Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: gFevR9aLirBPbRt2SscmLWQJHm/uLX8lbl8BE2nV0CY=
Subject key identifier: 6E:F1:48:70:09:B9:28:A0:7E:C4:BC:7E:05:27:84:3C:B2:DA:18:4B
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019D27A89655D080DEEB1738C59E46D17EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:00:53 +0000
Manifest this update: Thu 26 Mar 2026 01:00:53 +0000
Manifest next update: Fri 27 Mar 2026 01:00:53 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: 4H6GafSi7ZdyqbFT5JAB7/02aSWTy1WmD6v0SsHzcWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:96:55:d0:80:de:eb:17:38:c5:9e:46:d1:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Mar 26 01:00:53 2026 GMT
Not After : Mar 27 01:00:53 2026 GMT
Subject: CN=6ef1487009b928a07ec4bc7e0527843cb2da184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:30:25:a7:9a:df:ce:9b:7b:81:71:14:e1:
cc:8c:48:6b:e3:3d:86:1c:d7:44:bd:20:b0:8d:18:
d9:5c:e8:22:63:40:2d:75:20:2f:e8:73:b2:87:29:
a9:d8:28:de:c0:de:cb:5a:b8:04:a4:86:68:51:76:
43:39:a4:1b:73:c8:2e:d3:04:c5:d5:61:8d:6b:c2:
99:a2:80:0c:62:c8:d8:59:3e:34:b0:b8:b9:15:42:
21:2c:40:a2:29:29:40:f5:38:ea:0e:48:5f:d4:11:
ae:bb:60:12:eb:c1:ca:f1:4f:b9:18:6e:f3:6c:54:
a7:b2:76:56:19:25:b2:b4:4c:f3:33:9e:c7:1c:cd:
33:9f:c7:64:96:33:63:01:6b:d2:ea:de:1a:97:22:
6c:e4:b0:53:4e:ca:18:43:2d:35:88:f4:51:50:a3:
99:cc:e8:f0:b6:3f:67:dc:ec:fb:ee:88:c1:90:d6:
f6:02:f5:54:32:7b:88:da:0d:50:99:92:f2:50:0b:
1a:ef:33:e3:0e:17:2f:3d:ab:a8:e9:d2:37:ac:c9:
e2:ad:f1:e2:f2:f5:4f:0f:c8:8b:c6:a7:77:bc:15:
3b:1c:a5:67:f8:05:72:e2:e8:e3:9b:55:7e:8c:d1:
f7:c7:b9:89:7c:c8:95:36:b2:7a:e1:10:d8:eb:13:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:48:70:09:B9:28:A0:7E:C4:BC:7E:05:27:84:3C:B2:DA:18:4B
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:90:04:d9:11:e2:1b:94:79:30:a6:e6:5d:f4:85:fa:47:
8b:58:f3:48:cc:bb:7f:bb:85:25:16:5e:36:b6:33:f5:a6:00:
5e:62:1c:6c:1c:70:a2:a7:d3:fa:25:97:cc:ad:42:9a:d3:c3:
80:22:53:42:69:a3:ac:a0:b6:27:bd:37:08:04:bf:d4:d4:06:
90:81:02:13:81:51:54:4e:89:ff:45:ff:a0:e2:6b:9d:69:1b:
d3:fd:05:ec:b4:ce:a6:33:03:73:82:eb:4b:38:1f:9a:c0:3a:
d5:70:d1:22:8a:8e:f4:61:be:df:19:59:07:90:dd:ae:1a:cc:
89:40:67:8b:99:65:89:c1:20:36:16:c9:43:f5:7d:51:2a:56:
a9:f1:56:bc:6b:cb:6d:0c:ff:8b:a2:40:84:3d:fe:86:2a:8a:
ab:d2:d4:63:d7:8c:d7:26:21:71:1f:26:77:d3:16:36:65:ea:
f6:82:b2:44:b0:44:53:3e:62:de:eb:92:ba:95:5f:6f:e0:23:
55:9b:77:9c:e5:9a:ab:d7:d5:be:e9:a1:c9:e8:92:b5:d7:7d:
a6:fb:78:2b:1d:7c:69:a0:d5:00:f0:b7:8c:8e:30:a4:fe:a2:
c7:6a:ef:4b:fc:31:29:13:25:54:34:1c:2c:f5:a9:16:bc:3d:
39:56:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:38 2026 by rpki-client