
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
File: L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft (raw, json)
Hash identifier: 1T1a1mOXYHfyy70scKZJdRFlDLmNw/ue4Dk+loDnEiE=
Subject key identifier: FC:F6:E8:71:E3:1D:58:34:07:D7:73:5D:E4:BC:A8:4B:DF:CD:18:71
Authority key identifier: 2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
Certificate issuer: /CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Certificate serial: 019FA7F47341D7500AAF7C34FFB449A5A8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
Manifest number: 12
Signing time: Tue 28 Jul 2026 09:00:43 +0000
Manifest this update: Tue 28 Jul 2026 09:00:43 +0000
Manifest next update: Wed 29 Jul 2026 09:00:43 +0000
Files and hashes: 1: L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl (hash: 5dc9VkUHOEeQQTwtW91piqOTS5bFcPj+oZa0ru8h+PA=)
2: XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa (hash: BUCSZEjdFaY1WzA8rUkzwkz2gqTUrzX9Z/dRqbYJ/Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:73:41:d7:50:0a:af:7c:34:ff:b4:49:a5:a8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Validity
Not Before: Jul 28 09:00:43 2026 GMT
Not After : Jul 29 09:00:43 2026 GMT
Subject: CN=fcf6e871e31d583407d7735de4bca84bdfcd1871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:b8:e0:b4:fb:7c:3a:dd:50:21:30:e5:a1:
5b:74:ea:3a:2a:9a:b1:32:08:48:67:8f:f8:c8:da:
b8:3a:2a:ad:1d:54:d5:87:d0:6d:b5:05:a9:21:af:
5b:f8:87:f3:dd:dc:0b:d6:2e:90:70:87:31:24:28:
f1:f5:9c:f9:01:de:e6:e9:f1:b6:71:3d:5d:bc:93:
0d:49:8d:6e:4a:34:6a:dd:d0:7a:1f:6a:d4:29:8f:
29:6f:03:f6:a9:fd:c0:0a:db:06:62:09:af:0c:f1:
d2:0f:1e:87:16:fb:66:e8:84:88:f3:47:40:fb:f2:
4f:08:6a:7b:f7:ee:4d:dd:e9:4b:1e:de:bc:3a:be:
6c:21:15:0d:ad:d9:ff:9a:09:d6:75:bb:39:2c:d4:
0d:99:f2:2a:16:02:6c:d2:60:67:db:b8:00:30:68:
eb:ba:42:99:7e:fe:13:6b:94:a5:ba:e7:b9:c9:78:
88:c5:e5:76:94:5c:ca:b5:20:8c:85:e9:b4:64:b6:
8c:3d:c9:16:bf:f9:9d:19:79:de:8e:d8:fd:eb:cc:
41:58:88:c7:b3:9c:75:78:1d:6c:20:8c:b5:12:94:
15:ef:57:93:a2:13:c5:4c:39:ec:e7:75:06:cd:39:
c6:c7:7c:bb:d5:cb:e4:23:ae:73:c9:ca:ec:52:3c:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:E8:71:E3:1D:58:34:07:D7:73:5D:E4:BC:A8:4B:DF:CD:18:71
X509v3 Authority Key Identifier:
keyid:2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7d:04:83:20:fd:69:68:92:f5:4f:32:c5:d5:9a:d1:5d:d1:
ad:d2:79:b6:a8:27:03:34:6a:d5:26:95:3e:07:62:d1:e0:5e:
c1:a1:ae:b5:a0:76:69:d3:f8:23:0a:39:c3:c9:dd:7f:f7:22:
f2:c9:0a:68:7b:5a:3a:e4:c1:23:84:53:f0:15:23:3f:a3:7c:
31:28:52:c8:c5:fb:8c:d9:4a:70:6b:ae:83:fc:fd:b7:62:16:
27:55:14:a6:c2:8a:8f:12:b3:27:b0:e4:58:97:8f:4a:fe:35:
82:bf:a6:45:fd:dd:24:8b:1a:18:9e:dc:0b:a9:4c:67:3b:24:
ff:5f:cf:9c:4f:39:25:10:7c:0c:ec:28:d6:39:0c:8f:86:39:
61:77:d4:90:4a:08:1d:54:17:72:ad:0a:9d:d0:ef:3d:06:08:
a2:b1:a9:d1:bb:ee:6b:bb:a9:32:2c:63:cb:23:f1:4a:e5:21:
56:37:72:f1:23:6c:95:f3:50:bb:f5:d6:c2:75:90:28:b5:b2:
57:40:ca:2b:a6:ba:15:80:f5:25:02:28:c6:97:98:20:49:3f:
b7:77:1c:f2:7f:3f:4c:6b:5f:17:4b:3f:16:36:81:ce:33:61:
41:68:87:31:ca:e6:bd:16:74:f5:f2:4d:63:96:60:7a:bd:99:
53:9c:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:40 2026 by rpki-client