Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
File: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft (raw, json)
Hash identifier: r5CItJeom1wISBOBSN/IOqmr6JT69rwzouYwxc/ribQ=
Subject key identifier: 2E:AE:AF:31:F3:70:67:C4:6D:30:C7:03:B7:18:E4:33:BA:7F:EB:A8
Authority key identifier: DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
Certificate issuer: /CN=da5f25e8950f69e2d75b93b92f5404199e044762
Certificate serial: 019D299734741689E432988F20FC50D0DE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
Manifest number: 016A
Signing time: Thu 26 Mar 2026 10:01:08 +0000
Manifest this update: Thu 26 Mar 2026 10:01:08 +0000
Manifest next update: Fri 27 Mar 2026 10:01:08 +0000
Files and hashes: 1: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl (hash: nBYrfgzQM8GVwSgkLRPF+KraAa34mWSxn6GVNcKzAMc=)
2: RstBPFjM6RZLydCSF_gstYqTNio.roa (hash: AQIsrapA+jjaaRR0kQmSSklLBZ57sqiJJ2/Lw3zxZ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:34:74:16:89:e4:32:98:8f:20:fc:50:d0:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5f25e8950f69e2d75b93b92f5404199e044762
Validity
Not Before: Mar 26 10:01:08 2026 GMT
Not After : Mar 27 10:01:08 2026 GMT
Subject: CN=2eaeaf31f37067c46d30c703b718e433ba7feba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:ab:cd:fd:66:83:90:e9:1f:92:af:5c:1a:
db:72:c1:13:31:af:44:20:6c:e6:ce:8d:20:3d:1a:
8e:89:e9:8e:28:5c:8c:2e:62:44:3d:86:50:87:af:
be:fd:f8:6d:33:e2:90:dc:81:0c:bc:41:cf:a2:68:
01:ec:0d:db:d5:1b:68:22:48:c8:ba:f8:64:4b:2a:
0e:4e:d6:04:6f:6b:42:89:eb:8b:db:11:94:3e:1e:
9b:74:36:66:1a:28:10:1d:eb:62:e6:ed:b5:a9:4f:
3b:15:e6:6a:e0:65:00:35:02:bb:3a:38:26:74:69:
80:b4:e5:4a:32:ad:93:d3:87:47:c2:58:6f:e0:72:
1c:17:8e:3f:87:d6:60:b7:41:11:c9:36:54:fb:71:
5b:e7:69:49:6c:d8:4e:c5:40:f3:71:c2:e0:6f:08:
1f:ea:19:ab:5b:7d:4a:4d:2b:6d:ad:65:fc:7d:3e:
7d:94:d8:0b:b0:c5:cf:a2:d0:d1:7d:ab:2c:ae:78:
33:5c:11:90:0f:63:0c:82:d3:61:db:c4:43:9f:26:
ec:10:ec:57:1b:a9:de:95:fa:3a:00:2e:7c:38:4c:
5b:e4:aa:e1:33:de:5c:ec:ba:53:5a:c1:3e:90:86:
21:fb:66:31:b9:20:f6:98:f7:99:b3:6d:d1:af:ad:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:AF:31:F3:70:67:C4:6D:30:C7:03:B7:18:E4:33:BA:7F:EB:A8
X509v3 Authority Key Identifier:
keyid:DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:3f:23:b5:c3:3a:14:64:79:3c:f2:7e:91:0e:08:e6:2b:
19:09:08:c1:bf:0f:b8:09:0d:c8:db:c8:01:0e:fe:90:6c:69:
0c:b0:cf:55:e1:ac:c6:e0:a8:5c:5c:a6:88:43:84:c2:ac:a5:
67:14:d0:2e:13:3b:d9:d0:18:16:f1:f8:29:7f:af:4b:63:7e:
33:b5:2f:80:2f:45:9f:d4:41:25:55:f8:1d:a8:7a:59:9e:e9:
fe:b7:99:59:c3:28:41:85:3c:fd:79:24:39:a3:b0:d4:11:01:
39:ee:50:66:42:a6:e8:4c:90:6e:cc:75:63:6f:e9:6e:5c:b2:
c1:ac:84:c2:80:9b:18:1f:02:ba:61:11:93:5f:bd:bc:f8:81:
75:bc:c2:db:a8:37:21:7a:f0:90:06:69:2b:95:d7:63:49:a2:
16:a0:67:9a:b9:8e:a9:c2:da:ad:9b:2e:45:1b:6f:4b:82:62:
a5:c0:95:96:a8:0a:9b:b1:a8:cb:c9:62:9a:d1:0e:1c:36:d5:
95:de:ba:97:e3:02:4e:05:fd:cd:9e:a5:d3:1d:f5:30:bc:7f:
ef:a8:42:ec:25:fc:e4:0d:0f:14:8b:fe:e6:23:4b:79:0d:4d:
06:bd:b0:0b:f6:5e:3c:a1:f7:94:c0:00:2a:61:a5:d5:0e:03:
28:04:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:43 2026 by rpki-client