Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: EEGpn6ObCI0sQbEgRtNiM3Quqd8l260v2aIxLLmzNLM=
Subject key identifier: 42:0F:F5:C5:39:86:9D:F4:64:39:82:51:A3:81:08:DF:05:5F:FD:0A
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 019CAA58CB36150B2D6D6808F54020FC29B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: CrWBaWca+AILFmCao70imCmnJ6ZNyXnMmQ1kwTaYDP0=)
2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cb:36:15:0b:2d:6d:68:08:f5:40:20:fc:29:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=420ff5c539869df464398251a38108df055ffd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:8a:d4:0a:50:2c:34:a1:93:18:b1:08:bb:
22:93:98:ca:cd:bf:c4:4a:05:19:bc:11:bc:09:fe:
32:20:26:e7:32:9f:b5:0d:fc:8a:a0:4a:3f:d5:bf:
6c:e8:de:c6:9f:cb:f5:31:a9:6d:e6:e2:eb:f0:7e:
23:4d:6e:4e:6d:52:d5:ec:c6:af:74:73:80:e6:37:
09:83:ac:65:bc:6f:20:d4:90:03:6a:c3:77:2c:f0:
d8:49:95:a5:a6:77:d2:c6:3b:58:93:e9:a2:9b:bf:
cf:04:24:23:f4:7e:f1:51:5e:f4:ef:1c:56:db:58:
c9:85:2d:d2:e2:e9:49:55:1e:7b:2d:83:62:61:25:
0f:e9:e4:b0:1d:01:78:5b:e8:8f:45:65:c4:3e:c2:
bb:c9:88:d1:16:be:32:02:9a:be:5e:8e:75:47:d7:
5b:d6:76:c4:37:45:db:9c:7a:83:60:7a:39:19:6f:
85:af:0e:27:f1:2b:bb:c8:a3:19:63:86:3b:b1:b1:
46:b4:22:d4:f7:90:0e:85:8b:55:e1:4c:44:1b:2b:
58:57:5c:40:fb:1b:d8:48:54:12:77:99:05:9c:fb:
54:cd:b5:c3:e5:c5:16:34:8e:f3:a9:72:b7:f7:37:
74:8b:cb:ae:9c:f6:75:4e:e6:27:4e:9d:0d:56:f5:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:F5:C5:39:86:9D:F4:64:39:82:51:A3:81:08:DF:05:5F:FD:0A
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:76:01:e7:7f:22:4f:6d:64:1d:2e:14:0d:05:61:24:b1:ca:
d3:2a:9a:22:22:b5:5d:65:a8:07:a0:a2:da:b9:d0:47:60:e2:
a5:5e:1b:53:0c:53:0d:6a:3c:e9:86:c5:6d:e4:a8:2f:0b:81:
a9:05:f2:63:9f:03:73:23:ea:0c:ed:b8:74:1f:ff:74:71:96:
43:4a:47:0e:15:08:0d:46:b1:da:22:97:cc:80:96:74:2d:7f:
78:15:04:f0:6e:0b:53:84:70:47:64:16:5d:ea:76:bd:2e:1e:
a1:fb:99:ac:ea:74:cc:2c:70:03:a0:8e:e1:ba:9d:cb:49:3e:
1d:4a:d9:9c:41:d5:e9:d7:04:b2:35:3b:b7:2f:b0:e9:5d:d4:
aa:3b:07:23:cc:57:d7:a0:90:86:37:93:9e:a9:3f:b5:52:43:
31:5e:52:eb:95:95:b5:af:c9:8d:63:ef:34:50:4d:e9:1b:dc:
57:5a:b2:90:2b:67:8c:38:b8:33:5a:51:04:9a:92:74:20:42:
19:91:97:80:7b:25:1d:a2:0f:94:37:1d:da:34:20:25:50:96:
23:ab:64:05:80:3e:95:ab:06:eb:c7:59:b1:5b:a3:5f:fd:42:
ba:5e:f5:a7:5d:ec:53:13:8b:cc:52:6a:ea:5d:35:72:a9:81:
f4:91:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:14 2026 by rpki-client