Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: 4a/14CgEA11cu5iJ7vCLHI+6fjwduP02/x3A5D0np8I=
Subject key identifier: E8:6E:F2:82:48:20:EA:E2:07:82:EE:03:67:65:CA:30:6A:31:31:4E
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 019D977398A1CF0432C10D6A550643158261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 18:00:28 +0000
Manifest this update: Thu 16 Apr 2026 18:00:28 +0000
Manifest next update: Fri 17 Apr 2026 18:00:28 +0000
Files and hashes: 1: 38e1debnGbuUF3x2YWLVTadnl34.roa (hash: o46Cv8Q4FIZO6x9+lAsM0sqzeRD81h3lSOBcRfeJ5CE=)
2: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: wHy2k+ZLUesy7LCDqUhUegXJLZhchn+5lXWUVtPqQXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:98:a1:cf:04:32:c1:0d:6a:55:06:43:15:82:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Apr 16 18:00:28 2026 GMT
Not After : Apr 17 18:00:28 2026 GMT
Subject: CN=e86ef2824820eae20782ee036765ca306a31314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:82:95:93:9f:24:b2:9b:97:e1:ef:2e:c0:
20:4e:25:4e:8d:7f:1d:b4:5d:b5:4a:14:ac:55:31:
48:c3:a0:06:47:d2:53:40:d0:02:b3:c9:1c:e6:b4:
ca:b8:97:4b:e2:2c:9f:f9:6e:7d:68:47:d4:c3:ba:
3e:f5:a2:54:89:96:f6:b6:17:43:f4:1c:fd:fe:d2:
eb:d0:f1:95:76:fb:cc:44:2b:09:06:91:57:f7:b8:
eb:e5:2f:89:d5:cf:8f:ab:12:d2:21:fb:2b:41:0e:
09:e1:f8:93:b0:78:75:7c:fa:5a:a1:d3:8f:b7:67:
64:f4:7c:66:18:4f:72:5c:93:5f:f7:c8:ce:15:67:
f5:85:d9:77:03:10:c9:35:ca:cc:ff:bc:26:d2:90:
03:27:19:1d:d5:64:19:69:4f:75:cc:2c:c3:e8:b6:
ec:a3:2b:40:80:5f:03:cb:c0:e6:1b:a3:d2:24:24:
3b:06:f9:bf:0d:09:fc:e3:4b:c2:8f:46:3e:41:4c:
51:5b:bb:5d:5d:2a:c0:e3:ce:56:28:1e:b0:82:aa:
72:42:a1:21:20:3b:0f:24:c8:e6:c7:1c:19:ae:d0:
ca:a0:00:6d:3c:70:bd:e4:b7:32:a6:87:e8:2b:79:
1b:da:ec:ca:7f:65:41:0d:f7:15:91:c5:5a:a3:84:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:F2:82:48:20:EA:E2:07:82:EE:03:67:65:CA:30:6A:31:31:4E
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:50:cf:e0:ee:a2:b6:4d:0e:f2:b9:20:90:ac:65:f1:23:e0:
6f:a3:54:1d:74:db:8f:3d:18:c5:c4:a2:a7:99:a6:d7:9c:cd:
c9:7d:86:28:67:c5:ed:a1:71:98:bc:17:bb:8f:1c:9a:95:c6:
93:04:fb:de:02:50:3a:b3:00:69:93:3f:94:d3:71:ab:2e:e5:
4e:44:5e:20:18:1a:96:8c:45:38:f7:46:c3:15:2d:45:a8:c3:
33:68:b0:58:ee:a0:e5:30:ee:76:7b:51:a7:d2:18:ad:31:3b:
37:40:53:46:89:66:98:63:27:78:0b:52:fa:48:ef:24:69:23:
16:27:0c:87:08:a0:2f:2c:75:8a:3b:dd:91:0a:01:e7:1b:48:
b0:d1:57:dd:0e:48:fd:7c:5b:88:c4:2a:37:3c:4f:08:0b:71:
e0:05:02:c2:e4:69:94:89:1d:c9:49:0a:fa:e2:c2:6e:0b:0c:
e5:6c:1f:a3:48:3b:35:c7:7f:30:68:44:e2:5c:c5:64:11:2d:
61:68:07:b6:f3:f0:1c:5e:66:c6:8b:ca:c9:36:c0:ec:ee:11:
84:ad:06:87:b9:57:b1:3c:5e:5e:dd:97:e3:34:47:47:f3:9c:
1e:60:ae:1e:1d:c1:c2:bb:cb:c8:7a:47:5a:36:f5:72:74:75:
e0:08:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:55 2026 by rpki-client