Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: 6eKYqTAgWXoNWQXmw9hMAZYSIr7x9JyJN9d+Drtm4w4=
Subject key identifier: 3F:FA:12:54:1A:43:56:25:A0:7E:B5:C1:87:26:14:45:66:59:25:B9
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019D28164CA85DFA9329C6B8873E014E325E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 7mIA3Luhg39GWRjtxd0G6cNoiNM.roa (hash: 9RHRZDIR3eag+ugNv6r1XDMS8XWYJr2tgc2FPO+4l3Y=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: H5wty2o+8rUGswGma37+/7ZRWmY/FpoMzj3iYDHW6PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4c:a8:5d:fa:93:29:c6:b8:87:3e:01:4e:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=3ffa12541a435625a07eb5c187261445665925b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:a8:15:47:53:07:f1:55:23:6a:fb:82:a9:
4b:18:70:11:93:9a:b3:26:62:77:66:bd:30:33:b8:
f3:d6:70:d5:33:df:b3:70:37:04:77:43:fb:64:6e:
89:23:43:35:2d:9e:fa:45:e9:18:cb:92:89:66:40:
f0:a4:ce:ad:da:01:83:a3:db:93:61:19:72:59:4c:
c8:59:90:1c:91:b9:89:14:9e:1d:97:a4:90:66:d6:
17:5b:54:55:52:9c:12:c7:38:3a:a8:d6:4e:40:34:
9a:68:b4:10:b5:e6:f9:d9:b3:7b:99:13:4b:0c:a2:
9c:18:87:9a:f5:5b:ef:44:6e:29:91:02:49:cc:96:
12:55:8c:75:7a:81:e3:bc:bb:ea:8c:ac:ba:b7:55:
f8:64:f8:a7:5b:5d:9d:39:b5:77:6d:4d:05:d1:cb:
78:36:06:e8:3f:3f:a4:bc:79:c0:72:2c:28:c8:18:
28:cd:93:79:8a:c2:df:0c:93:3b:6b:06:f2:dd:ae:
02:9e:b5:71:6b:60:0a:42:9c:71:bc:fe:6c:55:fd:
66:18:c3:c0:24:e1:8a:83:f2:c4:4d:ac:42:8b:0a:
b2:26:03:09:44:90:82:a7:70:0e:95:7f:88:3f:6f:
62:39:12:91:92:78:0f:1d:d0:c4:90:51:5d:7f:ec:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:12:54:1A:43:56:25:A0:7E:B5:C1:87:26:14:45:66:59:25:B9
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:34:64:c5:15:3d:f5:e6:f0:62:ea:a9:f1:c3:e7:a5:10:25:
ac:1c:3d:b1:07:51:f7:31:1a:55:7e:92:28:74:a5:83:10:93:
77:fb:74:ef:15:88:d6:77:e5:af:56:6c:17:eb:54:10:7a:72:
1e:21:b7:b3:c6:da:68:de:80:78:15:a9:67:9d:90:6a:3a:f5:
4d:57:55:43:55:66:87:ee:76:69:92:6a:8f:9d:5d:73:2d:1c:
2d:18:be:0b:35:ee:56:09:74:f7:b3:da:c4:2a:d1:a9:e1:21:
a2:5d:e2:bc:23:20:db:21:78:ef:e6:9d:04:39:f2:05:27:f3:
1f:d2:22:d8:1f:3b:0c:44:17:01:90:65:85:75:66:65:04:cf:
75:81:15:e1:ae:ea:1e:e0:aa:68:04:3a:73:61:21:fb:f8:0d:
1c:d8:37:32:c0:b3:2d:f0:75:c5:85:ee:77:1c:68:5d:5e:a4:
f4:77:80:00:48:30:99:60:5f:d4:5d:8f:f6:bf:a6:b0:fa:a4:
e7:3b:9b:97:41:39:24:70:77:4e:9b:ef:01:32:3e:8d:59:3c:
42:0e:6b:f7:52:65:d7:21:a4:72:98:84:45:6d:da:1d:79:4f:
34:7f:2b:37:e9:33:f3:e0:2d:e3:96:a7:00:c9:31:e7:31:2f:
e7:0f:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:57 2026 by rpki-client