Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
File: L-KdbJy8NTcKAaomhNP3cxr5TJw.mft (raw, json)
Hash identifier: cC/o0OhlW7CnTb9dawUOwAn7M7BNv8A1VVQigVQbzjg=
Subject key identifier: 55:33:15:EA:F6:6A:40:6E:32:C0:3E:94:80:FA:41:B5:14:71:09:90
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Certificate issuer: /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial: 019F935C450E87BE41F8A0E313CBB2FF05D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:02:05 +0000
Manifest this update: Fri 24 Jul 2026 09:02:05 +0000
Manifest next update: Sat 25 Jul 2026 09:02:05 +0000
Files and hashes: 1: L-KdbJy8NTcKAaomhNP3cxr5TJw.crl (hash: iEaJmGh9AckMTSi6UpjyziDoGRU07KFAu4IjS6O7GRg=)
2: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (hash: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:45:0e:87:be:41:f8:a0:e3:13:cb:b2:ff:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Validity
Not Before: Jul 24 09:02:05 2026 GMT
Not After : Jul 25 09:02:05 2026 GMT
Subject: CN=553315eaf66a406e32c03e9480fa41b514710990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:d3:3b:19:d9:35:ed:1c:5f:0d:d8:f8:ba:
82:21:84:04:e4:38:a9:d3:15:15:45:d9:51:03:b2:
7f:ba:77:2f:ed:95:81:8f:a9:0a:02:1e:cb:f0:19:
c6:c9:90:95:98:a1:fd:11:97:15:b6:58:b8:41:f1:
3d:66:42:bc:30:23:e6:39:0a:51:0f:dd:e0:62:a7:
32:b5:b4:bf:19:27:f8:ba:8c:9d:bc:a8:a1:ca:d0:
5d:85:97:fd:40:89:02:bf:bf:cd:62:81:f9:60:80:
38:d7:49:42:92:30:cd:95:cb:94:96:6a:94:1a:4e:
30:f0:a5:31:72:86:48:aa:02:24:c9:d1:e4:1c:d3:
d9:e0:c6:22:39:53:92:16:b0:e4:c3:59:5b:32:36:
19:e5:3f:89:0b:50:c9:b8:8f:7b:b8:46:ba:6e:1b:
b0:79:76:e9:90:5b:49:a7:d9:3f:7f:e2:5e:73:89:
d2:d5:e0:4e:26:57:8e:a8:7c:57:07:fd:52:44:59:
eb:e0:34:06:df:c6:0b:9b:68:16:08:43:c3:54:b6:
2d:55:87:fb:2a:2d:24:c5:a8:57:3f:fb:95:a6:11:
73:76:5a:4a:0c:a0:c2:c0:6a:f4:b8:92:91:df:a4:
ff:4a:31:6a:ba:07:eb:24:ee:3b:16:8a:e6:1f:72:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:15:EA:F6:6A:40:6E:32:C0:3E:94:80:FA:41:B5:14:71:09:90
X509v3 Authority Key Identifier:
keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f4:de:65:21:4f:c1:9a:88:f0:a5:32:be:14:a9:3a:ba:25:
f3:bb:f4:67:9d:eb:1b:22:fd:54:80:5c:bf:05:bd:e4:90:bf:
08:21:a9:03:4c:55:48:74:b1:88:2c:6f:f2:fe:fa:fb:c8:f4:
77:1a:8d:9a:42:8a:f4:32:4c:df:c0:ed:2f:ae:04:7f:32:26:
72:39:5a:4e:f5:e8:14:92:db:97:18:dd:ca:a6:fa:ef:17:94:
2a:6b:1d:6a:8e:1f:a6:44:78:ff:3d:aa:59:57:df:f6:61:2d:
70:c9:98:17:2c:7a:77:44:cc:6c:e7:d5:a3:56:cf:47:89:71:
b1:cf:46:f0:50:ec:ed:e3:7b:99:54:79:09:cf:57:05:ab:e4:
85:87:45:23:08:ed:25:4f:68:77:19:0a:dc:4a:e6:93:21:f8:
c2:b1:b1:ae:97:33:c8:51:0e:56:94:e4:ec:c2:b5:1a:9b:37:
fe:9b:1f:a3:8f:20:9f:3f:f5:92:5c:d7:aa:06:3d:f4:02:02:
7d:7f:6d:6a:63:7a:45:8f:ff:3f:49:dd:fe:69:9f:96:ca:17:
eb:16:a8:07:7c:40:34:90:54:41:ea:75:d6:b2:e0:93:7c:4c:
1b:41:2a:ec:3b:91:fd:fe:9e:b0:b5:c2:6b:86:da:ed:eb:e9:
95:4a:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:12 2026 by rpki-client