Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: HJhf/bIeM1KjS8gZORWdrV39flDlaunB8mszeCaSjSk=
Subject key identifier: 2D:7E:B2:F2:0F:11:6A:1B:0D:CD:D4:35:80:E2:2D:B8:31:B2:D7:DD
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 019D27A8E53AC6C1D67BA405B717D10CF227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 1253
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: gV0v87dJJpZSl0iPI9yOjClEFOSHcPCGlVD3boOrdWo=)
2: y9Rdyj0H9umW1gas2ci_H7vHV80.roa (hash: fMjeZmQWT7xUsWFTIwsY1p7CQr5KOCxJXZGt0dVbHlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e5:3a:c6:c1:d6:7b:a4:05:b7:17:d1:0c:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=2d7eb2f20f116a1b0dcdd43580e22db831b2d7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:6c:7c:73:6c:8c:66:75:3c:10:3c:07:4f:
40:a9:df:11:07:95:f5:53:cb:d7:72:3e:62:0b:d2:
c5:cc:46:c1:34:c3:cc:44:6c:d4:2b:68:f6:7e:c8:
3e:ea:4e:48:81:b2:47:e6:bd:14:78:14:51:1c:73:
67:93:33:63:e7:a6:0f:c5:c3:cb:b1:a7:19:a0:c6:
e1:d7:67:ef:5c:e0:1c:4e:76:df:b9:32:85:34:44:
44:69:fb:76:49:78:b1:d8:4d:9a:5d:23:69:b6:68:
38:83:4c:2e:fb:c6:d4:29:31:83:24:a4:93:ac:fb:
f6:24:22:a3:b6:5e:55:50:d9:40:ae:ce:b1:a2:06:
86:5b:4f:03:e9:09:a3:ac:e2:7a:35:e7:5f:1c:69:
36:f7:62:0a:24:e3:46:3e:83:0f:16:a6:c7:44:35:
41:13:c6:64:03:70:73:f9:79:7a:db:43:70:e8:00:
9f:9a:3c:3b:73:e0:ba:9d:8e:a6:b6:76:24:21:d1:
ca:95:1e:c4:89:52:d7:86:90:f8:9c:4a:d1:f3:ef:
6b:6d:e3:ff:3e:11:7a:09:a2:0b:54:19:b2:2d:89:
2e:b4:16:3c:9d:98:19:d0:2e:d2:d1:7b:c3:9c:a8:
9a:21:cf:76:cc:23:b1:dd:af:94:ea:9b:02:4d:5a:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:B2:F2:0F:11:6A:1B:0D:CD:D4:35:80:E2:2D:B8:31:B2:D7:DD
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:c6:0f:09:03:36:82:22:b3:05:97:c0:e4:57:1f:41:4f:
b7:36:24:ff:d7:b8:bc:01:d3:87:ec:12:e1:7e:e8:73:5c:14:
04:a4:c0:00:b2:77:21:20:79:e4:7d:c2:12:d3:54:41:2e:a5:
d4:58:73:81:c1:0f:1b:d7:12:f9:d3:ae:59:2c:92:73:f8:2a:
61:45:33:28:ef:d3:d2:5c:f9:4b:bd:96:31:6a:9e:85:2b:74:
e0:24:a8:94:80:33:a2:ac:7d:55:15:5d:a5:63:23:e7:62:ad:
b5:4a:7f:8d:84:2b:80:a2:95:3f:60:31:f4:35:1a:00:20:90:
a6:52:73:81:64:3a:c7:fd:0a:ab:48:bc:26:e1:8a:86:20:81:
94:69:54:34:a9:90:82:07:db:0c:74:34:74:97:58:b1:e2:0e:
8f:95:2d:ff:0b:5b:51:d1:cb:08:c8:b0:93:62:5e:0d:66:6e:
55:76:5f:a9:4e:00:7d:ee:c7:5f:10:1a:18:34:a9:91:4f:cb:
bd:69:be:d0:e6:36:4b:7b:5a:1d:6e:d7:a1:3b:4f:45:95:79:
c0:29:df:29:5b:fa:59:83:71:27:32:28:97:92:6f:6f:f8:0c:
89:51:f1:23:31:06:3f:34:58:0a:42:da:e2:5d:f8:8c:ea:af:
ad:1e:f7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOU6xsHWe6QFtxfRDPInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi
ZTczOGQwHhcNMjYwMzI2MDEwMTEzWhcNMjYwMzI3MDEwMTEzWjAzMTEwLwYDVQQD
EygyZDdlYjJmMjBmMTE2YTFiMGRjZGQ0MzU4MGUyMmRiODMxYjJkN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+NsfHNsjGZ1PBA8B09Aqd8RB5X1
U8vXcj5iC9LFzEbBNMPMRGzUK2j2fsg+6k5IgbJH5r0UeBRRHHNnkzNj56YPxcPL
sacZoMbh12fvXOAcTnbfuTKFNEREaft2SXix2E2aXSNptmg4g0wu+8bUKTGDJKST
rPv2JCKjtl5VUNlArs6xogaGW08D6QmjrOJ6NedfHGk292IKJONGPoMPFqbHRDVB
E8ZkA3Bz+Xl620Nw6ACfmjw7c+C6nY6mtnYkIdHKlR7EiVLXhpD4nErR8+9rbeP/
PhF6CaILVBmyLYkutBY8nZgZ0C7S0XvDnKiaIc92zCOx3a+U6psCTVpUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1+svIPEWobDc3UNYDiLbgxstfdMB8GA1UdIwQY
MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt
MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3
LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmDGDwkD
NoIiswWXwORXH0FPtzYk/9e4vAHTh+wS4X7oc1wUBKTAALJ3ISB55H3CEtNUQS6l
1FhzgcEPG9cS+dOuWSySc/gqYUUzKO/T0lz5S72WMWqehSt04CSolIAzoqx9VRVd
pWMj52KttUp/jYQrgKKVP2Ax9DUaACCQplJzgWQ6x/0Kq0i8JuGKhiCBlGlUNKmQ
ggfbDHQ0dJdYseIOj5Ut/wtbUdHLCMiwk2JeDWZuVXZfqU4Afe7HXxAaGDSpkU/L
vWm+0OY2S3taHW7XoTtPRZV5wCnfKVv6WYNxJzIol5Jvb/gMiVHxIzEGPzRYCkLa
4l34jOqvrR731A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:44 2026 by rpki-client