Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: ufGkBpa9Lbi5y8tkTYi0Dsdzv1f+FndOgyimL7sm6EU=
Subject key identifier: 34:CB:39:8D:2A:39:F3:7D:AC:9D:1A:CD:14:02:2E:A5:C4:8D:36:22
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019D2627FA1A11FC99B207F88C9C17F66A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 18:00:47 +0000
Manifest this update: Wed 25 Mar 2026 18:00:47 +0000
Manifest next update: Thu 26 Mar 2026 18:00:47 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: e89UfWqXKaC21dp1sPcYPZv4U+kalJNd/p7zTv+9cJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fa:1a:11:fc:99:b2:07:f8:8c:9c:17:f6:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Mar 25 18:00:47 2026 GMT
Not After : Mar 26 18:00:47 2026 GMT
Subject: CN=34cb398d2a39f37dac9d1acd14022ea5c48d3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:eb:aa:72:6a:33:af:72:e6:34:ae:85:a7:
12:5a:33:cf:1c:10:f7:5f:cf:ec:21:28:81:a9:19:
a9:a8:2f:45:9b:22:11:c3:7a:e5:3c:a5:e2:89:e8:
d2:17:fb:55:c2:f3:ee:1e:3b:9f:90:08:af:6c:b6:
e8:68:c6:b6:d8:06:3d:ca:7d:31:6c:8b:92:b8:3c:
dc:c0:6b:5b:85:d9:08:15:2b:75:23:ab:15:61:3f:
17:93:5b:99:84:7d:a3:61:d2:17:e6:5e:95:5c:51:
c8:59:44:08:21:3e:0e:dc:14:40:ad:e6:dc:80:2a:
1c:37:17:0e:6e:33:bf:d9:9e:f0:6c:dd:11:c0:46:
16:77:00:94:44:e4:85:fc:b0:30:5c:c9:8c:b7:58:
6e:3f:45:06:08:1a:91:2a:f5:b8:64:0e:fb:e4:40:
f3:a3:57:87:9c:4a:cd:c3:24:c1:dc:6c:a0:b7:c9:
ad:c3:58:a9:0d:ee:d3:07:84:06:b7:01:ed:b8:8b:
ce:88:a8:b0:e4:cf:84:2f:34:94:71:86:fb:34:ac:
4f:af:7a:e7:e6:72:37:89:10:5b:f7:df:70:4d:9f:
4a:50:16:ff:fd:ec:57:eb:fc:c5:66:f7:b3:e0:36:
52:77:da:1e:2b:91:25:0a:52:df:d3:11:7c:53:d9:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:39:8D:2A:39:F3:7D:AC:9D:1A:CD:14:02:2E:A5:C4:8D:36:22
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3c:47:1f:6e:65:c2:9f:62:c3:00:a0:0a:06:e7:28:e2:99:
5b:ee:59:f0:6f:62:1d:80:35:ce:61:42:0a:0f:67:cd:73:1c:
c9:25:57:50:e2:51:0e:d7:33:73:32:48:ea:aa:70:1d:b0:15:
1c:c1:d7:90:33:50:88:f1:7b:60:19:f5:1b:d2:11:5c:ba:91:
21:ad:a5:b8:34:11:50:2a:01:05:2a:b0:0d:7c:70:4d:ac:2b:
00:8d:fe:63:94:e4:89:52:3b:70:0c:57:38:f3:7a:b9:65:c7:
25:cb:b9:a5:e8:1f:de:e7:f0:c3:66:39:22:da:6b:04:fa:33:
a4:8a:2f:a6:01:05:80:29:9e:4f:4d:40:53:6d:a4:14:32:d6:
40:6c:43:2a:14:1a:8b:54:12:ce:9d:4a:25:e2:87:e5:0b:36:
92:4a:99:9e:bc:28:be:8a:20:d2:43:0f:80:14:38:2d:17:d6:
bb:5f:a6:3b:2a:9c:cd:b9:5d:82:bb:39:47:69:f1:e5:03:23:
95:22:ca:21:c4:b1:93:3c:cd:0f:36:6e:1a:1c:9f:05:62:9c:
0d:12:8e:74:02:99:48:4a:d2:ea:02:74:0c:c1:4b:5b:e2:ef:
3e:44:00:33:0f:f3:95:fd:c5:30:42:1b:0d:15:d1:cf:39:03:
a8:d9:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:09 2026 by rpki-client