Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: +y8yD0EAKrMC2TnJvZDUIxX1ARSiTjafs4o3UXI7az8=
Subject key identifier: ED:B5:20:20:12:81:69:B1:DE:1F:79:08:61:21:5B:EA:FE:2D:2F:66
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019D2A0454B73D40E26D53003BCA94434C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa (hash: mz9IbH2TcauzEdRTkvsk6aZrHNIPGk0qBoIBNHpM3I4=)
2: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: Io4n2aN54m1kn1H9ZaSEmw3gLfINAC+WQuJPRHFqafk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:54:b7:3d:40:e2:6d:53:00:3b:ca:94:43:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=edb52020128169b1de1f790861215beafe2d2f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:f0:41:6f:88:41:9f:e0:e4:86:38:89:c6:
ff:74:83:b4:e0:7e:7b:75:69:6a:d4:6d:1b:59:eb:
80:7c:8b:f4:ae:99:47:95:58:84:7f:d6:c3:e0:75:
a2:20:1a:ff:aa:72:9a:70:86:f4:9c:83:91:45:c2:
5d:48:85:0f:4b:52:17:c3:3b:51:ed:01:06:eb:fb:
57:74:3e:f7:be:3a:de:15:05:bb:c3:0f:36:de:76:
06:3c:c6:41:8a:9b:1b:91:6d:eb:6a:6a:59:2f:4d:
c6:ef:9d:52:32:5d:56:e9:18:fc:e0:80:11:9f:8e:
9f:9b:17:d9:7a:79:0a:09:22:6b:f3:4c:80:45:0b:
99:b0:d7:2b:a8:97:a4:d2:e2:26:d2:93:f7:65:22:
ab:91:43:dd:ee:ea:07:d6:c9:f9:f5:aa:7e:1d:2c:
3c:34:16:66:ff:11:f3:75:a0:48:1c:65:59:44:70:
08:b3:55:28:cc:fb:11:fa:12:45:84:c6:6d:20:8e:
66:27:83:b1:25:49:2f:2c:3f:a5:4a:14:1b:7d:f9:
51:8d:55:d0:11:f8:00:a7:37:16:02:a7:bf:b8:44:
cc:5f:d7:d1:67:5b:42:ae:b1:4b:e6:aa:3a:a1:ee:
8d:98:7d:c3:1f:bc:91:7a:46:47:0f:f9:32:1a:d8:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:20:20:12:81:69:B1:DE:1F:79:08:61:21:5B:EA:FE:2D:2F:66
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:85:d4:1a:87:d8:2e:85:c8:6a:b4:61:9d:ea:2f:0d:fb:
92:e5:2f:de:4e:29:fa:1f:51:96:a7:33:18:46:a1:b6:a1:63:
96:24:14:9d:c7:13:ce:b3:9b:cd:d7:5e:60:94:80:8a:9d:aa:
5e:bf:67:6f:da:25:c7:8e:34:f4:ff:d0:88:75:f5:2c:a0:c0:
76:96:ee:31:83:e1:fc:9f:75:f0:5a:77:88:d3:33:5e:7b:6c:
86:cf:38:ed:16:8b:6f:3c:5e:6d:15:a0:89:54:85:51:2e:f9:
75:6e:f8:5a:4c:ce:de:82:08:46:ae:0c:bf:ae:93:dd:79:a9:
cb:ca:e7:07:69:2d:0c:e3:18:19:15:34:95:b8:e7:f6:d8:9b:
5f:67:32:b3:03:a5:7f:48:9f:79:d7:18:56:b5:5d:91:c3:b4:
18:bf:1d:e8:a7:79:a6:d4:91:de:8f:b2:b3:6d:b3:e2:3a:65:
ce:71:51:bf:81:5c:3e:f0:0d:ad:ea:53:90:8e:08:34:d6:7f:
72:e1:55:06:c1:d0:ee:5b:8f:48:0a:f6:bd:36:db:67:d4:a8:
15:f3:5e:af:26:df:41:0d:02:10:7d:a1:d1:d7:b7:11:f3:84:
42:2e:ec:e5:33:cc:f9:ac:91:33:c9:de:83:f0:92:43:06:8d:
10:f3:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:50 2026 by rpki-client