Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier: VOKyxycuYLz70ctS1PaFEEvDQgbygD/oyMtcoqjpP0c=
Subject key identifier: F4:AC:0E:F5:B7:E4:73:04:3F:FB:59:04:D6:C9:F9:78:4E:74:75:43
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 019CAC469AB730AE2990B3E9DED08A93B2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number: 0538
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: GQu/E4ChRk3UCIqfnqPBk+9YMi3A906/UiHrjjkD5XE=)
2: MJGFQhwjD7SZGpwHj1J0ylMUdt4.roa (hash: 69TBSVWjdAmII84vUfvpkFjJjCfIOngJEvJnmmX3Fcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9a:b7:30:ae:29:90:b3:e9:de:d0:8a:93:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=f4ac0ef5b7e473043ffb5904d6c9f9784e747543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:b4:16:48:cb:c9:7e:b8:2b:89:b1:0b:fc:
3f:50:f3:93:0b:23:b1:e6:30:90:d3:e4:87:f5:ee:
c4:0e:6e:08:10:f1:2f:e2:8a:67:24:ad:8c:a4:c6:
0d:f6:99:37:f5:52:d6:8b:c3:38:04:74:9a:c2:25:
45:94:b9:c2:ab:d9:2a:65:45:47:29:7b:c0:a3:37:
1f:59:d6:2e:b4:f4:22:2d:bf:76:84:90:80:79:cd:
35:d6:31:3d:d7:05:8b:6a:1d:2d:7b:70:22:37:c7:
e4:fb:04:69:5e:eb:c5:7a:4d:e8:6d:86:a2:a3:64:
c7:3d:e1:8d:da:41:d3:13:78:b8:6a:e1:7b:22:72:
15:72:d9:2e:b1:cc:4e:26:99:bc:76:c1:0a:c0:b4:
0d:95:76:3a:b9:e6:5e:ff:ba:14:9a:79:85:a5:a7:
66:22:91:c1:c7:66:6e:86:45:98:d8:13:cc:41:d9:
02:fe:9a:3e:70:bb:a8:c7:6f:c5:f4:aa:74:46:eb:
55:71:98:06:c1:1f:e6:c9:04:90:f9:af:ab:df:69:
a0:0a:2a:24:67:dc:05:a3:63:70:c3:a3:cd:b5:12:
ce:79:23:00:51:8e:28:4b:7f:56:8c:e8:e1:fa:aa:
b4:2e:5e:ee:92:60:c4:76:00:38:c8:64:85:a1:9f:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:0E:F5:B7:E4:73:04:3F:FB:59:04:D6:C9:F9:78:4E:74:75:43
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:f9:e6:5d:8f:3b:84:98:f2:28:50:b9:f1:02:b7:7a:d4:
6a:ee:09:82:17:ca:36:57:e9:d9:7b:22:73:c4:f8:88:43:65:
86:52:5f:c1:ec:f5:4e:14:19:73:79:33:4a:dc:97:96:6f:2e:
bc:19:d3:f6:89:66:64:82:06:fb:59:77:7b:6e:49:b5:c5:19:
92:67:38:e4:16:1a:f8:c8:f1:1d:82:77:1a:b0:b0:15:22:67:
cb:bc:d8:e6:5c:d2:5e:8c:48:ea:25:3a:8f:51:15:cd:b6:ea:
c1:9f:fa:81:1d:c3:8b:0f:ef:bf:0b:48:fb:eb:81:ff:8e:26:
6b:05:1d:6e:11:6d:a1:4f:9a:9a:93:d2:46:1a:e3:0f:fb:8a:
fb:e8:e9:dc:1b:28:95:b0:5e:a5:56:08:e1:d3:c6:ab:31:98:
58:33:e9:81:55:27:ef:8c:fc:82:f2:9a:86:2b:e5:61:d2:39:
0e:c4:81:b1:51:fc:b1:ac:a5:6b:27:31:45:94:8c:dc:65:eb:
44:21:c8:15:fc:d5:e7:c8:1a:41:fb:b6:0a:3d:8d:d8:63:c7:
a2:c3:4b:0f:07:cb:4f:63:95:16:31:3d:a1:c4:73:ae:e1:3c:
d5:dc:41:d9:15:40:ce:6c:c6:bf:f0:a8:81:93:b7:c8:d7:15:
e1:06:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:01 2026 by rpki-client