Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier: LsF5f/fiV5obuRLg4P4xvwt6xyjwuMzX4DHR2eQ5p4A=
Subject key identifier: 6C:24:28:4B:49:00:41:66:F1:46:52:08:92:E2:A7:E5:19:E8:8C:EE
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 019CABA20F541963DE93B0EF3C8B341A7665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number: 066F
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: AzlBzfSZRACKs+VjjbtzcZV4efmdn4N7CWe0a+QrTvU=)
2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0f:54:19:63:de:93:b0:ef:3c:8b:34:1a:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=6c24284b49004166f146520892e2a7e519e88cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:b8:d0:45:3b:11:69:e2:cd:c3:df:84:d6:
c6:b3:36:26:3c:35:7a:7d:bf:34:65:84:d0:cd:c3:
5e:81:cb:06:20:a0:cc:76:74:9c:6f:e5:41:b8:50:
a8:8b:5c:4a:82:d9:80:fc:b7:10:27:03:ac:0b:1f:
f6:d4:ad:7e:fc:61:47:25:51:e7:cb:9f:a7:1e:df:
93:95:c2:69:e1:df:e0:22:62:83:e9:50:28:47:ae:
9c:cb:95:50:3c:d5:52:6f:ca:f3:bb:70:31:8f:c6:
1b:c0:5c:29:29:8b:8c:db:cc:ec:4c:98:1e:8f:a0:
68:25:1f:a6:bf:4c:ce:f4:25:dd:7b:95:34:af:7f:
6f:61:2e:7d:fd:63:54:42:86:14:c7:57:13:14:59:
82:e5:9e:55:ef:b3:fe:1f:3b:c8:e7:1c:2e:3a:5b:
b5:2b:6c:69:6e:05:d0:94:bd:38:8f:3b:bc:92:0b:
86:75:e0:83:bc:fc:4d:70:b8:f1:2b:fe:11:9c:85:
4e:b9:04:3c:27:47:e9:16:de:4a:c8:e4:08:5e:e3:
10:f9:7a:b4:f5:20:8f:fd:97:f7:0a:de:35:9c:54:
55:89:5c:2c:09:ee:ab:73:60:d0:43:82:09:13:d3:
b8:6e:4a:36:4f:22:ed:fe:4d:b2:50:b5:83:6d:0c:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:28:4B:49:00:41:66:F1:46:52:08:92:E2:A7:E5:19:E8:8C:EE
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:87:d8:ab:d6:bb:ca:71:95:21:91:4e:ae:9f:65:aa:bc:
cd:21:4f:48:30:c9:87:5a:f3:97:bd:06:6f:52:af:76:58:32:
51:8b:c2:45:ee:7b:66:a6:09:a6:01:a5:53:4c:62:35:43:7b:
f6:07:79:c3:34:8e:12:d0:e4:ff:4a:db:55:d2:70:70:66:fa:
37:8e:2b:87:a4:3b:3f:94:6e:18:10:51:ab:0e:e0:7c:29:61:
f7:96:fc:1b:bf:ec:6e:a4:09:d6:8d:54:94:cf:f2:b9:42:f2:
ea:36:cd:e6:f0:93:47:8c:75:90:19:ff:b9:61:ae:aa:9d:92:
ed:cb:64:76:b7:43:95:e0:dd:b4:26:f8:5a:c8:78:79:96:7d:
cb:c8:66:c4:67:85:c0:0f:51:b2:44:de:19:ef:d3:db:bc:47:
01:28:2a:7f:26:62:d3:21:1f:38:a0:fd:5e:b6:d4:21:b1:db:
8b:c9:44:fd:75:6a:a6:57:40:cb:07:b2:1d:31:8a:2a:7d:19:
5a:0f:59:10:60:fe:ef:5e:e5:53:47:4a:a1:8f:93:66:6f:66:
86:df:dd:a1:7f:79:08:36:14:ce:a2:d6:43:64:b1:06:2f:82:
7e:d7:8f:5e:a7:57:09:e7:59:a7:47:ba:33:05:4e:40:24:e9:
db:23:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:25 2026 by rpki-client