Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: VIfZemi/j/qA8HDOUimpInKD3QRFks4yjIkWeNnZk9k=
Subject key identifier: C5:13:9A:5C:CF:63:12:38:F8:02:7F:68:BE:B4:2C:70:2D:62:44:7D
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 019D27E008A05E45F911D9DDD7178F5163FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: 0HxwwriorTAU4/Bb3J8s+CQA0P85vyNxQ/q/LdNwnSU=)
2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:08:a0:5e:45:f9:11:d9:dd:d7:17:8f:51:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=c5139a5ccf631238f8027f68beb42c702d62447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:fc:0d:d6:0f:bc:2b:2d:02:98:db:d5:5e:
95:73:1e:94:9d:2b:8a:07:a7:ca:8a:9d:3c:03:cb:
85:84:9a:27:d1:e0:89:aa:f8:03:38:5c:e2:7f:77:
db:54:20:c1:73:46:5f:07:bc:c7:30:d7:bc:ef:e1:
cb:72:26:83:37:42:34:a1:9c:b3:9d:65:a0:49:6f:
f9:7d:8f:bf:8a:4e:80:24:67:42:a1:30:d9:0b:27:
ea:9a:22:80:bd:19:87:ad:67:83:36:34:fa:2d:58:
1c:a9:7c:fa:70:08:e9:25:dc:88:66:f8:96:81:0e:
15:84:11:ea:0f:3c:ab:a4:e9:28:50:e7:e6:49:ed:
ca:cd:6c:57:64:78:19:ac:93:f4:65:96:73:89:12:
4c:06:76:58:10:3f:8c:48:4c:d8:21:ab:91:d7:9f:
61:d0:20:e4:fa:80:d5:6d:b7:47:cf:2b:ec:6f:3f:
28:01:f9:77:ce:0e:ec:94:7e:9a:d9:36:9e:cb:ef:
53:f2:cf:7c:06:d6:86:46:ce:9d:33:86:b9:c0:08:
a4:a5:86:91:fc:3b:45:0a:06:05:2d:30:67:e2:e7:
b4:9f:c3:90:9d:c1:7e:d8:65:a6:be:08:84:96:24:
4e:49:e8:83:37:8e:42:ec:f0:9d:e1:75:d6:f9:0c:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:9A:5C:CF:63:12:38:F8:02:7F:68:BE:B4:2C:70:2D:62:44:7D
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3d:3c:62:0a:34:a2:c4:9d:e4:80:3b:01:05:8a:a2:84:b7:
35:45:4b:7b:ff:99:e5:c0:43:89:12:66:57:7c:dc:a8:49:eb:
79:19:e3:0d:9d:39:6f:b7:5f:a0:4d:f6:4c:79:fa:9a:62:2e:
e9:7b:de:8a:c7:3a:15:19:ce:a8:66:c9:60:f5:fb:cd:72:74:
18:b4:5b:2c:75:83:f1:97:a9:12:42:43:01:7b:a8:f4:88:83:
29:17:ef:af:ac:1a:23:c9:5b:ee:c3:24:cf:5f:2e:e3:69:34:
09:60:e0:fb:7e:a2:cf:46:35:66:9b:7d:e6:34:d8:c9:a5:84:
eb:97:f1:57:ff:1a:c2:d8:5b:eb:5d:b1:67:c5:0c:83:20:93:
18:5c:1d:9e:53:af:df:2a:9e:29:e8:03:88:a8:d6:ba:e7:20:
ef:e6:de:ff:4e:d9:bf:35:9d:f4:8a:fe:43:94:7e:7d:f7:ff:
3a:b2:95:07:b6:82:42:ea:ae:7a:b5:36:36:a2:58:6c:dd:cd:
63:d8:0a:a8:69:d3:61:81:08:e2:89:8f:21:43:71:94:2b:cc:
62:fb:ad:8f:6d:9b:e9:df:fb:bc:48:89:e4:b0:69:8a:48:ec:
5c:55:55:e8:8a:41:21:b1:45:c1:4b:cc:7e:0b:fe:fb:90:56:
5a:c9:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:32 2026 by rpki-client