Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File: L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier: 50SSs/EaEWqyQzXzAeO/u/Wr9xhrgaaADQ9q2ZB+z8M=
Subject key identifier: 21:E1:2C:18:AB:39:EC:CD:F7:2D:4D:01:A4:F6:4D:E8:46:A3:70:41
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer: /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial: 019D254CA108C812EF91F0C41C5165A200DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number: 40
Signing time: Wed 25 Mar 2026 14:01:12 +0000
Manifest this update: Wed 25 Mar 2026 14:01:12 +0000
Manifest next update: Thu 26 Mar 2026 14:01:12 +0000
Files and hashes: 1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: G6Gj5sg/lW9PXKy8L8waCexbydR+I+JRpKRsyEPPjMk=)
2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a1:08:c8:12:ef:91:f0:c4:1c:51:65:a2:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Validity
Not Before: Mar 25 14:01:12 2026 GMT
Not After : Mar 26 14:01:12 2026 GMT
Subject: CN=21e12c18ab39eccdf72d4d01a4f64de846a37041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:4c:4e:2f:16:41:a5:29:d1:08:a1:d4:ae:
5c:37:cd:65:dd:c3:be:85:7e:76:f3:2a:60:79:e3:
6c:8b:45:43:9d:19:3d:95:06:48:6e:9d:0f:f9:02:
62:6f:86:ae:e9:35:39:38:86:98:f5:00:58:d3:dc:
64:9f:28:6f:31:c6:8e:3f:ea:82:69:33:88:2d:02:
df:88:63:a3:da:86:d4:4e:b0:70:5c:49:d6:92:ec:
20:34:d5:59:ce:e8:a9:8e:04:f4:09:69:69:1a:58:
7d:53:91:eb:a6:21:52:2d:1d:49:1b:70:22:06:12:
c2:ee:b4:fb:e6:10:12:90:a8:70:0f:8f:0f:6f:f5:
f9:4e:d8:8f:93:a6:fc:29:4e:17:98:20:59:c5:f0:
e0:8b:f0:fb:9a:bb:92:d1:cc:47:d9:da:84:98:fd:
cf:66:60:a6:4f:c4:22:9b:88:eb:2f:d2:ae:ec:23:
a2:a0:e1:ff:73:31:99:ea:a6:14:2a:09:51:f0:72:
3f:05:92:7b:b5:03:81:b4:d3:97:6e:26:e1:44:bf:
e0:25:e2:ff:d5:b6:83:ae:59:f9:17:0d:91:61:22:
eb:14:57:f5:7a:3e:ab:f2:45:d6:5c:c3:30:be:7a:
2a:e4:9b:5f:d0:66:cb:cd:56:9d:c5:fe:11:17:a1:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:2C:18:AB:39:EC:CD:F7:2D:4D:01:A4:F6:4D:E8:46:A3:70:41
X509v3 Authority Key Identifier:
keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:4b:f3:c8:c1:68:01:d8:ec:5e:78:a8:ed:03:8b:8f:cc:
8d:59:b9:a5:c3:3c:e3:34:51:82:7c:60:06:35:80:d2:0b:26:
41:6f:0f:51:eb:f8:b2:c2:f7:e4:5d:aa:c9:d7:5b:24:97:1d:
e2:dc:84:66:fb:4f:b2:55:93:56:3f:c0:78:3f:f8:4b:30:b5:
11:01:5c:35:c7:06:12:43:66:31:d2:f0:3a:f9:d0:c4:53:3e:
f6:c5:76:ad:7a:85:fe:9c:33:f5:c2:f4:68:f8:32:ef:22:ff:
72:be:5c:ff:1a:d0:51:14:23:47:fe:6b:76:b3:2d:3b:9e:60:
49:75:25:bc:31:8e:fe:ef:80:20:dd:42:99:fd:e3:27:d7:6d:
e7:51:72:41:70:60:e4:40:81:67:f4:c8:1c:42:c3:74:c5:6b:
41:d9:d2:11:9f:0a:65:7c:e9:ad:ad:1e:31:a7:56:91:f7:80:
6e:2f:e6:48:dc:61:e5:0a:77:83:a0:41:c5:67:d6:7a:13:a2:
91:58:29:2f:79:dd:fc:c9:13:70:b0:a6:35:1b:0c:2c:90:b8:
05:10:83:bc:ea:4b:4c:4b:10:8b:36:20:59:be:41:5e:e7:bf:
39:3e:a7:d9:e5:53:4e:bc:ef:e9:31:eb:f9:fb:12:e7:64:7f:
8e:80:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:10 2026 by rpki-client