Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: pK1VqRyjg/pfbyzlYbvEaykqAdkhSFvRsiQelZemuc4=
Subject key identifier: BC:93:7F:52:EF:B0:41:66:D3:CE:23:49:0F:D6:B2:AF:F3:E2:93:34
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 019D273B229AA6037C7E589AC73ED4D6328E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: 7Z6ojelPseFZngCaUR_CY78Fb5I.roa (hash: HGlBrDAdLj79PeTsI9ZoARQIK801VBLKm1hbPGS+ChQ=)
2: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: jYOFBNnHm7iG2QwTY7rro4htdd56eO4eEzK+XhIMXms=)
3: hE7_1eUP4ATkoyOOP-i0vzG4-1w.roa (hash: zBuduVQjj/QP+i0lFDnpUqeCE6ciPhxfEuFUyQ8aeOA=)
4: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (hash: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:22:9a:a6:03:7c:7e:58:9a:c7:3e:d4:d6:32:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=bc937f52efb04166d3ce23490fd6b2aff3e29334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:b3:0f:c2:21:42:bb:ba:c0:48:7d:a3:12:
36:9d:ef:76:bd:d3:ea:0f:ec:36:0c:27:8b:4f:1a:
7a:75:70:03:06:5b:42:99:74:fc:ff:f5:6c:bf:ad:
aa:72:3a:48:bf:a5:86:c1:ab:51:98:e9:22:e4:d1:
9a:5a:49:ea:0b:a4:72:ac:4c:58:f2:7d:ac:39:2b:
02:66:cc:f8:27:0a:f4:8d:c9:16:d0:ef:fc:1b:e1:
02:db:76:5e:da:c4:33:f3:e5:df:ec:52:52:37:32:
2f:05:92:dd:f9:1a:45:2c:20:b1:83:5c:16:e3:26:
d0:c2:38:5c:f9:df:2f:92:e8:d2:a5:9b:f5:aa:18:
6e:43:50:a5:6b:02:73:7c:e7:13:ea:e6:13:2f:a7:
68:35:9b:e6:b1:ed:f7:46:0c:bf:39:96:2b:d5:22:
9b:05:98:18:19:35:2b:d0:cc:f5:ea:f4:cc:ae:0c:
35:ed:d3:13:4c:0b:98:72:2d:9e:30:d1:89:4d:e6:
6d:16:30:08:23:52:b1:f3:cd:28:aa:64:f2:0a:84:
b6:f0:29:0f:2b:ec:35:cd:ae:00:5d:0c:8f:67:3a:
82:19:04:93:62:36:18:7b:b1:06:bf:a5:f1:8f:ac:
fd:ce:28:27:2c:8e:c6:4d:a3:93:75:4b:fe:64:6a:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:93:7F:52:EF:B0:41:66:D3:CE:23:49:0F:D6:B2:AF:F3:E2:93:34
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:1e:80:dd:ff:64:7d:d5:6e:43:65:0a:82:6c:bc:ed:43:
6c:1f:7e:4f:2c:f1:86:f8:92:67:24:1d:13:67:44:e4:99:fa:
e7:f5:2e:c4:5b:db:6e:a1:90:ca:31:cb:65:b3:fa:93:22:ea:
df:53:e9:62:c6:50:be:29:67:35:14:d5:7c:1d:40:6c:e8:32:
f0:21:96:c4:fc:30:3f:24:21:e8:bc:47:9a:c9:9b:c6:15:dc:
4f:82:dd:b8:60:a6:2f:9e:44:a9:51:b5:8e:69:3f:0d:6f:75:
f3:93:81:dc:b5:7a:fa:a4:c8:da:16:b7:9d:18:bf:9e:5f:51:
f5:39:cc:b3:85:9f:90:f6:ab:31:65:5c:a2:60:8d:95:46:c2:
43:90:9d:9c:d1:d4:ae:1c:95:f4:35:8b:8b:05:b7:ce:95:85:
70:e5:51:9c:b8:bc:f7:20:ef:d8:4d:54:c2:80:6a:48:1c:74:
3a:60:19:f3:8d:30:60:3c:95:6d:d4:7e:4b:4b:e4:6f:89:7f:
93:a6:92:03:b0:bb:94:69:29:e6:46:5d:ee:cb:44:e6:cf:ba:
6b:3e:6d:6b:a4:0e:69:5f:24:ba:59:a9:5f:1c:9b:5d:ec:a6:
d7:32:5d:d7:7e:6d:4f:54:f9:bd:3a:d8:44:c1:78:9f:ee:49:
a7:57:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:28 2026 by rpki-client