Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: hq4HMHtz0LULxy1GwV89oY218xuDccB+XrdkevIiRic=
Subject key identifier: E1:CE:DA:24:84:39:E6:9C:FD:2D:EA:40:FC:B1:3C:88:C8:65:F6:EE
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 019CAAFD4BE19143CA0A968C1AC968B53B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0EFA
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: PZ61I2EDk7npjv4bM0mtjHdxy/FcPTVMU2LJvfXa4Uk=)
2: MebPMP4MKMDRPcWsqA1RWlWN-u0.roa (hash: EdSN3u2MFCBqnyk+W6CQKHBVKlUmG8nORx98tAwp5Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4b:e1:91:43:ca:0a:96:8c:1a:c9:68:b5:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=e1ceda248439e69cfd2dea40fcb13c88c865f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:7b:b4:67:f5:c8:77:ca:4d:6d:6e:00:5c:
2f:f8:8e:44:26:5c:d6:47:88:23:ed:fc:47:92:b1:
dd:c9:69:f5:9e:10:69:38:84:35:99:b0:fb:9f:88:
00:63:01:3c:fa:80:12:16:eb:2c:0a:bb:cd:71:83:
f9:12:9e:75:1e:bc:4e:60:1b:c8:ac:fe:fe:60:6a:
32:26:cb:c4:bf:2a:6c:7f:0f:bc:64:bc:18:ef:9b:
0f:67:7f:9f:2b:41:6a:c1:76:63:f6:27:6c:d5:46:
3b:f9:71:a6:1d:79:89:0a:90:29:8d:b2:86:cd:48:
74:b9:72:d7:cc:20:84:eb:77:94:65:a0:7f:1c:09:
6f:ab:ba:f8:d5:54:c5:de:ec:a0:72:59:50:0f:0e:
ff:a2:7e:80:67:68:f5:d7:c8:ba:5e:d2:46:9a:cb:
47:60:f3:a7:12:45:1d:f6:46:b4:0c:68:f9:c3:0b:
fc:a1:58:59:34:e7:e2:48:f5:b8:49:23:7e:83:95:
69:37:f3:f1:54:49:08:52:04:74:fc:46:60:2b:50:
b9:80:f7:26:e4:eb:29:6e:01:47:6b:dd:79:fc:bd:
fc:32:f1:74:b6:07:1c:01:2a:3b:42:10:e3:4c:ed:
e4:28:49:0f:bf:f6:d3:42:6d:b2:e2:e2:45:71:26:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:DA:24:84:39:E6:9C:FD:2D:EA:40:FC:B1:3C:88:C8:65:F6:EE
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:16:51:09:b3:10:82:ab:61:03:f0:21:ca:6c:67:39:23:
d1:b7:24:1c:f8:5a:b7:34:5b:cb:ff:a7:d9:84:a8:90:98:dd:
e5:91:f1:94:58:19:37:f9:da:76:6f:d0:ff:71:4f:7a:60:c6:
f4:76:82:8d:2b:53:02:04:ec:08:0f:10:d6:f7:55:65:45:07:
6e:da:e0:40:06:d2:ac:d5:f1:dc:73:4c:ae:7a:6c:d1:52:2e:
86:bb:aa:05:6a:a1:0f:72:59:50:7e:f0:2e:ed:d7:04:13:37:
20:25:d3:46:03:89:34:6d:00:c0:75:cf:a3:c1:86:46:e8:c9:
dd:cd:43:4c:5a:95:16:2a:3b:2c:93:95:a6:4d:42:df:df:86:
6f:76:4e:14:d8:ba:9a:94:a0:86:bc:d3:66:b9:16:1e:b2:1c:
b2:55:07:63:34:81:e5:d0:2e:d1:b4:37:86:72:f2:03:31:b2:
c3:2e:83:53:5b:c9:4e:fd:ca:3a:53:a4:e4:9e:bd:89:79:9c:
e5:67:b7:30:1c:c2:36:f0:88:2f:6f:a3:a0:27:28:56:2b:7e:
74:6d:9e:cf:e9:93:90:fc:a1:f0:0f:bf:44:37:1f:eb:e2:be:
bb:35:cc:a2:26:83:9e:c1:59:87:f7:7d:14:33:31:28:fc:3d:
25:66:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:44 2026 by rpki-client