Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier: vGDtk+SbgubEuKR+BeJbim8oj74I0edA0oI2p4FnqDI=
Subject key identifier: 72:29:0E:D7:14:75:2C:5A:7D:8A:B9:05:18:1D:C0:C8:3A:19:C4:29
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 019CABDA0B1C1E7CD7129C7A16AC1E3A1069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 00:01:59 +0000
Manifest this update: Mon 02 Mar 2026 00:01:59 +0000
Manifest next update: Tue 03 Mar 2026 00:01:59 +0000
Files and hashes: 1: jIErjBv4bHsu41MjOA0shO_vyj4.roa (hash: bwwaPoZH0OKbIcvusR1D8Isx0CP0tMQ/CxFkxTG7ZIw=)
2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: 4XGmrei/zZiZMG93WhVSDXBImGG9CNaBo2NtyIpWXvM=)
3: pETFowZQ1HrdAwm7H1rF9B9k2BQ.roa (hash: 5yec7IoQ7KxsmsypwK7+l3R0mHNW/cIPu8S/g9q5prs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0b:1c:1e:7c:d7:12:9c:7a:16:ac:1e:3a:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Mar 2 00:01:59 2026 GMT
Not After : Mar 3 00:01:59 2026 GMT
Subject: CN=72290ed714752c5a7d8ab905181dc0c83a19c429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:9a:47:76:77:cc:f8:c6:6f:ff:d1:9b:76:
4d:3f:7f:e8:24:77:68:1e:51:e3:bf:9d:41:e7:31:
c3:1e:7e:09:7b:d4:08:4b:6b:6b:c4:20:5e:a8:0a:
5c:ad:91:45:8d:43:63:21:39:5e:60:a2:0d:57:0f:
4b:4b:b4:4a:09:4f:b8:ff:9b:37:2f:4c:77:2c:f4:
06:52:2d:4a:fc:04:ae:b0:1f:96:53:0a:20:d7:a1:
46:2a:ce:d8:65:74:a2:bd:33:17:50:90:d9:73:eb:
1d:8b:51:33:ba:70:39:40:62:53:34:9c:da:ee:e2:
dd:c2:64:a0:b1:c3:3e:7d:02:1d:10:f9:d0:66:8e:
cf:8a:a2:f4:dc:03:ab:49:55:29:dc:c9:1b:51:ec:
59:23:95:c2:cd:0d:08:ab:31:ab:50:3d:c1:8d:97:
25:92:19:d3:ce:a9:e7:76:6d:07:21:fc:8b:e1:ff:
72:8f:50:0f:8d:db:31:05:5a:4c:af:2c:70:b2:85:
2a:36:99:f7:79:6d:d6:26:33:f9:7d:13:45:12:63:
cf:09:fb:18:82:c1:04:98:94:0b:b7:22:ce:b0:fe:
18:82:32:2c:a5:f8:3b:83:df:48:0c:5e:05:17:bc:
2d:e0:f8:16:3a:60:1a:6d:0b:50:05:c1:d5:03:03:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:0E:D7:14:75:2C:5A:7D:8A:B9:05:18:1D:C0:C8:3A:19:C4:29
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:28:b3:40:8d:8d:38:4b:22:c0:2e:dc:69:98:39:a9:23:
38:f6:e9:36:64:70:fb:2a:c4:40:93:9a:97:94:85:c4:77:9f:
07:1f:c9:2f:e9:86:64:04:b9:29:6a:bd:d9:c8:9d:1e:b5:a1:
b7:ce:df:2d:8e:46:6c:6d:8d:3f:3c:d3:53:89:9d:af:5d:a2:
c7:e9:86:57:2b:49:43:f9:0a:78:fb:cf:90:cc:8d:fa:b7:e0:
b3:59:b3:45:f8:55:1b:a3:97:ed:9c:98:54:f0:be:1d:27:24:
45:a7:89:38:b6:d9:8f:97:c2:4c:9e:24:7d:70:f8:2b:fe:44:
52:2e:0e:03:03:6a:75:5c:e1:1c:df:aa:af:59:2f:a4:e6:0c:
d8:6d:90:d9:f4:f9:ef:f4:f5:91:b6:9f:a8:c7:47:30:3f:50:
c5:aa:27:7f:78:36:37:fa:d2:38:78:68:01:82:49:9b:22:40:
4e:22:2e:ae:30:5a:32:6d:69:ca:d0:a4:d8:fa:e0:b5:66:a1:
ea:79:e1:b9:b5:62:60:05:a5:75:fc:a5:0c:20:65:ac:b4:66:
cb:b5:9c:9c:69:75:b1:da:42:91:b4:ab:3b:3e:55:12:7f:e9:
d4:17:1d:ba:f1:28:a4:35:ce:7d:57:26:2c:76:80:f1:7e:56:
cf:cf:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:29 2026 by rpki-client