Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File: L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier: lfauNNHUBu7bUMvwvC6qGC2KH226IYZPvLpNOLeC19k=
Subject key identifier: 71:3D:B8:85:57:6B:9C:D2:F0:A5:C7:1F:21:4D:75:E7:E4:32:5A:34
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial: 019CAA58C8D22892B13B6B0C347A1E35274E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number: 17AE
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: ZdxrrEdLrVuDkBKYBCXUwbybv8inoHmiZdRwruSN7dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c8:d2:28:92:b1:3b:6b:0c:34:7a:1e:35:27:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=713db885576b9cd2f0a5c71f214d75e7e4325a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:b4:8e:3b:34:13:55:40:b2:03:80:c0:27:
fa:cf:28:0e:88:cd:53:80:32:ba:4b:08:f1:0e:2b:
cf:ec:ee:86:61:bf:47:d9:be:46:1f:cd:a9:82:c1:
0e:98:6c:39:e8:8a:66:18:89:b7:9a:8c:55:a5:41:
4d:bc:54:79:a1:eb:be:7f:15:97:cb:93:7f:61:19:
cf:f8:81:fc:80:7b:e4:96:5d:5a:8e:13:4f:c9:52:
fe:a5:e2:62:b1:7f:43:df:e3:b7:64:d9:de:c9:b0:
a5:c0:64:e9:dd:40:e0:75:c0:fb:c2:4e:3e:89:01:
ac:4b:30:d5:21:06:5b:4e:2f:bb:02:2d:c9:65:44:
0c:2b:46:1b:b0:da:31:b7:ae:f7:21:90:4c:e2:06:
5c:15:53:4a:a7:c5:70:df:54:96:25:f1:60:dd:f0:
46:36:dc:69:7a:f2:6c:3f:1f:09:3f:99:8d:1d:ea:
50:c4:be:84:01:b8:7c:fb:79:a6:bf:d7:09:43:9a:
c9:08:c8:87:91:dc:e9:f3:28:58:58:96:45:6a:35:
1a:b2:27:97:ef:a7:b6:da:88:6a:7e:44:46:f3:9a:
fe:71:6e:86:de:40:b0:02:d9:78:6b:4b:47:78:48:
e8:b4:e5:b5:86:be:ef:44:5b:1c:d2:23:34:f2:28:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:B8:85:57:6B:9C:D2:F0:A5:C7:1F:21:4D:75:E7:E4:32:5A:34
X509v3 Authority Key Identifier:
keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:59:1f:73:84:1e:d4:45:c5:35:fa:80:b5:8b:58:fe:d7:a0:
12:a5:3d:9a:20:b2:d3:ac:83:35:0e:78:d5:84:cc:a1:bd:df:
8f:0d:02:71:f7:86:f6:a9:1b:41:b2:82:62:d3:53:07:9e:55:
c7:11:3b:71:e2:5d:6b:40:7e:6e:c2:c8:d6:62:f5:f8:f4:22:
7e:d1:38:d0:cf:45:f1:8e:ab:35:14:a4:ee:08:de:49:37:f4:
d9:c3:a7:c0:a6:ff:1b:8e:50:de:9a:99:f9:03:d6:bc:43:3c:
ae:ab:20:fa:ec:09:ac:91:71:f1:33:2a:62:fa:2f:86:fd:8a:
65:dc:e2:ad:14:b6:c8:3b:e5:ae:35:ad:ee:8a:03:c7:2a:e9:
61:4b:8d:4c:79:66:5a:3a:f9:33:d9:29:d2:c0:3a:2a:2b:e9:
73:a2:f5:12:09:ef:58:e1:2a:42:59:8a:8d:ab:e8:a9:86:8f:
42:f6:54:74:b9:df:7c:6a:5e:4b:a2:d2:4c:28:aa:2d:81:7e:
c1:1a:53:b2:a9:ff:50:18:6e:a5:76:c0:1c:d1:b0:74:52:22:
cd:0a:56:8c:15:53:ed:6d:bd:f6:33:2d:5c:90:c5:1f:5f:b2:
a0:f1:d8:4d:b1:d7:8b:f3:56:5a:34:63:52:40:17:4d:78:66:
ac:d0:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:51 2026 by rpki-client