Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: XQOXDPtWafuAhRU5xC8p7QfQMqyGNvcHHI2ZhzpbMvo=
Subject key identifier: F2:3B:33:07:7D:3C:7F:F2:57:A4:29:F3:38:50:D2:F7:EF:EC:8B:C5
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 019CABA22D89E18B67F86135CAF315A8D298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 07A4
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: OrrBbBO2gxq1B1OTSWiXFdoDRPiB+7UbzcXOuD7uyLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2d:89:e1:8b:67:f8:61:35:ca:f3:15:a8:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=f23b33077d3c7ff257a429f33850d2f7efec8bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:95:74:2e:80:50:52:8a:00:eb:6e:05:b3:
5b:49:b0:cc:5a:17:8d:e6:bc:d2:78:6f:7e:35:a8:
91:36:e5:63:1a:ba:15:47:0d:2a:5d:10:ac:1e:d6:
c1:fa:f2:8f:70:49:7d:7d:ee:ad:ef:3b:7d:50:17:
73:22:63:e7:7f:81:ec:38:54:72:62:72:d9:73:e1:
17:16:54:cb:0f:5c:0e:c0:24:14:2b:3f:a5:a2:e5:
fa:f1:40:61:a8:a4:51:dd:65:b7:d3:3d:57:94:3d:
04:b6:e0:49:65:d3:82:9a:cc:94:03:5d:bd:d7:11:
65:01:c1:97:bb:d6:f6:98:de:98:8f:bb:af:aa:af:
d5:15:73:3b:c2:a4:f0:99:dc:e4:fc:a7:b8:e7:e2:
a7:f5:20:38:fb:5e:6a:3f:1b:3b:4b:a4:5c:39:96:
55:6d:f9:f9:99:2c:f6:e8:47:95:c5:30:59:b7:7b:
31:41:e9:8a:80:7e:15:49:21:37:61:1b:c7:ca:cb:
dc:ca:0e:98:69:7d:f3:33:5c:83:20:a3:3a:8a:f6:
19:1b:ce:96:b8:5e:90:e0:04:4f:2e:9d:b5:6b:44:
28:5f:13:cb:04:b2:e7:0a:db:bd:85:49:12:71:50:
b5:15:53:4c:84:25:41:b2:99:fc:f7:fd:34:78:ad:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:33:07:7D:3C:7F:F2:57:A4:29:F3:38:50:D2:F7:EF:EC:8B:C5
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d3:51:af:61:da:4e:33:44:ac:7a:37:3a:50:30:5b:d7:fc:
6a:a4:56:1f:e9:ce:85:47:c9:f1:c9:1e:11:71:57:a6:39:b0:
e1:e3:55:36:55:4f:0e:d2:9f:74:6b:d2:2a:3b:80:e5:42:e0:
2e:87:56:1b:a2:64:b7:cc:d0:43:c3:30:ff:d9:59:8e:8f:d3:
72:25:e0:11:b1:7f:0f:c6:fd:9c:b7:4f:0b:39:ac:42:73:7e:
ca:e7:b2:b7:3e:e9:c8:78:6b:eb:d7:91:d1:e7:e5:84:29:bd:
45:3a:50:17:c9:da:3a:58:55:7a:38:32:d5:a3:f4:15:7a:54:
06:79:c8:2b:47:2e:a0:7e:8b:b6:36:99:b7:29:f4:5c:a5:1f:
f9:47:6a:bd:06:e6:17:0a:cb:5e:ee:17:02:ec:e4:02:61:bd:
fc:a8:37:0e:37:df:d9:95:3a:e1:54:ae:6c:86:70:9e:bb:8a:
cd:6f:8d:0e:7b:de:c0:b9:74:6f:35:9d:7f:7c:d7:b7:62:1d:
03:3b:da:34:d6:1f:26:59:b1:c7:e6:8d:42:2a:9a:9f:b7:9b:
67:f8:e6:5e:73:6f:81:d7:eb:e5:b3:18:68:22:d5:c9:bd:22:
71:f2:ed:b1:df:9c:85:99:b4:7e:f5:13:c3:56:f0:da:20:36:
a6:ee:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:49 2026 by rpki-client