Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: He6ak58LTFFjBrUyJwsX/MGQHPYgbLkGKBeSqpoOwVE=
Subject key identifier: 49:93:4B:0D:B8:3E:DB:3E:67:8F:09:17:6E:F9:7B:A2:2E:73:71:C9
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 019CABD9FAD882BD81FC609A7F8A021FE08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 38e1debnGbuUF3x2YWLVTadnl34.roa (hash: o46Cv8Q4FIZO6x9+lAsM0sqzeRD81h3lSOBcRfeJ5CE=)
2: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: 411/Xojht9IadNVRSitBAAk6XSUr1EcwgaWqgNjqhfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fa:d8:82:bd:81:fc:60:9a:7f:8a:02:1f:e0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=49934b0db83edb3e678f09176ef97ba22e7371c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:67:0d:30:44:34:27:32:9d:71:84:cf:e2:
34:88:56:b0:30:04:ef:2b:60:d6:8c:30:38:eb:f5:
e3:db:56:eb:54:a9:5e:f5:c9:b3:32:dc:e5:2a:65:
c3:fe:1e:b4:4a:6e:c3:94:eb:38:fe:f5:a7:66:6d:
76:5c:6e:2c:a1:a1:8b:51:26:7f:e4:d4:a0:5f:50:
0c:e4:5b:e7:25:3e:c9:c7:27:41:ea:d9:88:2f:55:
05:7f:ff:f7:00:5a:2b:79:4c:b7:39:dd:07:69:fe:
36:fd:22:3e:a5:de:d2:be:30:48:20:b3:1f:c0:f8:
a4:40:5c:d6:0f:e9:37:0f:57:ee:bb:82:1b:bc:b3:
c6:cd:37:1a:a3:7c:96:e0:f7:5b:14:69:64:af:ac:
ff:48:b4:f8:d5:04:e9:d4:17:ad:fe:ac:3f:2b:77:
ee:ed:20:9c:71:7c:ae:2f:99:88:21:ce:e0:de:c0:
61:eb:27:53:db:02:67:e5:43:7e:0b:de:33:2c:25:
16:85:0f:36:3d:6c:9d:33:0a:46:97:8f:55:77:82:
2f:e9:a5:b2:49:18:22:d3:7f:0d:71:bf:c6:1b:40:
a5:d0:ed:a8:59:49:89:b7:a7:8a:4d:cb:7e:2c:0c:
7f:d1:60:1f:f3:ce:f7:0e:8b:0c:e7:2d:2a:f5:a3:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:4B:0D:B8:3E:DB:3E:67:8F:09:17:6E:F9:7B:A2:2E:73:71:C9
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3d:b1:f1:1d:86:5a:47:da:59:67:9d:65:23:43:26:a1:e8:
6a:0d:2e:e4:fe:1e:be:e2:bb:3a:b0:63:b1:b1:85:6c:0c:ac:
4b:f8:c1:12:25:6c:b5:97:57:73:dd:6b:84:96:c2:36:0a:a9:
6c:09:a7:07:d0:70:3f:fe:e7:60:37:52:5f:ba:c4:4f:0a:06:
36:ae:97:75:c4:f0:23:6f:de:ab:ca:7d:e3:d5:21:7a:c2:2c:
7b:58:08:b6:15:3d:45:72:de:70:ad:db:7f:e0:1d:81:86:e3:
c5:9a:c3:a5:6b:02:e5:b2:c9:87:46:8e:e6:c6:72:b7:ef:ab:
d5:37:ba:f1:c5:3c:32:4c:1a:50:a2:f8:b0:16:ec:66:2a:c7:
7b:c8:51:d9:97:4d:8c:aa:55:d1:39:05:60:e3:e4:ea:e1:76:
e3:ab:1f:88:3c:7d:06:e4:1b:99:ad:2b:14:85:2c:3a:40:1b:
26:7b:03:65:e0:7d:05:72:bc:9d:e6:ae:28:01:ab:50:22:ad:
27:d9:2f:be:76:5f:8f:55:4f:d6:16:5b:30:7a:49:b4:5a:c2:
56:cb:45:48:63:67:a4:90:6d:71:1a:9c:e0:fa:85:ae:cb:b7:
79:50:e9:27:1f:8d:a4:d2:0b:78:63:a2:ed:54:34:85:09:e8:
0f:08:83:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2frYgr2B/GCaf4oCH+CMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNjAwZDI5MWQ0ODIzODM1YWYxMDNhYWQzOWVkZTA1YmQx
MmM5YjYwHhcNMjYwMzAyMDAwMTU1WhcNMjYwMzAzMDAwMTU1WjAzMTEwLwYDVQQD
Eyg0OTkzNGIwZGI4M2VkYjNlNjc4ZjA5MTc2ZWY5N2JhMjJlNzM3MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C9nDTBENCcynXGEz+I0iFawMATv
K2DWjDA46/Xj21brVKle9cmzMtzlKmXD/h60Sm7DlOs4/vWnZm12XG4soaGLUSZ/
5NSgX1AM5FvnJT7JxydB6tmIL1UFf//3AForeUy3Od0Haf42/SI+pd7SvjBIILMf
wPikQFzWD+k3D1fuu4IbvLPGzTcao3yW4PdbFGlkr6z/SLT41QTp1Bet/qw/K3fu
7SCccXyuL5mIIc7g3sBh6ydT2wJn5UN+C94zLCUWhQ82PWydMwpGl49Vd4Iv6aWy
SRgi038Ncb/GG0Cl0O2oWUmJt6eKTct+LAx/0WAf8873DosM5y0q9aN89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmTSw24Pts+Z48JF275e6Iuc3HJMB8GA1UdIwQY
MBaAFC9gDSkdSCODWvEDqtOe3gW9Esm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjIt
Y2JiZjc2ZjM1MzNhLzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjItY2JiZjc2ZjM1MzNh
LzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj2x8R2G
WkfaWWedZSNDJqHoag0u5P4evuK7OrBjsbGFbAysS/jBEiVstZdXc91rhJbCNgqp
bAmnB9BwP/7nYDdSX7rETwoGNq6XdcTwI2/eq8p949UhesIse1gIthU9RXLecK3b
f+AdgYbjxZrDpWsC5bLJh0aO5sZyt++r1Te68cU8MkwaUKL4sBbsZirHe8hR2ZdN
jKpV0TkFYOPk6uF246sfiDx9BuQbma0rFIUsOkAbJnsDZeB9BXK8neauKAGrUCKt
J9kvvnZfj1VP1hZbMHpJtFrCVstFSGNnpJBtcRqc4PqFrsu3eVDpJx+NpNILeGOi
7VQ0hQnoDwiD8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:25 2026 by rpki-client