Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: 8AOUkQX5WCoFyqOhlNMcjOUyBkGRjWdHfBj04wTyiXs=
Subject key identifier: 70:5C:73:80:1D:D3:73:21:B6:1A:61:54:E6:2F:68:E9:34:43:D3:4F
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019D27DFABDAB3FD7A3E27522578432F918B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0898
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: ie2+BN/GKLs040P2mBXl5SnRCgzlRMRebswbJvkCAC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ab:da:b3:fd:7a:3e:27:52:25:78:43:2f:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=705c73801dd37321b61a6154e62f68e93443d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:f7:80:29:cf:6f:9d:8b:72:b5:b7:ab:e6:
1d:cb:43:c9:3b:70:e9:9a:ed:5c:a3:14:46:a5:ce:
9d:5f:72:fc:17:2e:43:01:19:72:52:cd:19:42:2f:
c8:ea:74:2c:dd:99:38:4d:df:1d:7d:2a:21:22:61:
96:36:c1:b8:78:ea:7b:96:3a:6c:a5:31:98:3b:4f:
91:98:c0:85:08:17:11:e7:b2:33:07:87:c3:57:ca:
4f:bb:09:84:58:12:26:fe:da:f6:d1:e9:0c:db:18:
c4:59:4b:48:4a:49:6d:0a:c6:81:83:97:5d:fd:f0:
44:df:19:b8:3c:bf:45:21:a5:cb:90:ca:b7:4b:4c:
7b:73:61:8b:ea:4e:d9:d9:ac:e5:85:be:74:ba:9c:
d2:90:f9:dc:ad:8a:47:34:aa:ca:db:fb:79:5d:1f:
4f:13:72:af:e9:ac:d2:64:40:9a:ab:c7:18:cd:e9:
63:61:15:51:af:a0:77:31:bd:8c:59:61:89:b6:69:
c7:03:90:18:33:2d:a0:d5:35:30:92:41:8e:0e:aa:
a8:ab:30:d4:59:9e:6b:3c:eb:32:8f:bd:f0:21:1a:
03:9a:c8:6a:e7:e0:4a:01:1e:ff:92:24:47:20:eb:
05:9d:ee:58:8e:53:8a:06:fe:39:00:74:42:0e:04:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5C:73:80:1D:D3:73:21:B6:1A:61:54:E6:2F:68:E9:34:43:D3:4F
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:cf:97:ff:b6:d1:f0:de:bc:7b:8d:a1:bf:ae:7f:ed:fa:
99:ed:42:fa:1d:2d:36:a0:1c:b5:a4:1c:78:cb:47:74:65:71:
50:a9:d7:21:e4:d5:86:52:ad:63:e1:a9:1e:f5:5b:ea:3b:74:
45:bc:96:1f:6f:84:f7:35:c4:56:18:7d:c7:c6:8c:89:b3:cc:
fb:34:fc:cb:ad:b7:40:55:db:5a:27:89:8c:a4:01:f8:78:7a:
64:f2:0a:d6:5f:3b:32:57:21:23:0c:3a:f6:40:2d:08:86:35:
5f:79:5d:dc:bb:9d:de:59:1f:be:1f:0c:e0:6d:92:ce:f3:1f:
5f:0b:3c:60:e6:a2:03:f5:f6:52:78:52:89:19:57:45:46:51:
e8:0c:1c:4d:da:40:db:f8:35:fd:92:d6:32:7e:c9:27:92:6b:
ca:7f:83:f6:15:e5:a8:43:73:d2:b0:6c:8b:9b:8e:f7:eb:b3:
c9:99:c2:8a:8a:72:b2:38:3b:04:0c:b3:ef:33:5e:1b:42:b8:
4c:ed:9a:24:a4:52:fd:e8:1b:9a:6d:1f:39:7d:35:c5:0c:88:
81:59:c3:5d:a1:2e:eb:74:61:7b:95:29:d6:d8:b1:78:51:47:
68:a2:5f:ed:1a:83:cd:83:f9:96:72:c0:fc:43:eb:67:fb:e8:
81:dd:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:51 2026 by rpki-client