Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: hbZmGo4BN8+LN+1yzbWeJJtJk3iPguHl0JuKidP+8rc=
Subject key identifier: A9:98:9F:EF:B0:8F:53:CA:D3:4B:0C:57:B7:81:7D:DD:82:FC:46:81
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 019CABD905DF4754B04BEA6EC3F67E2F7B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: KkzkDZUNrbsYg1/64IZJBUWWlSv9MjpYlcGtEOvWuKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:05:df:47:54:b0:4b:ea:6e:c3:f6:7e:2f:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=a9989fefb08f53cad34b0c57b7817ddd82fc4681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:0b:01:10:bf:9b:ae:ea:06:5f:bd:48:4f:
e7:a5:b4:25:0e:f5:3c:7e:70:58:15:66:0a:b2:9a:
79:a8:9c:dd:71:ee:be:1e:a6:46:a3:26:d7:8f:bf:
33:b2:03:a5:17:34:2b:a0:eb:3e:87:3d:86:54:6f:
47:d3:54:e0:9d:1d:c5:8a:a6:a2:85:e6:64:93:aa:
4f:3a:85:1c:5d:ad:e6:73:0a:7e:0a:21:06:92:42:
73:d6:9b:07:e0:e1:fe:ad:df:11:c8:32:13:c1:f2:
d4:ab:74:b5:7c:17:d3:ad:6d:a4:69:ba:ab:0a:60:
28:0d:1a:c2:53:35:85:86:20:e2:cd:03:4c:6b:cc:
d9:3c:40:cf:99:68:e3:e5:92:a3:2f:2e:06:df:c7:
37:ef:74:83:6e:f4:e6:11:f9:05:52:6d:c3:a9:f8:
a1:4c:44:d6:c5:48:a7:7a:d6:9e:9b:06:55:3a:7c:
91:c3:84:09:e0:d2:e1:ec:5b:dc:66:f9:d9:36:04:
ab:41:75:6b:d7:04:60:7a:6b:77:08:68:a5:ac:18:
fe:1c:d2:f9:60:d2:c7:a4:63:b6:a5:3a:fc:d6:c4:
10:55:14:f8:93:93:f1:ea:e0:01:92:cc:cf:23:95:
15:c0:90:f6:49:08:9f:ab:b6:1b:e5:d3:0c:70:a1:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:9F:EF:B0:8F:53:CA:D3:4B:0C:57:B7:81:7D:DD:82:FC:46:81
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:b3:84:0c:d2:e9:83:92:c7:65:6e:2e:8d:fe:4b:11:0f:
b5:61:26:8b:6c:44:bd:a8:78:aa:71:ea:ff:0c:87:f2:56:7e:
d4:2d:64:56:61:4f:6b:c0:dc:fb:d3:07:21:92:2e:79:c4:8c:
8b:6b:c6:36:ca:de:2e:8f:a2:46:7a:df:9d:d2:0d:73:fb:9a:
26:e7:9e:31:68:cd:f9:68:8e:cf:b7:f2:fb:e8:bf:e0:4d:57:
0e:36:14:10:4f:ff:8a:97:b1:26:1a:e4:48:6b:8a:66:96:ca:
ef:75:52:75:4a:ff:b6:30:22:45:c2:06:4d:49:38:a4:0c:43:
95:28:1f:8e:24:b8:c4:8b:f4:47:5e:61:4b:58:11:d9:23:0f:
bd:ef:fd:a0:1c:98:be:2f:36:21:bb:f1:67:3e:eb:85:e1:c3:
25:1a:e2:ae:ff:56:74:aa:e3:31:a7:57:9f:ef:86:6d:ee:a3:
b0:0b:e6:e9:90:2a:24:41:93:c0:f8:07:50:54:ca:48:77:d5:
19:e5:c6:69:99:b8:da:77:63:0b:71:24:20:45:1d:83:c9:ee:
ff:87:db:48:03:f3:21:60:3d:4f:20:f4:1f:09:08:b5:98:0d:
18:6b:c2:ca:e4:45:19:9d:66:fa:18:1b:95:14:e7:cd:42:10:
65:3e:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:20 2026 by rpki-client