Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: JfS7Neds3BQEw6LYC90gi7FMrt3iTHseE+fGHUrKv9E=
Subject key identifier: 04:0C:46:81:C6:75:18:A2:80:EA:D6:55:03:77:FE:8A:16:F3:2E:BD
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019CAC47421BA4921D07073C975AD7EC8A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:16 +0000
Manifest this update: Mon 02 Mar 2026 02:01:16 +0000
Manifest next update: Tue 03 Mar 2026 02:01:16 +0000
Files and hashes: 1: BcdnvgFk_BPjfJay48B0cMIpc0w.roa (hash: XfisUF3xoeDRYkIvVZku+7kk1qU1c+uuDUdRONEZgfE=)
2: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: rozSBsI66J6y2e4RW2USYRy7CxgQbu7Oy3eiED3qe8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:42:1b:a4:92:1d:07:07:3c:97:5a:d7:ec:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Mar 2 02:01:16 2026 GMT
Not After : Mar 3 02:01:16 2026 GMT
Subject: CN=040c4681c67518a280ead6550377fe8a16f32ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:dd:5f:2c:ab:b4:41:61:8c:ae:2d:ff:ee:
ad:12:f4:1f:a2:9c:6c:85:ed:14:1b:2a:0e:95:1a:
fa:eb:b6:ce:de:da:14:bf:54:b6:c5:1c:05:ff:fc:
03:43:f1:5a:e8:50:5f:21:76:9d:8a:22:de:2e:1b:
f2:05:e2:58:09:21:81:b1:98:02:54:22:98:3e:47:
8a:2c:42:11:17:a5:bc:27:29:87:10:d4:36:45:88:
b9:d5:51:05:1e:57:ff:9e:cd:8d:e5:b7:ba:ac:8a:
07:83:25:2a:e7:7c:6b:11:2c:80:72:39:f4:9a:f6:
76:66:19:e5:87:bd:30:07:1d:fd:f6:75:94:2f:06:
60:5a:79:ae:f2:81:ec:62:ca:d7:d9:17:c2:27:ae:
12:48:88:3c:34:ab:10:6d:1e:f3:3d:a5:fe:86:cc:
63:68:13:fe:35:2a:0c:a4:70:68:27:47:74:cd:fa:
fb:a3:fb:6f:3b:55:41:92:45:21:48:db:42:6d:8b:
70:d3:d9:be:55:94:e2:d4:11:d4:3f:c6:d9:bc:4c:
17:61:d1:f7:58:2d:d3:96:41:55:63:af:b1:e8:61:
54:f0:58:e7:58:03:fa:73:04:1b:6e:75:1c:dc:11:
cd:10:43:72:db:42:f4:f2:84:1d:e1:30:76:a5:ff:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:46:81:C6:75:18:A2:80:EA:D6:55:03:77:FE:8A:16:F3:2E:BD
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:17:0e:59:e9:c9:33:bf:dc:d5:d6:86:fb:f3:ec:1e:0d:98:
e9:ba:f2:99:e3:a2:e8:30:6c:3d:d8:b9:62:7f:62:9a:10:f8:
00:49:a7:5a:0d:4c:25:25:1b:d6:ea:cd:ee:1e:f0:b2:51:28:
5e:52:63:ca:c7:78:82:f7:44:72:70:90:2b:ef:30:57:32:b2:
92:1d:cd:97:98:13:23:a3:42:75:b7:a0:5a:2d:b8:ca:4f:34:
34:a2:b8:54:80:61:b5:eb:a0:3e:f1:c1:37:8b:02:5d:8a:51:
17:bc:27:35:50:08:79:6e:47:f5:58:99:59:fb:c5:eb:6d:78:
2c:2c:4e:61:fe:54:08:80:7d:fa:b3:58:79:32:df:4b:f0:8d:
3c:2f:51:80:b5:b8:53:74:58:e6:a3:65:a4:af:a3:53:57:d8:
17:5c:09:1f:36:45:86:2d:6f:72:e5:6b:64:95:2b:81:82:5f:
6e:58:cf:fc:3a:ea:17:fb:c3:fd:3c:9b:d3:c4:b7:9f:26:78:
2d:2b:b2:a8:25:89:4c:67:67:b5:c7:4d:25:1e:f5:5a:35:ff:
f8:82:b7:ff:dd:44:6d:03:6e:a9:4c:61:b1:b0:5c:46:14:ef:
e7:3d:33:1c:34:b5:92:64:66:9d:2d:8a:bb:23:bc:01:ce:d0:
f7:23:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:25 2026 by rpki-client