Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: cAUc+OI7eWYivcW0CP+evYefs0K9IsiT4gc6OCc6zqc=
Subject key identifier: 76:42:ED:00:27:08:2D:74:C0:E0:4F:75:9C:67:04:F4:9F:23:9C:ED
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019D27042EEC62B589F86A51AEFAE40D4F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0ACF
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: dxODWf6xtmPaVKDnauAYs+9Wzqmy/VnGvOjwsoIPR0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2e:ec:62:b5:89:f8:6a:51:ae:fa:e4:0d:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=7642ed0027082d74c0e04f759c6704f49f239ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:65:c0:69:cd:25:de:34:8c:1c:df:d8:1e:
d6:d4:57:53:9e:26:c7:7c:30:c0:d4:6f:9f:2c:2b:
e3:ef:6e:63:a7:85:c3:fb:65:5e:de:fb:5d:d8:af:
e2:09:e8:07:fe:7d:9e:70:37:cb:89:95:22:49:59:
61:ac:fe:50:34:50:1f:b9:e0:c5:5f:76:cc:98:fe:
54:0d:9b:96:46:6e:8c:6e:82:00:5b:62:f4:b1:a0:
2c:37:4c:19:df:53:03:8f:30:84:ce:93:30:37:c1:
5d:3a:96:78:00:fe:33:1d:7b:57:1d:bd:ad:a3:80:
a8:cc:4c:7a:c3:ec:a9:7f:62:6b:13:18:e5:dd:f3:
5c:29:71:7d:39:9a:bf:a1:e0:22:18:b5:ab:32:ff:
33:4f:cd:d2:ac:d5:53:c5:48:5f:80:07:c2:61:f5:
93:11:61:61:aa:a9:06:85:f8:32:ae:94:f4:43:5b:
71:14:8c:8c:ff:ba:49:07:ba:3a:fb:65:a2:7a:2a:
29:7e:43:99:af:34:08:d9:4f:59:d4:10:2e:b8:60:
9b:6f:20:59:af:07:ea:f5:73:4d:cb:f5:f2:9a:84:
eb:84:48:95:89:30:bd:84:a0:eb:12:d6:42:26:6a:
ca:9f:d9:3c:80:3a:b1:40:b3:3a:dd:ff:a8:41:ec:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:ED:00:27:08:2D:74:C0:E0:4F:75:9C:67:04:F4:9F:23:9C:ED
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1b:26:fb:aa:e8:38:4d:8a:4a:ba:12:af:f3:27:0a:ff:21:
bc:6a:76:86:c0:6d:24:61:f5:c9:f1:00:22:87:e1:f6:b7:95:
ee:39:ea:61:1e:41:ba:a0:cc:cb:c3:85:64:be:be:33:df:29:
8f:ef:f9:01:47:b8:58:c4:2b:a3:c7:0b:c7:af:9d:ed:1d:24:
be:9c:3b:aa:a0:62:fb:38:86:d0:5a:89:3d:cb:35:7a:5d:68:
25:71:63:4b:7f:35:b0:74:fc:2a:78:69:93:43:f8:19:32:42:
7b:23:b5:c2:67:47:45:70:a6:ae:31:b2:df:35:3d:15:f4:53:
90:2c:36:5f:c0:e4:5f:02:17:89:2a:5d:1c:49:18:67:bb:fe:
22:53:72:0a:f0:af:91:95:1c:ec:9c:4a:74:97:5a:2a:28:75:
7d:e7:8c:31:5c:6a:ed:d8:d7:da:6e:e8:5b:ac:e1:7d:72:d4:
8a:a0:70:6d:6a:28:3e:b8:b1:01:6a:f0:a3:eb:04:f3:c8:f0:
1a:ee:c9:0d:78:56:59:65:b8:80:6f:36:50:19:23:01:f8:ae:
22:39:12:92:51:de:58:6c:6a:79:db:58:59:de:4b:c2:95:36:
24:6c:fc:db:65:5d:f9:15:47:95:ad:ec:07:81:68:a0:8a:e1:
53:ac:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:48 2026 by rpki-client