
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
File: L-KdbJy8NTcKAaomhNP3cxr5TJw.mft (raw, json)
Hash identifier: 3S1JsCtuvNC8MIoPmYVWwqsCT0vVOdLDP0sjoxSBUKw=
Subject key identifier: 54:89:3E:F6:7B:64:12:B4:85:26:A2:FA:23:4C:F4:9B:AB:93:07:31
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Certificate issuer: /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial: 019FAA887F0D695A6BBC239D87960E7F16CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:39 +0000
Manifest this update: Tue 28 Jul 2026 21:01:39 +0000
Manifest next update: Wed 29 Jul 2026 21:01:39 +0000
Files and hashes: 1: L-KdbJy8NTcKAaomhNP3cxr5TJw.crl (hash: pyWFaJ11yIGX9NHohkHOX4dV8+e+zq3Oz7nv7yOVxmE=)
2: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (hash: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:7f:0d:69:5a:6b:bc:23:9d:87:96:0e:7f:16:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Validity
Not Before: Jul 28 21:01:39 2026 GMT
Not After : Jul 29 21:01:39 2026 GMT
Subject: CN=54893ef67b6412b48526a2fa234cf49bab930731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:e5:2c:bb:c7:e4:9f:fb:fb:11:01:51:68:
5d:7d:30:e4:e0:25:7a:13:bf:6b:c1:c6:de:3c:fd:
61:ff:c1:a6:f7:a6:76:7b:f7:a8:74:2d:8c:8d:76:
ea:8c:9f:6e:f0:e4:b9:1f:44:1b:67:3b:e8:4c:77:
ff:10:ae:ac:d6:27:57:b7:4f:31:80:49:b2:ed:47:
5c:73:53:e1:8b:1f:fb:7a:3c:8a:93:ae:13:b7:2e:
f3:b1:4d:12:c8:ec:f5:d3:09:23:78:f8:d2:91:e1:
8b:28:c7:98:d3:b4:0d:83:3a:8c:33:3f:9d:81:f4:
52:f2:28:41:06:76:c8:ec:61:10:df:ea:41:a3:b8:
b9:63:52:04:c4:8c:a5:8e:dc:a4:0e:0a:88:df:88:
29:10:1d:24:77:0a:0b:24:56:c4:6d:57:fd:54:2f:
21:f3:dd:da:8a:ae:34:dd:28:36:4f:40:c6:cf:67:
d8:b0:34:9a:f5:43:5d:b7:89:fa:09:25:d3:ac:ad:
49:59:c6:62:5c:fd:c7:bf:6e:32:b6:24:7a:c0:12:
cf:3a:d9:c3:ab:77:73:ff:0e:8b:7f:c3:a9:75:1b:
a6:e6:d3:3d:73:91:cc:38:35:9d:5b:0c:a1:75:73:
4c:53:b3:f1:c0:99:52:5b:74:26:03:ba:53:e8:0b:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:3E:F6:7B:64:12:B4:85:26:A2:FA:23:4C:F4:9B:AB:93:07:31
X509v3 Authority Key Identifier:
keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:d3:e0:ef:69:e7:92:62:3d:aa:d8:8a:c6:5a:6b:27:0c:
3e:8f:d6:3f:de:dd:07:d5:01:20:5f:39:b2:0f:b9:9b:7b:b3:
48:19:05:52:9f:53:18:b6:dc:9a:8d:da:75:73:22:8b:eb:45:
69:52:dc:ed:5d:aa:7a:77:72:4e:c7:6d:b7:a9:bd:4b:e7:4a:
2b:64:17:1b:12:9c:9a:60:dc:f7:4d:5b:ff:b9:2f:13:93:81:
70:3a:46:ff:2c:1e:ab:ee:fa:14:9d:19:c5:7d:7d:11:62:56:
ed:23:a0:5d:a6:ab:fd:1a:54:ff:76:9d:47:0b:73:be:9e:c4:
ea:81:bb:d4:93:50:7a:31:3d:ce:20:41:ed:c8:c0:98:53:3d:
00:94:30:88:f5:3c:8a:1a:28:c7:9c:95:54:78:25:5e:6d:d4:
a8:0a:84:77:74:b3:68:e6:20:7f:e4:55:2b:21:3e:25:1a:f9:
30:bd:49:23:c7:21:7a:6b:87:b5:6e:f7:74:24:1f:6f:2e:00:
3b:b6:8b:39:88:a3:fb:35:5b:16:84:0e:9d:a9:17:c4:d6:c3:
fb:90:50:11:b4:9d:f1:b8:7e:23:bd:66:6e:09:65:64:e2:bc:
49:83:8f:84:2a:7e:13:0c:16:71:33:b5:4b:ef:39:19:cd:40:
fe:30:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:24:29 2026 by rpki-client