Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: OZcIZ0TL3KdYX5/fGLABscC9WCKNHEEfi+VTG1xpOTw=
Subject key identifier: C0:FB:98:A4:B3:13:7B:72:7E:AB:A2:80:87:74:C2:D1:0F:4C:0B:2F
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 019D27045331B752787DE889592305B6D41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: QSAAfnYORNWylj9GKLnszPdv2UXk9OAXjQ7sUQ8vMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:53:31:b7:52:78:7d:e8:89:59:23:05:b6:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=c0fb98a4b3137b727eaba2808774c2d10f4c0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:fe:04:c5:f2:f6:98:d2:45:ba:ed:1e:6f:
2f:36:37:ed:01:19:4f:01:b5:83:18:05:16:26:62:
d0:92:59:e8:5f:a9:a2:8c:13:39:a8:ae:09:8e:c1:
e0:85:aa:96:66:5d:3c:df:9e:bf:ab:63:a0:54:ff:
85:03:a9:2c:69:14:26:62:e1:c0:c8:03:60:9b:62:
9f:6c:16:1b:ee:1a:a5:e6:3e:4d:0f:d7:32:5e:e6:
c3:a5:c3:aa:40:7f:59:90:cd:80:cb:ed:55:a7:f4:
2f:d1:75:37:63:36:f0:11:e2:46:0e:39:9a:98:56:
89:3c:64:1f:6d:ba:f8:ed:d1:e1:2c:1e:fd:7a:84:
a7:6e:86:51:fb:62:86:22:81:ac:8f:e9:80:1a:52:
21:8b:80:13:8c:05:cc:54:35:0a:09:9f:43:30:47:
14:7c:f3:fe:8f:36:86:6b:94:ec:ab:3d:70:4c:bc:
e1:ae:fc:96:f0:ef:c0:55:5d:e0:a5:76:e2:93:fd:
c0:6b:50:85:8c:44:ee:90:b4:ee:b5:d2:30:d5:69:
e8:88:9b:2c:cc:44:e0:b8:21:59:09:31:5e:09:a9:
61:61:88:a6:9a:5b:06:e9:55:4c:2e:70:55:e7:ac:
4e:41:09:f0:3d:de:bf:33:8f:01:19:87:cd:79:cc:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:98:A4:B3:13:7B:72:7E:AB:A2:80:87:74:C2:D1:0F:4C:0B:2F
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:6f:fb:af:f7:b1:af:f6:90:b8:88:37:23:50:43:26:eb:
32:f6:e7:59:b4:75:64:3b:30:04:8a:d2:2c:65:15:67:53:ce:
3f:54:2c:14:7a:8f:eb:0e:8c:6d:13:b1:4f:52:7b:6d:84:1e:
63:ee:df:3e:42:cf:cd:33:02:eb:e9:d7:3f:6e:fe:62:95:59:
c6:98:e6:7c:eb:58:42:d8:b9:c5:7c:93:c5:69:cd:c5:61:de:
ac:a6:c8:f2:17:7b:fb:5b:8a:4e:9b:66:b5:13:af:f5:19:5b:
59:cd:f7:9f:16:b1:4d:1f:a3:51:b6:29:6c:89:7f:db:a5:62:
57:7e:7b:83:95:8f:e1:f8:af:12:40:72:94:8a:56:98:09:fc:
db:3f:59:f5:77:1b:4e:d8:c8:27:8a:3f:ca:dd:b0:6d:8f:2c:
2b:fa:07:78:b6:ba:a9:2d:48:1c:6a:7f:68:64:06:bb:a4:f4:
08:9c:d1:39:aa:73:ba:eb:8c:84:ee:4f:3a:69:90:c1:fc:97:
8f:04:df:da:ef:d1:03:44:b2:4a:51:2a:a5:ec:20:c2:d7:73:
0b:e3:89:4d:0f:00:7f:13:20:e0:4e:d6:94:21:51:cb:94:da:
c7:55:f6:a2:f1:e2:ac:e3:7b:d3:98:66:45:33:61:84:87:8d:
c4:a5:af:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFMxt1J4feiJWSMFttQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm
MGYxMjAwHhcNMjYwMzI1MjIwMTI3WhcNMjYwMzI2MjIwMTI3WjAzMTEwLwYDVQQD
EyhjMGZiOThhNGIzMTM3YjcyN2VhYmEyODA4Nzc0YzJkMTBmNGMwYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gr+BMXy9pjSRbrtHm8vNjftARlP
AbWDGAUWJmLQklnoX6mijBM5qK4JjsHghaqWZl08356/q2OgVP+FA6ksaRQmYuHA
yANgm2KfbBYb7hql5j5ND9cyXubDpcOqQH9ZkM2Ay+1Vp/Qv0XU3YzbwEeJGDjma
mFaJPGQfbbr47dHhLB79eoSnboZR+2KGIoGsj+mAGlIhi4ATjAXMVDUKCZ9DMEcU
fPP+jzaGa5Tsqz1wTLzhrvyW8O/AVV3gpXbik/3Aa1CFjETukLTutdIw1WnoiJss
zETguCFZCTFeCalhYYimmlsG6VVMLnBV56xOQQnwPd6/M48BGYfNecxXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD7mKSzE3tyfquigId0wtEPTAsvMB8GA1UdIwQY
MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt
NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1
LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcFv+6/3
sa/2kLiINyNQQybrMvbnWbR1ZDswBIrSLGUVZ1POP1QsFHqP6w6MbROxT1J7bYQe
Y+7fPkLPzTMC6+nXP27+YpVZxpjmfOtYQti5xXyTxWnNxWHerKbI8hd7+1uKTptm
tROv9RlbWc33nxaxTR+jUbYpbIl/26ViV357g5WP4fivEkBylIpWmAn82z9Z9Xcb
TtjIJ4o/yt2wbY8sK/oHeLa6qS1IHGp/aGQGu6T0CJzROapzuuuMhO5POmmQwfyX
jwTf2u/RA0SySlEqpewgwtdzC+OJTQ8AfxMg4E7WlCFRy5Tax1X2ovHirON705hm
RTNhhIeNxKWvOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client