Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File: L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier: SQs0vVQhMmQJ+ldxBQcvz9Q8bOtlam1UxRq+haVWn6o=
Subject key identifier: D4:DC:04:92:EE:37:0F:62:9F:67:B4:CC:C1:38:C6:1F:F2:7B:72:BD
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer: /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial: 019D28168093BC37C7F5DA833C3DF8AA9693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number: 1829
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: aF+efuMGugEzEYsaR4Abgcw5mhEhY6PiKhhaHK+0iK4=)
2: cDenQVBrYpp63UG-_hY8Es1OCC4.roa (hash: dbS0e4LG3xvIACIDMoTjy0V3GDhN2f+VsajxcMXqd5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:80:93:bc:37:c7:f5:da:83:3c:3d:f8:aa:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=d4dc0492ee370f629f67b4ccc138c61ff27b72bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:8b:0b:e0:e4:e1:d2:e1:a6:cd:b6:54:60:
53:d4:5a:0f:90:9a:54:34:6c:b7:83:ed:95:18:d7:
33:a9:23:ac:0d:1a:f3:c1:3a:0e:68:26:a4:25:6c:
46:f8:e9:60:a8:00:75:4a:66:0a:90:a4:f4:b6:0f:
80:c4:0a:ab:19:3e:32:f9:bc:2a:5b:e0:4f:89:e3:
87:9a:e2:2a:d7:f4:16:88:39:1c:b4:07:be:fb:7b:
47:d4:0c:d3:46:ce:a5:5c:8a:7b:8c:d0:07:7c:b2:
e5:0f:58:d6:19:a8:d2:d7:9a:24:f7:b5:a8:bb:5a:
bf:c7:d4:f7:ec:24:1f:04:76:63:19:8e:79:4b:d4:
14:0a:52:29:7b:c8:85:c4:a2:ef:84:37:ef:87:de:
f6:2e:64:ee:fc:0a:9d:74:9e:71:3d:12:66:f8:6c:
75:a6:93:75:c7:d3:6c:81:33:48:29:21:1f:54:7a:
19:3d:ac:c5:98:93:4d:89:28:38:87:f2:61:28:41:
0d:5f:39:3d:0b:a4:ff:37:94:27:0c:fc:6d:be:ae:
d7:a0:a0:ef:bb:a6:5c:40:c0:a1:a1:92:49:31:05:
76:8e:ba:77:a1:01:83:9a:f2:1d:da:97:ae:e5:b4:
a2:ea:d6:c5:a9:1b:db:89:87:77:21:b0:27:ee:60:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:04:92:EE:37:0F:62:9F:67:B4:CC:C1:38:C6:1F:F2:7B:72:BD
X509v3 Authority Key Identifier:
keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:6d:79:5c:c5:e0:b0:bd:c5:f8:f8:d4:1c:00:81:9d:62:
1c:10:2d:d2:5b:40:f2:ef:93:f0:eb:99:3e:1a:5e:ad:99:dd:
10:d5:24:9c:05:ed:4d:3c:63:9b:c7:49:bc:39:55:bc:40:c6:
41:12:a0:ac:dd:a1:95:3c:6a:5e:4d:a9:9b:87:07:f9:4e:0a:
30:05:86:ed:42:ee:93:0f:70:41:a3:c5:ae:8d:12:7a:93:12:
50:ae:fe:61:a4:88:1b:09:00:97:b2:01:6c:32:2f:b1:61:46:
3e:63:8d:ec:68:08:81:7b:e8:2b:a9:41:87:25:a0:cd:30:da:
08:a9:a9:d1:66:00:31:d8:3a:12:7c:3d:9d:e5:da:cb:7f:23:
3d:68:ba:24:83:63:67:e0:94:a9:a0:da:f5:44:51:6e:42:26:
47:ac:f8:dd:db:d9:31:d7:2e:39:8c:61:28:6a:1f:13:d9:36:
ca:ce:b4:a8:ce:d6:7c:ed:1a:66:2f:fb:fe:0b:6b:15:86:b6:
35:cb:bb:fc:12:8c:95:9c:f3:07:d8:c0:bb:c0:34:60:77:1f:
fa:e4:e0:9c:4c:c9:9e:19:99:42:a6:18:c5:dc:e6:5a:48:1d:
e3:36:bd:e4:50:ea:4f:20:a4:5c:c8:4f:23:9d:12:36:26:e6:
d9:f7:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:07 2026 by rpki-client