Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: cPWltcBHQWUrOnp/WYDfSn2NZ/tYGHHC37jIu+cuObg=
Subject key identifier: 0E:19:48:21:A8:DF:0A:4B:C3:D3:32:20:4B:56:2C:D5:26:65:76:5C
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019CAF7EF4D2EFA47A779F186081106364E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 0244
Signing time: Mon 02 Mar 2026 17:00:58 +0000
Manifest this update: Mon 02 Mar 2026 17:00:58 +0000
Manifest next update: Tue 03 Mar 2026 17:00:58 +0000
Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: /WF0bKdvN/ECZdQ3z2B40GktlF2iWSmK51Y3McqKxMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:f4:d2:ef:a4:7a:77:9f:18:60:81:10:63:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Mar 2 17:00:58 2026 GMT
Not After : Mar 3 17:00:58 2026 GMT
Subject: CN=0e194821a8df0a4bc3d332204b562cd52665765c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:aa:e0:fd:d3:95:80:7c:05:ce:e9:56:e1:
de:ce:f9:ea:8c:11:68:15:40:0b:63:d9:45:01:0f:
94:cd:9b:8f:bd:dd:7a:dd:4a:d5:5d:0a:f7:d1:77:
6b:75:09:53:e0:67:4f:91:05:0f:4b:d3:a1:46:89:
e8:0d:aa:d8:70:00:7d:f8:61:3a:ca:1e:2c:db:a9:
f1:c4:0e:71:a8:ee:76:47:43:71:97:fd:1e:4c:75:
f1:7b:5e:43:45:46:3f:37:77:dc:c3:41:4d:a4:e7:
5c:c5:10:c6:aa:79:3d:35:a4:5d:da:f9:c0:ba:4c:
1c:9e:71:06:75:ce:7c:3b:8f:70:18:0a:ac:db:31:
5a:a0:8b:bd:39:03:45:a0:58:07:88:37:d3:65:68:
c5:15:b6:ec:b3:70:73:27:63:99:83:d8:71:97:ac:
92:df:1f:f4:df:57:43:b4:c1:81:8c:7c:83:28:fb:
8b:56:ba:b2:3c:ca:af:19:90:b1:8e:1c:0b:ad:58:
38:95:4b:fa:eb:53:4f:37:7f:f5:e1:48:60:10:fb:
ae:66:e2:59:4f:04:d0:7f:87:97:47:a5:5b:72:c8:
69:90:1f:d7:b4:65:08:e0:f1:21:90:e5:c6:44:ad:
38:03:68:9e:b6:23:64:69:a9:fd:2d:3e:6b:28:19:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:48:21:A8:DF:0A:4B:C3:D3:32:20:4B:56:2C:D5:26:65:76:5C
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7a:e9:fb:79:f6:47:fa:6f:cd:1c:ee:bf:ae:b9:62:16:40:
08:90:3f:63:9c:6b:d9:c3:45:93:99:31:51:f8:ac:e0:19:1d:
54:5e:79:9f:51:49:e2:b8:fa:4f:5f:0e:be:ea:78:c2:b9:7e:
ab:0c:fd:98:d1:c9:b9:99:6f:e3:73:5a:f6:26:63:16:ef:d2:
27:f3:0a:2a:47:71:ca:4d:a4:27:c6:26:7d:32:4e:b7:ba:d8:
fd:88:f3:d2:57:08:27:8b:9f:d3:7e:0b:2b:b8:81:6f:ae:bf:
52:85:22:7a:ca:38:62:6b:6d:42:34:d3:09:96:01:17:2c:0c:
51:c7:7c:61:6d:97:2d:79:44:25:70:cb:e9:e9:4a:3e:32:81:
a8:e8:bd:d1:57:04:6a:1b:45:a1:06:95:b1:38:32:fb:c8:fc:
52:d8:c2:e2:6c:02:a5:b0:26:4d:1e:25:69:69:98:1b:36:e1:
fe:cc:e8:1e:77:35:f8:39:7a:04:ad:ea:ab:f9:64:53:14:52:
b8:80:6b:10:ae:f7:20:42:b3:a5:36:e7:67:e7:46:c6:dd:98:
63:3a:a3:8f:d0:e5:8d:d3:52:56:54:23:b4:27:2a:7a:d4:7f:
60:7c:d4:ce:2a:24:4d:bc:bd:a1:f6:3c:3c:e7:05:7d:f9:55:
3e:4c:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:28 2026 by rpki-client