0:7c:f2:c5:5e:09:dc:d7:a9:44:df:b6:2e:
bd:8b:6f:34:0a:c2:46:ea:90:21:26:9c:e4:b4:4b:0e:3b:c1:
85:74:4f:1a:c2:76:6e:11:46:9c:9a:fc:36:ef:da:02:7e:cb:
c2:2a:e4:65:da:18:48:07:28:6c:a9:39:dd:b5:03:f4:d5:dd:
cc:f0:ad:34:1a:6a:27:c0:d3:74:39:4d:b2:73:31:e3:ac:e8:
6e:39:cd:d4:19:9e:af:14:42:a5:bb:9a:a7:04:c2:9a:87:0f:
cf:93:87:73:f6:d3:c9:c2:2e:b7:0c:49:1f:f3:24:cc:63:50:
3d:75:6e:33:94:8d:d8:55:86:ba:62:a6:69:20:63:4c:f7:95:
37:64:d8:47:f1:3d:34:c8:f1:9c:71:ea:11:74:05:a0:48:76:
78:ed:6e:48:3a:60:e2:a7:c2:50:a9:8a:d8:8c:36:bf:2b:33:
3e:99:96:62:fd:bf:0f:9b:b9:9c:7b:bc:03:19:7a:46:a0:bb:
ee:56:cc:82:09:d5:c9:04:05:fd:38:49:ce:a1:cc:a3:73:85:
90:78:05:af:50:e6:ce:e0:a6:d0:17:34:da:a2:0f:0c:72:38:
ee:1a:07:33:22:2e:2f:79:47:d6:5c:c5:1f:72:e2:86:2d:18:
46:c8:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:10 2026 by rpki-client