Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: i4W1yrxTNA3jgnp1S3MlikvcOWSSqMvNk1llqFgpbPw=
Subject key identifier: 40:57:33:DE:C1:36:67:23:D9:26:95:33:2B:4F:7B:1A:C0:78:7D:74
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 019D33084EA67E1EE967F2A86C690BF19E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 06:01:15 +0000
Manifest this update: Sat 28 Mar 2026 06:01:15 +0000
Manifest next update: Sun 29 Mar 2026 06:01:15 +0000
Files and hashes: 1: dYTWl_HrN9r92Nekpg3pgJtlLjM.roa (hash: voD1ajQ6b6swHMNJXe4JnTjlvgwr00xMQAtpSBslD8k=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: OMWi76K/X4muUDO7z8bQTJPhsyXI3QVkYYFT3eF8nF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:4e:a6:7e:1e:e9:67:f2:a8:6c:69:0b:f1:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Mar 28 06:01:15 2026 GMT
Not After : Mar 29 06:01:15 2026 GMT
Subject: CN=405733dec1366723d92695332b4f7b1ac0787d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:86:ad:f5:73:d1:a2:b9:ad:58:59:e6:50:
dd:10:55:8a:93:b6:c2:81:91:b6:7a:8d:98:b8:2b:
c8:22:d8:8e:df:28:52:cf:f3:bc:d2:e2:d4:a5:40:
cf:7f:3e:fd:0d:be:c2:10:fd:f2:96:63:a1:4e:39:
48:61:63:78:c9:d1:cd:74:7e:90:58:6b:39:38:05:
50:e3:0a:89:bd:90:e3:3e:2c:13:cc:51:3d:6b:d2:
49:f8:3a:b8:cf:5b:73:5f:9f:c2:92:86:2b:96:0a:
33:26:36:d8:32:14:fc:d4:84:d9:fd:be:34:4f:7e:
81:96:eb:2c:b3:4c:ee:7c:3a:e9:da:ee:d0:c7:2e:
4c:2c:c1:99:0f:4f:30:14:9e:dc:1d:e4:13:70:df:
d6:ce:93:7e:9a:0e:a6:ab:3f:4c:d2:27:d4:81:cf:
11:c4:a8:82:a8:13:81:48:60:64:be:39:6b:37:fd:
62:5b:c2:0f:b4:b4:8b:72:0d:b5:13:e8:59:70:ba:
22:4a:a4:46:6e:72:74:1b:8d:f7:d1:ee:81:00:79:
76:b2:87:fd:ce:5a:08:9b:eb:a0:e7:4e:d5:e1:71:
a4:4a:07:46:fc:15:4a:65:40:f1:a9:63:6e:65:bb:
44:3e:2e:eb:da:97:c0:14:6a:fd:7b:59:c4:3b:72:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:33:DE:C1:36:67:23:D9:26:95:33:2B:4F:7B:1A:C0:78:7D:74
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:8c:e6:2c:75:d5:a1:6f:de:a6:98:9a:83:32:5d:18:ac:
7e:43:04:6e:30:d1:0a:e0:ed:f1:63:77:e3:7d:ec:91:64:20:
20:33:a9:c8:ee:4a:ef:71:02:fe:9a:36:1c:d6:5e:7d:7e:36:
63:ca:ef:15:80:91:fe:f3:dc:80:ab:44:80:5e:36:91:de:cf:
14:5b:25:4d:fb:90:b3:34:5a:f0:df:82:30:27:42:f4:9c:7c:
a6:8b:00:06:7f:cd:55:2e:96:ae:7f:45:d4:d4:ae:55:81:48:
2f:0d:95:13:b2:d4:ef:ae:8d:77:dc:c0:12:14:bb:dd:b3:97:
90:a0:97:a9:01:83:9d:3c:f9:86:df:fe:3d:1f:40:be:7a:c0:
a3:af:45:9e:28:c7:6d:73:e5:f1:44:6f:85:c8:ca:e9:8d:e8:
45:38:ea:14:04:08:52:5b:f0:63:14:bb:ff:c7:d0:38:f4:61:
5d:83:f7:13:91:29:b6:a2:a4:09:d5:95:83:24:b5:f6:3b:0d:
f6:1c:9c:0c:e2:44:c8:a0:c7:8d:7c:a6:d1:19:9c:5c:da:ba:
c3:16:35:20:b2:e2:87:25:8b:29:e2:3a:7d:97:77:0f:fc:07:
00:79:a6:9e:d3:fa:4f:40:52:25:2e:02:75:4e:83:ad:84:df:
ff:49:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:33 2026 by rpki-client