Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: r7dKMT3F2Ifeux59tUTpKyf++FLA9gOE9XnDm8Mw3Hg=
Subject key identifier: 72:AC:54:F1:26:91:CD:C2:1C:86:7F:78:C3:5B:7F:23:37:C0:CA:F2
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019CADFE6E980E936ECB098A1F73D205A65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 10:00:58 +0000
Manifest this update: Mon 02 Mar 2026 10:00:58 +0000
Manifest next update: Tue 03 Mar 2026 10:00:58 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: NnUxVfF0H1ou4JXnURwh2JC+G6AK1tAzqxb7XC3ixlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6e:98:0e:93:6e:cb:09:8a:1f:73:d2:05:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Mar 2 10:00:58 2026 GMT
Not After : Mar 3 10:00:58 2026 GMT
Subject: CN=72ac54f12691cdc21c867f78c35b7f2337c0caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:f6:df:30:28:d4:71:78:6d:21:5e:0b:73:
0d:3c:2a:2c:75:67:4c:cc:77:63:8a:dc:0c:b9:b2:
ba:28:d9:1c:43:6b:05:b4:ce:b5:8a:8d:62:08:b2:
ea:a0:19:a8:8f:a3:33:ae:d4:bc:ed:91:f3:d5:d2:
56:7f:a8:d3:df:aa:ed:5f:33:de:6c:f5:e8:bd:26:
98:53:e6:44:2a:cb:d5:5d:27:5a:1a:03:1c:65:c6:
9a:0a:c4:79:c9:b7:3a:19:17:62:48:90:83:e4:a1:
a6:8c:df:ec:bc:61:52:c9:21:f0:af:ac:58:15:49:
d9:b7:98:63:24:47:49:1a:4b:5f:c3:56:db:02:1a:
d9:4f:ec:77:7d:f0:1a:01:e1:a3:c5:93:98:2e:0c:
d2:ad:97:4e:0c:c9:d2:96:b1:90:bf:cc:6a:9c:28:
d1:b1:fb:a0:61:f8:1d:7d:7d:6f:5c:56:ca:25:bb:
0e:07:7c:b6:2f:df:27:ab:d2:63:e5:f9:f3:1c:7a:
bf:bf:7b:41:f2:c1:20:19:b0:49:e2:fd:25:7f:7a:
4d:9f:09:c0:e5:35:84:50:59:66:b7:3d:95:6c:a5:
3b:54:6b:b2:39:4e:87:23:76:cd:94:f8:93:ed:cb:
f3:75:c1:d9:7a:b1:05:e8:a6:a4:0b:c7:1f:6f:bc:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AC:54:F1:26:91:CD:C2:1C:86:7F:78:C3:5B:7F:23:37:C0:CA:F2
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ed:11:eb:97:67:6b:54:ae:a4:5d:f1:d0:7c:0e:81:b9:90:
8a:03:78:89:e3:95:49:89:15:32:72:5b:77:68:b2:61:55:3c:
9f:ef:94:92:e8:43:31:41:27:70:d3:4c:d6:d5:e6:02:57:14:
a4:27:6f:fd:25:d2:31:e6:d7:cb:66:9a:00:b2:c2:48:cf:c5:
19:d3:fd:2f:74:b1:04:a7:cf:25:13:91:1b:28:b5:5e:bc:f2:
9f:be:f2:b8:50:bb:94:44:ca:f9:fa:38:b7:d2:82:04:89:5a:
33:6a:64:7e:b2:cf:16:c8:15:01:05:1c:6b:a8:1e:a7:05:de:
f3:fc:d3:62:67:1d:d9:87:e3:9b:0b:06:ca:0b:f3:89:88:de:
85:3a:ca:ad:aa:6e:7f:c1:d4:f2:64:70:81:b5:a3:b9:c5:98:
77:c6:64:54:26:f4:f0:ad:eb:15:22:46:d2:28:62:b9:93:4a:
27:31:7a:05:e8:00:0f:21:68:e4:49:fb:b7:4e:8f:14:e1:da:
0d:e4:05:d0:94:e2:2a:9a:43:32:53:77:13:40:32:bc:77:f6:
09:39:f1:3f:66:79:21:60:fc:af:4a:a4:e7:1e:1b:24:75:19:
1d:d1:5e:c4:eb:77:67:d6:36:00:a4:bb:01:1f:2f:a4:3e:6c:
43:ab:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:27 2026 by rpki-client