Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: abbcZDHudz7nl8E7yA09ZwSsWSX5Gm9WpBJoUoiANp8=
Subject key identifier: B2:37:53:C6:90:E5:C5:02:5F:52:79:73:12:2C:A6:80:45:E0:24:C4
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 019CAD59F63A29700FC4EBF74E93CD2A5D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: 6py11XdMckJzOJFmAEMeMJNvkFJXMrMmyPmIeb567Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f6:3a:29:70:0f:c4:eb:f7:4e:93:cd:2a:5d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=b23753c690e5c5025f527973122ca68045e024c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:62:65:bf:90:12:bf:bc:3f:d3:55:3f:c1:
37:0b:46:0a:eb:eb:97:d1:3e:1e:76:bd:87:cf:b9:
d0:1e:38:70:99:4d:de:44:6d:5a:12:30:a9:21:aa:
25:e2:ce:f0:91:74:57:6c:cb:79:7e:77:66:7d:78:
62:90:30:c5:80:4c:c1:44:bf:48:a1:86:1d:2f:fc:
1a:57:9c:01:f8:82:3d:41:b7:49:47:10:62:2e:2c:
fd:03:9f:e9:5f:6d:49:2c:d1:7f:d8:d8:44:e4:f2:
41:5c:34:23:1b:63:11:6f:27:4e:06:4a:f9:8d:08:
04:f4:b5:30:75:d4:a8:5d:78:79:8c:b5:60:e5:b8:
2d:a2:c3:fd:56:38:d8:2b:52:76:79:3d:8e:aa:ff:
c1:a4:8e:ab:4f:a5:39:71:e2:b0:c2:0f:6e:8e:80:
13:77:4a:3d:72:26:b5:d1:e4:50:c0:6b:1e:b0:6a:
a8:a5:2a:9c:1f:0b:e0:64:cd:e0:48:f8:fb:a7:63:
32:94:1a:00:4c:dd:52:2b:1c:7e:2b:a0:0b:e9:e4:
86:f2:0c:f6:e5:a5:6d:5d:aa:46:97:34:c7:f9:f2:
bc:1a:91:80:6a:d7:46:1c:a2:c8:15:74:83:8f:1c:
4e:fd:06:d1:d2:1a:0b:e5:06:ff:5d:3f:c2:03:7d:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:53:C6:90:E5:C5:02:5F:52:79:73:12:2C:A6:80:45:E0:24:C4
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:70:c9:23:f2:31:e6:46:53:b0:a5:88:0b:b1:3c:7c:b4:a3:
2b:2e:e1:e6:a5:fc:8c:b1:b4:2e:bc:db:5f:49:d5:63:a6:2b:
dd:e5:a9:02:ee:5c:30:3f:c8:03:e1:b9:12:71:82:07:c1:79:
2c:01:6f:30:91:ed:2c:cb:9a:71:fb:07:ef:ba:a5:dc:5f:36:
64:6a:88:bf:da:f9:2d:d9:f4:09:45:7c:0b:9a:36:3c:c9:51:
2f:ef:80:ea:87:3b:11:a2:b6:5f:21:f4:7a:de:33:68:24:e1:
b6:f7:ab:2f:b3:fe:6c:39:82:0f:9f:53:fa:d0:8b:6b:3d:45:
3e:bb:7f:e7:a6:26:77:b7:b8:a0:e5:b0:70:c6:72:52:30:a6:
2a:a3:ea:21:b6:71:2b:9a:35:95:65:09:06:25:3b:e2:51:01:
89:ba:36:4a:03:3c:90:5c:a1:1f:de:ad:82:01:86:16:81:60:
f5:4f:72:df:d0:90:44:a2:1e:ac:24:99:14:d8:8a:08:86:68:
ac:97:2b:ee:f3:db:42:4a:40:cd:ee:f3:a1:e9:5f:33:e5:7e:
6e:d2:74:d1:ec:11:37:73:a7:f0:d7:e1:ef:dc:69:b7:7a:e5:
a4:fa:36:9c:b7:c9:9f:12:c8:65:29:4b:5c:3d:92:09:b1:e9:
8f:1c:26:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfY6KXAPxOv3TpPNKl11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm
MGYxMjAwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhiMjM3NTNjNjkwZTVjNTAyNWY1Mjc5NzMxMjJjYTY4MDQ1ZTAyNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLhiZb+QEr+8P9NVP8E3C0YK6+uX
0T4edr2Hz7nQHjhwmU3eRG1aEjCpIaol4s7wkXRXbMt5fndmfXhikDDFgEzBRL9I
oYYdL/waV5wB+II9QbdJRxBiLiz9A5/pX21JLNF/2NhE5PJBXDQjG2MRbydOBkr5
jQgE9LUwddSoXXh5jLVg5bgtosP9VjjYK1J2eT2Oqv/BpI6rT6U5ceKwwg9ujoAT
d0o9cia10eRQwGsesGqopSqcHwvgZM3gSPj7p2MylBoATN1SKxx+K6AL6eSG8gz2
5aVtXapGlzTH+fK8GpGAatdGHKLIFXSDjxxO/QbR0hoL5Qb/XT/CA30BnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI3U8aQ5cUCX1J5cxIspoBF4CTEMB8GA1UdIwQY
MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt
NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1
LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnDJI/Ix
5kZTsKWIC7E8fLSjKy7h5qX8jLG0LrzbX0nVY6Yr3eWpAu5cMD/IA+G5EnGCB8F5
LAFvMJHtLMuacfsH77ql3F82ZGqIv9r5Ldn0CUV8C5o2PMlRL++A6oc7EaK2XyH0
et4zaCThtverL7P+bDmCD59T+tCLaz1FPrt/56Ymd7e4oOWwcMZyUjCmKqPqIbZx
K5o1lWUJBiU74lEBibo2SgM8kFyhH96tggGGFoFg9U9y39CQRKIerCSZFNiKCIZo
rJcr7vPbQkpAze7zoelfM+V+btJ00ewRN3On8Nfh79xpt3rlpPo2nLfJnxLIZSlL
XD2SCbHpjxwmYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:17 2026 by rpki-client