Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: rxFUi9A/qsKExLTb3jt8U7LsvnD1sP0wsTI1o9NIMf4=
Subject key identifier: AE:BD:82:C5:C5:72:91:17:12:26:C4:AC:E2:24:CB:48:E8:19:DE:EA
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019CAF486155CFB40107F702954DFA9D9EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0FB7
Signing time: Mon 02 Mar 2026 16:01:22 +0000
Manifest this update: Mon 02 Mar 2026 16:01:22 +0000
Manifest next update: Tue 03 Mar 2026 16:01:22 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: Xzje/Yrxs9K2HAd8kLsDXkqHz8MFcVtmRWzK8v+su94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:61:55:cf:b4:01:07:f7:02:95:4d:fa:9d:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Mar 2 16:01:22 2026 GMT
Not After : Mar 3 16:01:22 2026 GMT
Subject: CN=aebd82c5c57291171226c4ace224cb48e819deea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:af:b8:36:0b:0a:cb:c0:2f:87:e7:44:0b:
5f:b8:0a:04:39:6b:42:2b:03:73:62:d4:37:3e:df:
e9:38:62:cd:69:07:ab:c0:e8:d9:52:86:6c:de:c2:
36:3e:d4:89:f8:d7:fc:5f:58:89:4c:8e:ab:dd:8b:
b1:44:f1:b6:31:4e:18:b1:9f:36:0c:53:c9:26:87:
26:71:39:81:57:40:75:53:62:45:90:aa:0a:7f:9f:
4b:f8:9a:ca:1d:f9:62:bb:c4:be:93:97:93:7a:5b:
aa:0e:ca:be:62:cd:32:01:c5:16:7c:7b:28:a9:2d:
87:45:2c:cb:30:1a:51:36:b0:58:0b:96:c7:b4:38:
20:18:ed:83:39:06:f5:e8:e1:da:e0:16:dd:01:01:
13:6b:f8:16:6d:15:30:10:6d:62:14:5f:1a:e0:4b:
cc:0c:f3:e6:46:fb:be:db:06:49:62:aa:6e:83:12:
61:7d:ca:6d:4d:4e:e7:43:b5:73:a5:a3:f0:52:36:
6b:68:b1:5d:cb:1c:7d:96:96:39:d0:ad:9a:ee:e9:
0f:b6:51:e4:6f:1a:10:b2:e6:20:4e:81:9d:2d:37:
35:a1:d4:d8:d3:8c:6d:d7:b0:1e:02:11:b1:53:81:
14:6b:46:a6:d8:b8:c1:1a:45:cb:b7:e6:30:93:6e:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:82:C5:C5:72:91:17:12:26:C4:AC:E2:24:CB:48:E8:19:DE:EA
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:91:f5:d0:b3:d0:cb:24:ba:86:f4:53:fa:6f:4f:0d:cb:
2c:76:a9:a1:87:dc:70:2b:ad:66:06:40:9d:eb:b5:fe:d9:11:
a3:64:3f:97:49:32:0f:38:ad:83:ae:f1:02:89:0d:57:32:b8:
42:9a:6a:d1:a1:08:7e:46:0f:dd:bf:13:c8:f0:9b:be:db:15:
5f:f2:1e:d3:5e:e3:59:1b:d1:dc:47:03:35:f4:63:46:08:6a:
f7:2b:4e:1d:e8:ae:0f:d1:6f:93:72:96:f7:81:bb:62:7b:3e:
d1:a6:b6:72:74:cf:93:97:b2:5e:23:a8:85:f4:95:54:47:ce:
4d:6c:0d:25:30:9b:15:8c:af:d3:f5:01:f2:41:76:d0:b9:9f:
ae:b8:6d:4d:35:c7:19:1e:8e:23:89:09:a7:2b:f8:fa:c0:dd:
bc:2f:f1:c2:29:85:51:db:01:80:f8:cb:57:42:86:a1:cb:3f:
2b:dc:1b:f6:55:68:53:db:ab:4e:25:9d:30:cc:00:8f:cc:28:
e1:74:55:66:e3:ae:78:19:93:1a:79:2d:ae:f0:0b:55:0c:5c:
20:e9:7f:3d:93:7e:8e:3e:7e:06:39:dd:3e:12:1c:ec:43:c3:
af:f1:ec:46:29:57:d6:7d:f1:04:42:95:db:22:e8:53:e7:fd:
10:13:c2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSGFVz7QBB/cClU36nZ7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YWU4YmQzMzI0OWNmMWVkNWYwZDQzOTgxNDdlZmQzMmQy
NTQyMWEwHhcNMjYwMzAyMTYwMTIyWhcNMjYwMzAzMTYwMTIyWjAzMTEwLwYDVQQD
EyhhZWJkODJjNWM1NzI5MTE3MTIyNmM0YWNlMjI0Y2I0OGU4MTlkZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgevuDYLCsvAL4fnRAtfuAoEOWtC
KwNzYtQ3Pt/pOGLNaQerwOjZUoZs3sI2PtSJ+Nf8X1iJTI6r3YuxRPG2MU4YsZ82
DFPJJocmcTmBV0B1U2JFkKoKf59L+JrKHfliu8S+k5eTeluqDsq+Ys0yAcUWfHso
qS2HRSzLMBpRNrBYC5bHtDggGO2DOQb16OHa4BbdAQETa/gWbRUwEG1iFF8a4EvM
DPPmRvu+2wZJYqpugxJhfcptTU7nQ7VzpaPwUjZraLFdyxx9lpY50K2a7ukPtlHk
bxoQsuYgToGdLTc1odTY04xt17AeAhGxU4EUa0am2LjBGkXLt+Ywk27P2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK69gsXFcpEXEibErOIky0joGd7qMB8GA1UdIwQY
MBaAFJWui9MySc8e1fDUOYFH79MtJUIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUt
OGZmYmQ2YzczYmY1LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUtOGZmYmQ2YzczYmY1
LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBmR9dCz
0Mskuob0U/pvTw3LLHapoYfccCutZgZAneu1/tkRo2Q/l0kyDzitg67xAokNVzK4
Qppq0aEIfkYP3b8TyPCbvtsVX/Ie017jWRvR3EcDNfRjRghq9ytOHeiuD9Fvk3KW
94G7Yns+0aa2cnTPk5eyXiOohfSVVEfOTWwNJTCbFYyv0/UB8kF20LmfrrhtTTXH
GR6OI4kJpyv4+sDdvC/xwimFUdsBgPjLV0KGocs/K9wb9lVoU9urTiWdMMwAj8wo
4XRVZuOueBmTGnktrvALVQxcIOl/PZN+jj5+BjndPhIc7EPDr/HsRilX1n3xBEKV
2yLoU+f9EBPCmA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:41 2026 by rpki-client