Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: 3wiYUCeiykwlvgEalf3340nYzK8OCzbOzIb7KEAHc3I=
Subject key identifier: 02:61:BB:6E:1D:1C:83:5D:56:9D:94:C7:C7:B5:C2:7A:EE:2E:DE:E6
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019CAA8F950171390029AECAFA410AFCBCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:02 +0000
Manifest this update: Sun 01 Mar 2026 18:01:02 +0000
Manifest next update: Mon 02 Mar 2026 18:01:02 +0000
Files and hashes: 1: K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa (hash: mz9IbH2TcauzEdRTkvsk6aZrHNIPGk0qBoIBNHpM3I4=)
2: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: xC1YgRvlJzIHDEkxyvLaZsOwpq6VcwhYHZxP3qDcUX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:95:01:71:39:00:29:ae:ca:fa:41:0a:fc:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Mar 1 18:01:02 2026 GMT
Not After : Mar 2 18:01:02 2026 GMT
Subject: CN=0261bb6e1d1c835d569d94c7c7b5c27aee2edee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:a5:86:b9:06:86:45:cf:31:ac:56:54:69:
52:17:ae:76:ee:23:a4:2d:94:c4:3d:45:e5:7a:25:
d2:3d:90:d9:1b:c7:fa:17:ca:90:97:4a:df:fb:00:
28:28:d9:39:71:6b:c4:8b:e6:5c:5a:28:bc:a8:8b:
12:50:d8:3e:b3:19:80:d1:dc:56:8a:fe:86:68:4e:
5a:24:5f:08:18:3a:0b:6b:15:bd:a0:a7:7a:1b:ee:
a8:46:1e:26:8b:ff:8b:4c:82:6c:c0:ad:e5:fe:a8:
d9:f3:29:9e:63:0f:ee:cd:cf:59:f9:1e:6b:bc:8e:
68:e9:68:c8:1a:d3:05:77:f1:23:74:3f:0a:a3:ef:
81:03:b7:89:96:84:79:cb:5a:17:27:dd:94:1c:5f:
86:14:6f:06:d3:a2:b7:09:05:dd:60:3f:ce:8b:b5:
fb:f5:89:99:77:af:fb:4c:c9:b8:5e:ea:61:20:6e:
4b:a7:ea:c4:f4:c3:da:53:a6:75:81:b7:89:55:39:
df:7c:2c:a2:9e:e5:cc:1b:22:96:fc:84:79:70:a1:
7f:32:14:a9:33:ea:42:9c:71:d7:0a:65:fb:29:a4:
8e:8a:b6:3c:19:6d:76:b4:cb:83:1f:c1:12:94:3a:
e4:d6:5c:40:a9:6e:01:81:30:1e:a1:40:d3:2b:e9:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:BB:6E:1D:1C:83:5D:56:9D:94:C7:C7:B5:C2:7A:EE:2E:DE:E6
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bd:90:49:bf:39:af:9a:61:ca:7c:c2:da:43:3f:cc:04:c5:
d7:41:c2:cd:7d:bb:e6:c4:e7:da:86:41:d9:15:91:53:63:d6:
1e:94:aa:84:c0:d1:2d:31:7f:e2:a6:e1:04:7d:e6:8f:3b:64:
fc:10:26:3d:45:9f:9e:c0:ba:8c:8c:28:84:d2:ba:08:b8:a6:
7b:7f:ee:b9:91:23:37:95:2c:44:7a:a6:44:f9:4c:92:73:7a:
c1:c9:5d:f6:d2:07:e5:0b:79:12:81:70:67:70:4b:4a:59:6c:
7e:19:52:ef:a4:36:f0:98:72:30:c8:d4:3f:b7:82:e1:61:61:
dc:72:09:07:bd:89:1c:44:51:06:62:3a:32:57:72:e6:8c:1e:
45:2e:45:53:65:78:bc:db:71:8c:a6:bc:bc:7d:48:46:c0:b9:
a0:b6:f6:ab:19:ac:44:5f:d5:01:d8:5c:69:78:20:54:d6:27:
4e:6a:5d:01:74:86:03:4f:c8:5e:b0:2e:e6:b6:af:ed:b3:bd:
aa:48:65:d2:96:95:9a:f0:fc:a5:58:3a:82:90:18:fe:db:f9:
9b:eb:0e:a7:0a:3a:5c:6a:2d:99:55:8d:c7:b7:e5:81:c7:0e:
47:a5:3f:24:70:4e:ff:b4:81:b6:12:f6:c2:55:4c:05:93:0a:
3c:a8:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:01 2026 by rpki-client