Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier: ZYo+zgVWItX3xG1PIOW2pfyDJ0oBJYsysLkTbMqEuI8=
Subject key identifier: D0:29:D2:DF:6C:5D:9E:A4:A7:16:F2:10:96:CE:4A:B0:5F:27:91:B3
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial: 019D27044E176C7BE0B2C7958DF4CD467215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number: 14F2
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: XieXA9i7NDlfmfC1GnsSiaqDaQp2DowMPv/SJbv3PCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4e:17:6c:7b:e0:b2:c7:95:8d:f4:cd:46:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=d029d2df6c5d9ea4a716f21096ce4ab05f2791b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:e2:a0:a8:fa:91:96:5f:fe:08:19:81:47:
df:69:d5:fe:eb:bf:c7:06:df:1f:f4:33:5f:e3:da:
f9:b2:b4:de:55:72:d2:8f:f4:78:32:f9:70:81:51:
1d:0d:5c:2a:21:09:4c:61:52:03:ec:38:7d:bc:33:
18:71:3b:fe:b1:39:08:0e:95:e5:6e:ed:9d:5a:5d:
a8:4a:17:0d:33:a2:0e:af:76:f9:f8:69:a1:22:dc:
7f:49:e9:ae:e1:b0:6b:e0:12:9b:4b:9f:55:6e:52:
c3:83:2f:a1:6f:fa:4b:42:02:c6:c5:04:11:5d:c9:
62:46:b0:18:8d:ad:88:33:6f:c4:d4:65:9d:55:a1:
8d:2e:54:1a:0c:ae:6c:78:4d:f4:34:79:d8:99:92:
46:2f:2f:65:28:5b:2f:ec:6b:f9:04:d2:a5:bf:bf:
18:10:98:9e:e0:39:ce:0a:25:bc:54:40:c0:ae:6b:
eb:b0:64:9b:c9:62:b2:4a:ee:86:d7:17:7e:9d:59:
07:0a:db:d4:8c:49:d3:f1:07:ab:0f:a0:5e:71:5b:
1e:26:71:bc:dd:cf:77:de:a8:74:f5:b7:b0:ba:53:
dc:29:62:40:f1:0d:5a:da:35:18:eb:e4:12:e9:c8:
56:3f:36:fb:7e:91:1d:31:e0:e3:f0:27:59:70:34:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:D2:DF:6C:5D:9E:A4:A7:16:F2:10:96:CE:4A:B0:5F:27:91:B3
X509v3 Authority Key Identifier:
keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:f1:86:63:45:b8:bd:39:7b:a3:3b:15:c1:75:5f:1f:fe:
18:b0:54:46:a2:84:5e:4a:00:dd:b0:d2:fe:99:18:0e:18:43:
bd:59:60:07:f3:b1:2b:5b:16:b6:a4:8e:fc:cf:79:36:78:59:
19:27:04:b7:9f:bd:e0:d0:e3:2b:93:ab:ac:40:90:d2:62:3c:
be:ef:55:d4:46:50:03:a6:cb:6d:c2:a6:c3:6c:b9:06:b9:9a:
e6:b3:76:8b:f4:41:a5:4b:d1:f4:e0:9d:f7:8a:b8:e0:de:34:
3b:9e:51:be:02:9b:27:13:46:6d:d6:95:f7:76:44:2d:6f:cd:
1b:28:6d:b5:0c:40:c8:5a:a2:bf:62:98:9e:94:87:09:a5:2a:
a0:60:a2:df:0e:69:a7:28:e9:7c:f5:b6:c4:ca:ec:14:52:01:
7f:3b:05:15:e7:d7:dd:27:7d:2c:f2:56:d1:13:a0:f7:cf:bf:
5d:0b:0a:06:f4:d0:96:b2:84:90:86:8c:85:ce:31:0f:ed:4d:
da:93:aa:08:56:d4:fa:d1:a3:1e:3a:ee:e2:71:b2:c8:27:f4:
78:02:5d:ec:6d:cc:ad:4f:06:1c:d5:d6:7c:41:0e:9f:fa:a9:
e6:e3:2d:e4:17:6a:18:24:5b:a1:85:f2:39:fd:f0:08:6e:53:
ea:9f:ff:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBE4XbHvgsseVjfTNRnIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZWMxMGQwMDg4YjJkZGI4YTRkMTUxNWJmMDZiNGMwMDEy
YWUwNDYwHhcNMjYwMzI1MjIwMTI2WhcNMjYwMzI2MjIwMTI2WjAzMTEwLwYDVQQD
EyhkMDI5ZDJkZjZjNWQ5ZWE0YTcxNmYyMTA5NmNlNGFiMDVmMjc5MWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb3ioKj6kZZf/ggZgUffadX+67/H
Bt8f9DNf49r5srTeVXLSj/R4MvlwgVEdDVwqIQlMYVID7Dh9vDMYcTv+sTkIDpXl
bu2dWl2oShcNM6IOr3b5+GmhItx/Semu4bBr4BKbS59VblLDgy+hb/pLQgLGxQQR
XcliRrAYja2IM2/E1GWdVaGNLlQaDK5seE30NHnYmZJGLy9lKFsv7Gv5BNKlv78Y
EJie4DnOCiW8VEDArmvrsGSbyWKySu6G1xd+nVkHCtvUjEnT8QerD6BecVseJnG8
3c933qh09bewulPcKWJA8Q1a2jUY6+QS6chWPzb7fpEdMeDj8CdZcDSDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAp0t9sXZ6kpxbyEJbOSrBfJ5GzMB8GA1UdIwQY
MBaAFC/sENAIiy3bik0VFb8GtMABKuBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUt
NTczY2NmNTllNjg4LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUtNTczY2NmNTllNjg4
LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt/xhmNF
uL05e6M7FcF1Xx/+GLBURqKEXkoA3bDS/pkYDhhDvVlgB/OxK1sWtqSO/M95NnhZ
GScEt5+94NDjK5OrrECQ0mI8vu9V1EZQA6bLbcKmw2y5Brma5rN2i/RBpUvR9OCd
94q44N40O55RvgKbJxNGbdaV93ZELW/NGyhttQxAyFqiv2KYnpSHCaUqoGCi3w5p
pyjpfPW2xMrsFFIBfzsFFefX3Sd9LPJW0ROg98+/XQsKBvTQlrKEkIaMhc4xD+1N
2pOqCFbU+tGjHjru4nGyyCf0eAJd7G3MrU8GHNXWfEEOn/qp5uMt5BdqGCRboYXy
Of3wCG5T6p//xQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:55 2026 by rpki-client