Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: vTPXXltBNxrWEMTYAYBdp6CwXx01GAIQQpK2+iRH22I=
Subject key identifier: A9:83:10:C4:96:B4:1E:22:A1:34:71:04:3A:51:B6:CC:94:DA:A0:34
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 01A0DE057DC6F278A44E00DC01C8C2FC3BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 14:01:36 +0000
Manifest this update: Sat 26 Sep 2026 14:01:36 +0000
Manifest next update: Sun 27 Sep 2026 14:01:36 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: UMHlIxzAxAvU6b88Mh0j6fgtrRhD+64891FbkvheSZ0=)
2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:7d:c6:f2:78:a4:4e:00:dc:01:c8:c2:fc:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Sep 26 14:01:36 2026 GMT
Not After : Sep 27 14:01:36 2026 GMT
Subject: CN=a98310c496b41e22a13471043a51b6cc94daa034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:64:8a:cb:2e:98:57:b6:73:b8:08:15:80:
83:cb:ca:f6:4f:31:7a:ae:b1:7e:06:7e:05:51:18:
eb:ce:c9:1a:6c:b3:e7:a2:5c:f4:5d:df:8a:1f:f4:
24:e9:a2:86:d2:f0:8c:9d:84:56:c8:a6:e2:82:49:
f8:db:2f:3c:cf:95:24:db:ee:b3:02:b5:5e:dd:b6:
2e:c1:1a:e9:95:02:e9:69:27:89:ed:0b:25:8f:dd:
fb:36:f1:4f:a1:9d:76:99:a4:2e:7c:cf:f3:a7:ed:
da:02:37:5e:c2:37:37:0c:96:6f:4f:c2:9a:48:9b:
63:e2:cf:c0:31:af:d7:1b:bd:4f:87:2c:50:bc:a3:
d5:5c:76:24:4c:fd:0a:74:c5:dc:1b:10:2c:62:f2:
67:ff:a9:99:e5:5c:8a:5e:9a:cf:da:94:ae:f5:f4:
5d:ab:7f:9c:1d:bd:f4:62:98:20:05:0d:60:6a:8e:
f2:d6:08:e8:3c:c7:a1:5b:21:53:ce:0e:88:78:e2:
7a:12:e3:e9:dc:79:75:17:e7:6c:fd:2c:b8:a5:5d:
79:e1:1a:4a:0f:9b:dc:29:89:cf:77:03:58:a7:40:
a5:b5:cc:29:bb:91:8e:ba:b8:c3:a1:5f:d9:e7:2c:
c0:3e:58:16:d0:2a:d9:44:d8:57:4d:95:32:0f:a7:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:10:C4:96:B4:1E:22:A1:34:71:04:3A:51:B6:CC:94:DA:A0:34
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:e0:b8:0a:5a:54:2c:8e:bf:76:e5:72:0f:4e:b3:62:03:
88:1a:39:b8:4f:a7:7b:db:aa:18:7b:05:62:13:7f:8f:65:d2:
2d:d0:b4:c1:2f:1d:45:b1:91:31:e4:f8:f1:18:ea:8d:ae:3c:
f9:b4:0d:3a:5e:48:b9:e4:1c:48:55:df:7f:8f:13:2c:82:42:
18:99:51:cd:96:3b:3a:b9:79:e3:80:1f:cd:97:d1:56:01:d1:
1f:17:3c:df:6b:e5:72:97:e8:77:8e:3b:f0:da:17:da:f3:19:
24:59:66:dd:81:10:da:6c:c9:97:0f:0b:3e:5c:80:a5:58:12:
dd:0b:d2:29:4d:f3:95:d4:89:67:88:ee:65:87:91:6b:79:fc:
16:9c:19:92:fe:b9:a5:10:42:47:b5:c2:58:46:04:d1:57:e8:
ee:0f:1d:81:08:88:35:01:67:18:9e:c0:fd:78:84:59:18:2f:
52:26:67:28:e3:5a:80:d7:a4:c6:26:2c:e7:f0:54:a8:45:29:
6c:41:de:86:db:08:f6:68:79:d0:17:b5:fd:c4:fa:21:d7:bd:
72:d2:34:04:f8:74:ae:a1:44:f4:9e:25:6b:a5:e8:31:a8:79:
50:36:08:ba:c0:ff:2a:2c:d0:f2:9f:83:55:a5:0c:19:70:40:
85:9e:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:32:35 2026 by rpki-client