Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: L/fqGp5Wjns02tY6MlMLEho06VbdgL0q8qgGjTqtTdc=
Subject key identifier: 7D:C5:6F:77:2B:82:7C:72:13:D7:AF:36:46:DD:70:F8:50:E0:5D:8B
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019D27040A0AFC64979547B033B366A0FA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 0A2E
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: xysYMSi1H9WEM03sfLlWbQ60fKiBz9TlPke7R1l9uTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0a:0a:fc:64:97:95:47:b0:33:b3:66:a0:fa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=7dc56f772b827c7213d7af3646dd70f850e05d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:79:82:78:af:51:39:6a:56:95:b5:a8:df:
5e:af:f5:6a:08:f3:82:70:7f:b4:92:bc:8c:40:86:
20:01:d4:16:90:9f:19:d8:75:94:15:ae:19:ad:eb:
d6:0d:8a:f9:17:aa:c7:44:f2:2c:41:2c:b7:d9:aa:
a3:f7:68:c8:63:b3:d4:d1:94:d6:26:0d:69:65:39:
93:2f:13:1d:9f:fd:c4:46:2a:27:b2:e6:85:cf:83:
5c:8c:39:e8:fc:5e:62:4a:4a:84:b9:f9:1a:f2:10:
17:99:32:7d:5f:ef:42:45:2e:b5:38:f2:1a:7c:57:
7a:b7:39:da:77:9c:c6:c6:d0:8a:47:17:a2:c7:37:
d2:87:31:98:8f:0f:fa:cc:94:ab:a9:5b:15:6f:06:
a2:7b:dc:22:17:41:b7:39:a9:9c:a9:f6:48:c8:69:
80:72:43:6d:41:a0:16:21:2a:3b:10:54:90:0f:ae:
55:c1:c0:53:49:77:8d:f2:1e:fb:18:d4:5d:e2:f8:
dc:34:56:2b:a3:21:4f:bc:fa:7c:ef:4c:61:3c:b0:
b1:99:0e:65:e3:29:19:a6:46:54:34:42:1a:16:54:
78:21:52:96:da:d7:74:06:57:15:f2:be:de:88:91:
d2:f5:f4:78:56:7a:09:8c:96:db:60:cb:b3:42:5a:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:6F:77:2B:82:7C:72:13:D7:AF:36:46:DD:70:F8:50:E0:5D:8B
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e4:89:47:57:49:4e:2e:8d:f2:74:2d:e7:f0:56:eb:30:de:
56:d7:97:5e:9a:a0:13:ce:23:86:0b:72:c1:5a:1b:fc:54:ad:
64:bb:08:6f:48:0b:1f:f5:15:b0:71:67:7a:d2:6a:36:bb:45:
90:1e:64:e9:09:56:64:f0:3c:40:85:45:2b:14:5f:39:7b:36:
f2:43:15:02:4f:3f:ec:24:45:6f:36:99:f5:d3:33:19:75:e2:
b7:91:e7:26:05:4d:34:46:fc:de:d9:ee:a5:48:5a:87:b6:34:
07:6c:ad:85:c8:ee:26:6c:79:d5:19:f0:24:f0:1b:80:f1:f3:
31:54:99:1d:7c:0d:09:d9:26:84:a6:2f:01:91:30:e1:18:11:
cf:df:f5:51:dc:d1:7e:41:8d:85:e4:05:2f:ee:ec:e3:65:5d:
96:b8:8a:54:99:30:95:4f:d3:a3:49:9e:fb:b5:ba:6f:28:31:
d2:22:f7:25:37:4d:41:0b:3b:68:fe:4b:87:a2:25:82:1c:1e:
cf:9f:22:54:05:11:63:fe:3d:7c:65:fe:34:e0:a2:0c:86:92:
ca:b9:ba:ac:dc:72:45:4e:da:5c:51:62:4e:b4:0f:1b:2d:17:
64:ec:b2:17:71:b3:12:8d:fa:e4:e9:fe:57:eb:a2:c5:44:be:
87:35:5f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAoK/GSXlUewM7NmoPpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTQ3YTg1M2I1NTI4NzZhNzFiNzU3MGQwMDE0ZTA2NGI0
MzgwZmIwHhcNMjYwMzI1MjIwMTA5WhcNMjYwMzI2MjIwMTA5WjAzMTEwLwYDVQQD
Eyg3ZGM1NmY3NzJiODI3YzcyMTNkN2FmMzY0NmRkNzBmODUwZTA1ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0B5gnivUTlqVpW1qN9er/VqCPOC
cH+0kryMQIYgAdQWkJ8Z2HWUFa4ZrevWDYr5F6rHRPIsQSy32aqj92jIY7PU0ZTW
Jg1pZTmTLxMdn/3ERionsuaFz4NcjDno/F5iSkqEufka8hAXmTJ9X+9CRS61OPIa
fFd6tznad5zGxtCKRxeixzfShzGYjw/6zJSrqVsVbwaie9wiF0G3OamcqfZIyGmA
ckNtQaAWISo7EFSQD65VwcBTSXeN8h77GNRd4vjcNFYroyFPvPp870xhPLCxmQ5l
4ykZpkZUNEIaFlR4IVKW2td0BlcV8r7eiJHS9fR4VnoJjJbbYMuzQlr+AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Fb3crgnxyE9evNkbdcPhQ4F2LMB8GA1UdIwQY
MBaAFJWkeoU7VSh2pxt1cNABTgZLQ4D7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGIt
ZTg2NWZkOWE2MjJmLzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGItZTg2NWZkOWE2MjJm
LzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOSJR1dJ
Ti6N8nQt5/BW6zDeVteXXpqgE84jhgtywVob/FStZLsIb0gLH/UVsHFnetJqNrtF
kB5k6QlWZPA8QIVFKxRfOXs28kMVAk8/7CRFbzaZ9dMzGXXit5HnJgVNNEb83tnu
pUhah7Y0B2ythcjuJmx51RnwJPAbgPHzMVSZHXwNCdkmhKYvAZEw4RgRz9/1UdzR
fkGNheQFL+7s42VdlriKVJkwlU/To0me+7W6bygx0iL3JTdNQQs7aP5Lh6Ilghwe
z58iVAURY/49fGX+NOCiDIaSyrm6rNxyRU7aXFFiTrQPGy0XZOyyF3GzEo365On+
V+uixUS+hzVfOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:13 2026 by rpki-client