Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: +P+7PqVdAOWcyN+xsIaNlMFz3HDbPBHDohdPKl7g7fg=
Subject key identifier: B1:C1:58:46:3F:12:E5:25:0A:FD:15:82:F4:0C:44:CD:86:F6:D4:AD
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 019CADB10B829550869FBB004DCC13DD10C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 02
Signing time: Mon 02 Mar 2026 08:36:27 +0000
Manifest this update: Mon 02 Mar 2026 08:36:27 +0000
Manifest next update: Tue 03 Mar 2026 08:36:27 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: 0CM2nzIiEQg5DQGgVx8xiQ2PMnJTR7yoWphV94UEHRc=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:b1:0b:82:95:50:86:9f:bb:00:4d:cc:13:dd:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Mar 2 08:36:27 2026 GMT
Not After : Mar 3 08:36:27 2026 GMT
Subject: CN=b1c158463f12e5250afd1582f40c44cd86f6d4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:35:6c:14:32:3a:cc:c0:d8:3c:c3:a6:cb:
31:95:3f:cf:e4:7f:ed:f1:76:b0:6c:8d:4f:bc:f6:
b0:ac:0e:6e:a9:85:be:fe:50:97:34:c7:3e:8c:b6:
78:a5:1c:44:0b:06:cf:4c:41:e4:68:1d:61:0a:1f:
52:25:d3:31:44:4c:c0:e9:40:36:74:7e:8c:af:79:
5e:7f:4f:ec:2c:56:f3:f9:f5:b1:45:60:f4:6f:d5:
93:77:0b:27:a5:6f:94:90:ca:d9:92:61:93:c2:64:
e2:ed:a3:e2:04:14:f0:d9:ab:ef:61:81:9c:bb:45:
75:d2:62:dd:78:34:89:a7:ff:fa:9e:a3:82:1f:db:
5f:0e:17:0a:05:9c:5f:66:06:84:e4:77:a7:76:f3:
15:14:c0:e9:2a:6b:03:0c:f0:43:0b:c3:80:13:5a:
48:e7:fb:a5:8b:d6:ed:6f:13:00:63:c8:2a:6a:10:
d5:d4:e4:bb:19:5a:a5:da:0c:7f:da:3a:a0:eb:a3:
a8:4e:e7:eb:e5:63:a5:30:72:a5:50:ec:87:70:2a:
ac:24:37:50:9a:86:51:45:0b:76:4d:96:b4:f3:d8:
f2:00:b7:de:bb:c5:d4:a2:ef:c6:63:28:ad:d0:01:
ed:46:24:53:86:cd:08:da:cd:8e:ea:6f:f4:79:b2:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:58:46:3F:12:E5:25:0A:FD:15:82:F4:0C:44:CD:86:F6:D4:AD
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bb:c4:a3:4c:dc:ea:32:98:74:57:c4:ee:03:ad:c4:c1:40:
94:8b:d3:03:46:49:fb:1d:6f:53:04:90:5c:ae:4c:35:0d:f8:
70:70:5d:1d:17:c9:2e:98:23:ff:fb:7c:ee:ec:2f:2b:c2:53:
e1:bc:f0:b7:9d:5d:76:ed:e4:b4:e5:b9:3b:44:70:f6:35:4c:
9d:23:e6:19:15:53:a9:e1:3c:f2:ed:dd:d4:9c:50:ff:4c:66:
19:ee:03:ed:21:f2:a5:61:ea:82:20:2f:66:ff:73:57:3d:b2:
7a:c8:2c:fb:97:b4:66:91:2b:b4:6f:fc:48:a6:4c:2d:6a:5e:
31:e9:8f:9e:b4:10:ec:d7:44:ce:ab:26:25:c5:45:4c:d9:7e:
18:b9:06:fc:a0:92:62:91:6a:55:30:43:ee:62:18:38:ba:bd:
61:8e:35:a5:14:a9:07:41:50:aa:a8:40:c9:cd:82:ef:ca:a9:
37:61:56:f2:69:e3:ec:20:ad:c2:2f:72:6b:f3:b9:c4:15:f8:
33:08:30:fa:eb:6e:66:f9:9c:71:9a:4e:64:33:1e:a5:04:59:
3c:f3:44:59:14:1b:8e:48:9a:cb:39:ea:ba:d8:92:4d:23:80:
5c:96:bd:31:db:b1:b7:e7:27:d7:3c:b9:f3:b7:e4:7c:96:65:
5a:78:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:27 2026 by rpki-client