Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: UK0T/7Kb3X+gqDrNCMAPuCJw6wjDxBrLpbD8zEUa6Eo=
Subject key identifier: 87:79:D5:54:A4:9C:4B:91:7C:74:18:83:C9:B4:93:A9:AD:3B:11:61
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 01A0D3F03AB1AC6E100A63862C3FD1B6A119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 127A
Signing time: Thu 24 Sep 2026 15:02:11 +0000
Manifest this update: Thu 24 Sep 2026 15:02:11 +0000
Manifest next update: Fri 25 Sep 2026 15:02:11 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: u7Dn4YzC7MLziDQHEXMTLHaGXQciqcBO9SzZu5aPx/U=)
2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:3a:b1:ac:6e:10:0a:63:86:2c:3f:d1:b6:a1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Sep 24 15:02:11 2026 GMT
Not After : Sep 25 15:02:11 2026 GMT
Subject: CN=8779d554a49c4b917c741883c9b493a9ad3b1161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:8e:34:7d:b5:84:69:48:61:23:8e:8f:84:
01:0c:ce:d8:aa:fe:02:64:cf:9d:62:26:5f:9d:08:
c9:8c:75:a8:44:6d:fe:97:25:34:2c:d8:a8:d1:8f:
d5:ef:d1:cc:8e:04:f0:c5:62:ee:45:3a:15:6f:96:
c9:1f:d3:1e:fe:d2:aa:f9:2e:e6:e2:33:14:5d:b5:
f6:7f:bf:54:c7:a0:3b:8f:cb:fd:a4:63:ee:49:1b:
1e:19:59:a0:a6:61:8b:86:30:09:ec:39:b2:aa:d2:
a2:55:dc:c1:c6:fd:3c:95:68:03:e6:84:72:e8:af:
b2:ad:25:7b:d5:60:3f:7b:40:00:e0:bd:34:63:88:
99:72:f0:fe:65:7c:99:ec:1f:8f:a1:b9:49:a0:77:
8c:e0:52:10:ca:48:1e:75:69:7b:b2:f9:6b:27:10:
d6:c2:81:93:ea:4b:61:a4:dd:4d:24:23:7b:f1:01:
93:ae:6b:3c:3d:8e:5c:d3:e0:29:06:98:85:94:0f:
f6:9a:c8:70:3c:26:f8:87:5d:d9:50:c0:02:03:1b:
9e:91:ec:df:0f:00:e2:24:a2:5c:04:05:5a:f0:3b:
92:c1:f6:2e:78:af:06:13:61:89:fa:07:fd:d0:e4:
ba:f1:c9:8d:15:3d:22:b6:6c:7f:e1:7d:cf:02:ca:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:D5:54:A4:9C:4B:91:7C:74:18:83:C9:B4:93:A9:AD:3B:11:61
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:f4:75:dc:e3:90:53:80:e5:98:27:32:a0:22:23:90:ed:
56:93:e0:81:ff:1c:ea:54:63:75:19:28:20:24:d2:7b:7c:7c:
de:3d:06:ac:6b:7a:81:20:42:b7:34:1f:23:8a:6b:f3:68:98:
2b:7b:db:f2:32:b4:49:dd:78:cc:2f:73:0f:db:83:1c:24:d4:
a0:d1:9c:85:00:fa:fb:ec:69:e9:34:58:42:28:b8:67:56:97:
27:4c:5a:82:63:04:6d:da:55:dc:fb:49:8b:4d:08:da:a3:94:
cf:26:a8:77:fd:fd:63:bf:fc:18:cb:7b:d0:db:3f:e4:9d:11:
4b:67:b4:96:68:4f:79:f9:bb:03:1b:a6:22:ba:93:fa:42:78:
12:a1:a6:06:5b:36:71:86:57:fc:a7:f5:d3:6f:cb:48:0d:6c:
85:81:ee:76:42:ba:2f:fb:08:94:44:c4:30:a2:c2:07:59:89:
b1:5f:5e:85:95:18:4f:5f:c6:3c:5a:a5:ec:da:d1:f6:2a:c5:
1b:d3:a4:da:a8:d4:58:bb:38:a1:a0:33:14:84:4a:de:64:47:
5d:28:60:86:9f:56:a4:8d:2c:53:09:e3:2d:b4:f8:42:65:0c:
3f:4f:6f:2e:80:a8:54:50:6a:84:ee:4d:08:c7:af:0e:29:6c:
b0:be:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:22:29 2026 by rpki-client