Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: KjR63nlZNKTkQjXAhcChp/ix6PR3YEoOi1DRh8rcU30=
Subject key identifier: 1D:80:F1:47:5E:52:7A:68:F6:6C:ED:1F:51:CF:27:FE:0C:0C:0C:7A
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019CAD59461E2D0A22DE790E12BCD55B3558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0A90
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: DmyDS14GvxeCMhrqtCZJF40ne0qUgWAIGi3N5ryD7l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:46:1e:2d:0a:22:de:79:0e:12:bc:d5:5b:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=1d80f1475e527a68f66ced1f51cf27fe0c0c0c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:b5:3b:20:6c:5f:50:11:56:a0:86:82:aa:
8c:42:28:28:1c:25:fc:14:f8:d3:42:cb:6d:f0:77:
2d:3e:80:05:77:3f:72:78:7e:41:5e:59:3f:60:56:
98:23:76:85:2b:49:60:66:3c:95:d7:b1:76:eb:a6:
ab:a9:4b:0a:97:32:cf:22:70:8d:9f:2e:d2:9d:05:
85:7f:9f:a6:ba:a3:03:29:28:1d:da:ff:c3:9c:76:
05:d9:70:d6:d6:29:26:2f:8e:d6:77:f0:af:bb:b2:
27:1a:09:37:16:83:78:d7:cb:7a:7d:b7:43:e3:23:
3e:ce:1c:75:e0:c1:3a:37:58:86:d6:ad:7a:6f:39:
db:74:62:92:10:3f:a7:6f:79:19:ca:b0:aa:d7:b1:
da:b3:25:19:aa:47:ce:dd:93:d1:07:72:ed:ec:1d:
06:05:fd:6f:9d:f2:42:ce:90:fe:e9:5e:c7:eb:4e:
53:2d:a8:b4:70:6e:ac:cc:13:cf:de:40:1e:61:93:
7b:80:78:18:89:88:8f:b7:b9:d8:0b:89:45:3b:2f:
47:34:7e:e9:45:df:f2:98:2d:05:f3:05:88:f9:7e:
f9:0a:f6:67:49:80:2b:65:a5:6f:8e:fa:7e:42:9c:
bd:67:89:ba:d6:fd:b9:f3:7c:fe:e2:ee:72:64:36:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:F1:47:5E:52:7A:68:F6:6C:ED:1F:51:CF:27:FE:0C:0C:0C:7A
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:14:97:1c:2f:e8:35:aa:46:96:ca:bf:c6:52:df:26:dd:
11:48:85:65:ef:86:d1:2c:34:d2:f7:40:cb:b5:ea:7f:f8:0f:
5b:29:55:96:29:27:fb:87:5c:f1:d6:09:54:57:56:12:df:3d:
24:42:57:1e:8a:05:e4:92:37:0b:28:91:81:4f:2f:5c:69:b2:
77:03:09:c8:f6:11:71:ae:c8:9b:c6:26:98:26:1f:6a:92:95:
bc:b9:cb:29:20:23:0d:09:f9:8d:42:fa:0d:2a:95:60:b6:e1:
16:81:82:9c:e0:79:c5:6c:13:55:0e:b0:86:11:92:f4:93:95:
47:98:f0:0e:e2:ab:99:71:b8:d8:05:87:a3:ca:d8:1b:76:1c:
cf:28:cd:1c:f2:bc:42:8d:b0:6f:f7:c8:00:d8:1d:ae:cc:22:
8a:12:31:99:89:75:fc:69:1e:7e:db:fd:c7:a8:7e:c8:e3:72:
33:26:aa:d6:4a:c0:17:49:28:8d:56:37:dc:5e:28:c1:85:5d:
e8:b4:df:03:6f:44:3c:ee:5f:09:c4:09:11:23:2f:78:5e:ed:
61:3b:1f:b9:5f:aa:f0:4b:52:ae:26:05:80:0d:16:ed:dc:24:
cc:c6:0f:1b:b2:56:10:10:1b:f5:4a:6d:6e:2d:e1:f2:fa:52:
53:5d:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:35 2026 by rpki-client