Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: SSz6MJgL+6FcpCO5Ak8HYVHQFItJzH7OrxZJNlCl4I4=
Subject key identifier: 9E:96:C9:49:CD:45:F9:FA:17:11:2B:FD:86:26:A5:4D:C4:DB:CB:BD
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019D28169F8E42665CC8013EE5CF9C4AB634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa (hash: mz9IbH2TcauzEdRTkvsk6aZrHNIPGk0qBoIBNHpM3I4=)
2: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: LARqmaiUcOvpTF65dgNy3Xv5Y1iiURmUeHj1zHXnMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9f:8e:42:66:5c:c8:01:3e:e5:cf:9c:4a:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=9e96c949cd45f9fa17112bfd8626a54dc4dbcbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:3d:84:e4:3e:22:21:bc:5d:be:ec:7e:d1:
2a:30:d7:5e:d2:0a:27:d1:2d:c7:0f:73:3e:a6:24:
8c:52:84:14:4a:db:4e:37:9f:28:13:ca:02:cc:f0:
59:1d:bc:5d:11:75:c2:57:81:b5:47:c4:50:6e:19:
ea:b8:8f:ae:e3:53:75:5b:19:a0:2a:33:8f:c8:ad:
79:43:4c:96:05:2e:a6:4e:1b:2a:9d:51:24:8e:03:
db:32:57:19:8a:6f:49:ad:7f:eb:2a:22:ee:e8:c8:
26:0b:1c:f0:b7:6b:13:60:bb:f0:da:f5:37:eb:21:
54:cc:c8:7a:b7:93:49:0f:a1:f1:6a:85:50:b3:da:
3a:9d:6d:36:15:e3:6b:d1:a3:03:a4:15:7b:84:fe:
ae:e2:6c:8c:8f:02:03:d9:79:9f:8f:8d:52:d6:78:
81:95:52:0c:48:e6:e5:d2:09:6a:f9:58:6b:5a:e1:
5c:bb:16:c0:e7:6e:e5:5a:2f:20:3b:ff:b3:c3:4c:
19:f6:75:a9:09:07:b1:95:fb:fa:b7:6f:fd:c7:f2:
82:fc:f5:e3:7e:6e:29:e9:23:5c:41:81:07:70:dd:
51:98:8f:a8:25:ab:80:ba:cc:38:4a:a3:50:60:98:
5f:13:fe:27:4a:83:83:57:39:17:d4:e3:41:6a:1a:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:C9:49:CD:45:F9:FA:17:11:2B:FD:86:26:A5:4D:C4:DB:CB:BD
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:30:af:94:c3:37:f9:d0:17:fd:da:2c:dc:0e:6a:a6:8c:09:
80:a7:22:f7:d5:9c:48:4b:29:fd:8e:06:75:92:5b:7d:94:2e:
d7:f7:6a:db:b2:d3:9d:35:c6:7a:46:2f:7e:d8:8a:bc:20:9a:
b8:1e:62:a7:e9:c1:d2:8b:58:47:cc:5d:e9:0c:81:d5:ab:28:
2c:84:e3:be:f9:02:14:71:da:04:57:6c:35:10:70:ef:0e:1a:
5f:c8:15:6f:bf:73:46:7c:a2:db:8e:8c:95:f6:98:c0:06:81:
b5:3f:45:fb:43:8a:e7:be:f0:2f:a4:33:8f:2d:60:15:95:a9:
ee:b0:52:1f:81:8a:0d:29:0d:28:c0:38:d6:66:2c:cd:b8:03:
5c:7a:1c:70:0d:4b:83:e1:4c:1e:6e:66:05:fa:c5:6f:a4:2c:
8b:ae:ec:a3:21:81:a5:a1:0f:5d:96:94:66:af:c4:0d:1a:f6:
2e:50:d2:7b:4f:0b:18:23:2c:0b:ee:0d:6e:75:ae:69:be:c5:
0a:0a:e0:a6:a2:e1:c7:66:00:05:81:e1:0c:bb:c6:df:58:47:
a0:e1:65:45:ff:af:3b:99:04:22:2d:a3:9a:29:27:ce:01:15:
0f:c3:6c:ed:25:fd:5f:6b:eb:c9:e5:f7:ae:7c:00:cd:b3:9b:
73:b4:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:58 2026 by rpki-client