Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: swsfSFcX6vzCMJUAGQVHq8bIDgYnS0oHJUn3uEL4gLA=
Subject key identifier: AA:6F:76:83:44:E1:4B:8F:0D:17:88:D5:33:19:C9:49:E8:80:85:07
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 019CAA8FAF171390E64B5D5E1FFD6A4D22D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 0926
Signing time: Sun 01 Mar 2026 18:01:09 +0000
Manifest this update: Sun 01 Mar 2026 18:01:09 +0000
Manifest next update: Mon 02 Mar 2026 18:01:09 +0000
Files and hashes: 1: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: RMTdSceI1Cu0yKsXWbK+2FdjjRGvW8l+ikoPhxrvcZU=)
2: wRkYU-8UwR69v9239dh2hReiLIk.roa (hash: qk1tAsneRLOzj3I71YrKf4Qz3NDzdsyT/yJUXhc7iYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:af:17:13:90:e6:4b:5d:5e:1f:fd:6a:4d:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Mar 1 18:01:09 2026 GMT
Not After : Mar 2 18:01:09 2026 GMT
Subject: CN=aa6f768344e14b8f0d1788d53319c949e8808507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:57:e4:1f:f1:75:59:d1:eb:9b:88:14:76:
97:c0:01:bf:60:5a:5e:6d:e7:3a:ed:6a:7a:cb:ed:
ea:c6:be:55:a8:ee:fb:ce:70:e6:ee:88:8d:f7:8d:
e2:a2:d2:da:02:9c:92:c4:9d:06:c6:17:19:08:ef:
78:bb:e4:85:ba:df:c6:7c:3a:7e:25:49:27:1a:e6:
13:9e:82:bd:c2:b1:29:37:92:d3:e3:7e:b6:7f:86:
23:4c:91:cf:74:40:26:9c:c1:ad:e9:a8:1d:00:46:
da:c4:ae:91:bb:be:76:cc:84:c1:e0:2f:8b:d7:51:
cd:6e:eb:56:a5:3b:d9:b2:98:e1:2a:d8:1a:ad:84:
d0:55:6c:d3:f8:62:1d:c8:69:8b:50:ed:0e:58:70:
4d:7d:42:d0:58:80:84:0b:a2:06:db:dc:9c:4f:57:
b3:6a:9f:a2:32:01:f5:a4:e4:99:a1:ec:3b:e0:29:
11:34:92:b8:e5:a3:f1:c5:d4:b2:73:58:cf:9b:df:
0a:1a:67:d8:38:4d:90:c1:4f:ac:f9:70:31:61:0d:
5d:2d:95:f7:7d:5e:3a:49:b6:56:cd:51:3e:d4:ab:
52:e7:79:9c:42:d1:19:a6:bf:8a:31:08:61:f5:ac:
2f:1d:38:e1:dc:fe:ee:d0:52:c2:52:77:ef:77:37:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:76:83:44:E1:4B:8F:0D:17:88:D5:33:19:C9:49:E8:80:85:07
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:d5:84:c4:f9:b1:43:46:65:27:e1:ad:34:c2:29:70:15:
31:e9:25:de:8d:20:71:f0:c7:29:2b:29:10:02:12:e9:de:a8:
7a:78:ff:09:b2:75:5c:87:2f:13:a0:aa:57:e3:34:6e:33:42:
4a:f0:62:58:22:ba:dc:11:d7:a8:5f:2e:d9:58:a6:ae:87:41:
a7:e8:42:ec:2e:b3:93:8f:b0:b4:c4:16:e6:83:aa:70:92:ec:
78:1b:16:72:0d:90:0e:93:99:9f:59:ec:b9:af:41:33:f5:8e:
bc:77:0b:46:4f:8b:52:fa:fe:b7:d1:ae:27:61:1c:03:b8:59:
34:a3:c5:69:7f:d1:50:8d:b2:67:30:28:35:87:c2:69:96:31:
63:d8:05:15:4e:ac:6b:89:b3:a1:10:77:a7:7d:ec:66:3e:c4:
0b:a0:ca:e2:71:6c:dc:9b:5f:78:d6:e0:a6:63:21:ca:bd:5d:
31:1c:a1:4f:27:d4:eb:63:d0:07:f0:c5:99:be:7c:1c:cd:6c:
e9:c2:b6:a9:ff:ca:29:81:01:7c:2b:0f:b9:0b:8a:fa:ed:a2:
86:c5:94:34:f4:29:97:25:61:90:7c:ff:c5:a7:b4:4c:8c:cd:
2f:75:16:dd:58:c0:6c:47:cc:9d:86:86:e8:aa:79:83:0d:21:
11:73:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:05 2026 by rpki-client