Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: NdNznI5+ZL8L57f5EV2iEhQcZ2+Gl2Z8zb+JrSDCgmI=
Subject key identifier: 42:3A:30:CC:18:7C:25:82:0C:D3:7C:CD:92:AE:2F:CF:19:2C:5A:EA
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019EBFFEF0D7273AA2E5866E54F775E2D3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 08:00:16 +0000
Manifest this update: Sat 13 Jun 2026 08:00:16 +0000
Manifest next update: Sun 14 Jun 2026 08:00:16 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: TgtaUtK99H81dYBetWpmdPpjdiW2/3dPENFmP/5Wpes=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f0:d7:27:3a:a2:e5:86:6e:54:f7:75:e2:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jun 13 08:00:16 2026 GMT
Not After : Jun 14 08:00:16 2026 GMT
Subject: CN=423a30cc187c25820cd37ccd92ae2fcf192c5aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:65:f9:e9:4e:70:e3:44:5b:1b:06:24:dc:
64:46:1a:1b:06:73:0e:be:b4:af:4c:e7:9d:b0:8a:
76:37:39:ea:f1:f8:6e:9a:c1:36:e7:ae:73:76:88:
5b:82:86:e3:d8:23:4a:75:fb:49:64:f0:76:1d:9d:
e3:3a:9b:84:83:aa:6b:ca:e8:b5:2b:bf:86:96:6c:
3c:27:3a:2a:12:c8:fe:11:0e:7e:e9:cf:38:50:e3:
0d:80:e5:0c:3f:43:05:90:cb:34:03:02:d4:3a:41:
b1:f8:81:59:4c:ea:b2:b5:b0:f3:4e:aa:06:c3:2a:
46:c8:56:ec:77:6f:e4:a1:8b:9f:a8:f9:70:bb:78:
13:f9:0b:0d:ff:c6:f5:cb:c5:3b:9d:06:27:f0:c3:
2e:e6:a2:0c:9e:18:bf:fc:96:e7:30:6b:62:5f:9a:
e0:0c:55:ad:19:18:12:e6:3b:f0:e5:0d:a5:23:fd:
9f:6c:c8:71:8a:69:26:3f:e1:ab:22:55:eb:f4:9c:
ef:d3:3c:2b:02:7f:cf:61:cc:43:8c:25:16:f0:08:
01:8e:41:41:41:2e:3c:b8:4d:76:e9:4c:1c:3a:21:
64:1b:47:35:cc:16:8c:2d:18:e2:20:5e:b9:75:72:
48:6a:e8:18:4a:22:f9:a0:7d:e3:d3:b9:47:75:7c:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:30:CC:18:7C:25:82:0C:D3:7C:CD:92:AE:2F:CF:19:2C:5A:EA
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:e9:a2:08:f5:e2:5d:d3:c3:55:88:6b:14:e7:64:76:5a:
2d:51:9c:62:06:31:83:6d:67:3d:d5:d2:68:43:cc:89:db:0c:
87:f4:17:95:86:c8:60:8e:5d:1c:87:a9:32:34:54:04:4d:28:
06:a1:5d:26:ea:c0:d3:f3:6f:7d:2b:1a:e5:c9:49:be:00:c0:
c8:bc:09:41:1b:8d:5c:59:3c:da:91:a7:7f:21:4a:d3:95:81:
ee:59:9e:89:b0:3e:11:dd:67:32:80:28:1d:45:2b:1c:c7:b0:
4d:e1:3e:ec:73:b5:3d:37:1a:a5:bc:94:a5:60:c4:a0:62:58:
06:98:b5:f2:39:65:f3:cc:da:a8:9d:ad:23:b5:e1:bd:01:d4:
1b:fb:9b:57:ec:ed:83:a6:b7:30:63:ed:1a:a6:67:28:36:9d:
ca:11:77:c5:78:b2:3a:64:17:c6:05:44:20:2e:4b:a2:33:52:
f3:87:c6:97:62:83:19:bd:a8:cf:dc:9d:63:49:e1:f6:b7:26:
cd:3c:99:59:b5:53:8e:a2:44:18:31:d0:2d:5e:f2:f2:92:f9:
eb:60:aa:99:8c:a4:76:e7:34:5b:68:6b:af:64:e2:4f:8e:b1:
e0:99:0a:b4:67:49:5f:26:86:68:ba:cd:b4:65:4a:4a:48:6f:
43:a4:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:37 2026 by rpki-client