Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: mJ+QrwtjF9XdTXF+YwlqcC+0gaGoz4dMlgqO0MwMB9o=
Subject key identifier: D8:6B:C3:28:65:37:BB:30:13:17:7D:AC:DE:13:57:D5:BC:62:F7:0E
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 019D28F21606F01CE2678FE7CCECD9929F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 186D
Signing time: Thu 26 Mar 2026 07:00:47 +0000
Manifest this update: Thu 26 Mar 2026 07:00:47 +0000
Manifest next update: Fri 27 Mar 2026 07:00:47 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: PKzwlLV6C7kCgALI7l+QdNbSzxJM0br7ZXuypPh0EdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:16:06:f0:1c:e2:67:8f:e7:cc:ec:d9:92:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Mar 26 07:00:47 2026 GMT
Not After : Mar 27 07:00:47 2026 GMT
Subject: CN=d86bc3286537bb3013177dacde1357d5bc62f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:45:7d:08:a4:1d:a5:e8:f0:7f:70:28:bc:
6e:2c:51:e1:d8:81:f8:bd:b5:63:98:aa:24:6f:e1:
93:60:4d:79:2a:1d:45:db:b7:78:48:d3:1d:11:95:
5c:93:c9:7e:bd:74:74:e1:b9:6e:57:28:77:bc:43:
ad:69:33:af:0f:06:c8:3e:38:9f:5a:9c:47:b3:91:
0e:67:c2:a6:1b:66:97:57:ee:7a:ff:28:e0:d0:68:
b8:4f:1e:5d:79:bf:73:b4:e4:a3:04:97:89:54:38:
b3:09:76:0d:e6:0a:34:ec:66:72:e5:c4:9f:9d:a7:
71:3e:10:fd:6e:2a:29:07:b4:87:39:f6:d4:bd:27:
66:c9:89:32:53:a4:0e:ca:02:2b:ef:2f:4b:31:37:
a5:7c:29:cb:b6:30:95:9e:98:e5:7c:6a:a1:71:28:
52:de:5e:38:b3:63:18:84:0f:0b:2c:60:8b:64:aa:
c6:7b:74:51:7b:9f:3d:8c:17:6d:f1:12:e1:93:05:
22:05:4f:55:86:d5:ee:0d:63:bb:a2:8a:8f:48:33:
fc:4a:de:9f:52:31:a2:25:37:52:90:65:10:02:e9:
d9:6d:af:a6:0f:cf:0d:b8:5c:d0:e6:cd:ba:4e:bb:
85:b6:c5:0f:c7:e7:9c:35:63:bc:96:b5:18:35:b0:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:C3:28:65:37:BB:30:13:17:7D:AC:DE:13:57:D5:BC:62:F7:0E
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:3d:6c:f2:e7:48:f7:2c:54:da:36:9e:3c:dd:c2:eb:87:
33:4a:24:1e:cb:c2:47:a0:20:74:1e:91:96:4a:69:6a:c2:a1:
2e:de:e5:66:cc:06:43:6d:51:61:9d:7b:6a:0e:f8:48:14:da:
44:ba:a2:00:b3:c1:14:9f:57:9d:74:67:47:9f:12:b1:74:ac:
03:ef:9b:d2:c2:1f:e3:37:42:1f:eb:6c:17:a5:47:e0:ae:6e:
df:da:aa:78:25:c1:e3:ba:99:0e:0c:92:87:98:c9:a1:ff:58:
83:26:5f:46:ec:bc:4b:66:7b:bc:d7:9b:43:93:08:3d:f0:01:
e1:55:70:2e:3e:52:c5:fb:9f:67:ed:0e:09:32:b4:da:d2:a7:
21:28:db:8f:57:65:91:d7:91:02:86:90:4a:a0:8c:0b:f4:0a:
6d:64:7a:9d:6e:29:44:00:3a:80:69:cb:2f:bc:b3:8f:71:7f:
64:8c:87:63:fd:d9:7f:c1:43:e5:e2:a4:bb:1f:c0:b9:fe:5c:
8d:83:fa:a1:44:07:bd:70:df:9c:ab:48:81:01:5d:67:8a:db:
cd:6d:d5:2f:77:a2:91:ce:64:5a:50:d5:54:93:51:ff:d7:d4:
21:09:d4:df:8a:28:a8:59:64:49:cd:38:e1:db:c3:8b:28:ee:
c9:f0:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:11 2026 by rpki-client