Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier: q7VoptNZ8+wVYSt2/WSCO1hvsx+1Zhm7MxhxpWEyLyE=
Subject key identifier: A0:D0:8E:55:A3:EE:9C:98:C1:70:B8:83:08:0A:94:12:4F:85:4C:5C
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 019D273B074A268A0059F11F5F121CEEC98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number: 06AF
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: ybsI4d7g0W8ahJcacP35e2feSLQukXlVpCXT9JGVdtw=)
2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:07:4a:26:8a:00:59:f1:1f:5f:12:1c:ee:c9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=a0d08e55a3ee9c98c170b883080a94124f854c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:82:06:fb:1b:95:8e:96:41:31:af:cc:b3:
ea:ec:1c:01:04:e7:dc:91:2f:a8:b7:04:83:1d:e8:
03:09:55:18:3d:b2:62:3c:bb:4d:76:54:3b:0a:dd:
18:ff:8d:d8:65:da:8e:91:e5:f9:f6:27:ed:9c:b2:
95:18:1e:9d:36:90:79:0e:7b:7d:3f:0b:45:70:12:
45:19:6c:3d:81:b2:9d:02:8f:c3:6b:89:95:da:48:
e2:94:51:a3:7b:2c:d4:35:40:da:e7:4f:66:da:58:
89:22:c9:f2:b9:56:31:0f:a8:39:5d:34:df:49:b3:
cc:4c:67:01:c7:fe:7a:2b:d3:09:25:08:59:1f:c0:
eb:4b:9c:93:86:94:65:44:41:b1:97:83:b7:04:88:
05:d3:56:f5:39:5c:4c:45:c8:a1:66:ba:95:ef:b7:
7f:1b:ed:e4:9b:1d:5a:5a:08:cd:65:1c:89:a8:fe:
25:85:09:ea:0d:e3:77:2f:52:1f:9b:e0:3e:78:24:
db:be:15:28:40:8e:90:bc:91:fe:b7:c8:f9:23:73:
0c:f1:7a:9e:6f:2d:67:2b:26:06:f6:27:03:31:d8:
8b:c8:56:84:71:2a:e1:a4:d5:ae:4f:8a:bf:59:d4:
a3:c0:11:8d:b3:05:8e:27:ff:f8:ff:8d:ce:06:81:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:8E:55:A3:EE:9C:98:C1:70:B8:83:08:0A:94:12:4F:85:4C:5C
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:30:3b:74:70:89:ae:d7:eb:1f:76:ff:a8:c1:f4:8e:a7:
3c:16:8b:3d:8f:38:d1:c5:4b:7c:af:08:f5:7d:ba:32:1e:5f:
e3:86:b5:ee:6d:8c:61:6f:e6:8b:b0:0d:27:b4:e9:cc:58:b4:
1f:b5:d9:b6:82:5a:56:2f:d8:e1:27:fa:66:7e:b6:e1:f8:09:
7a:8c:5e:4c:fc:c8:31:79:e3:83:dd:0f:20:d2:09:c1:c4:ac:
31:48:bc:b6:46:61:36:e7:f8:a6:51:9a:3a:19:c2:35:24:ab:
be:36:2c:7e:d0:8b:9a:4a:0d:6d:b9:b3:61:1e:6d:dd:c3:99:
26:e6:43:d3:52:5b:e7:4b:0b:11:20:c1:42:15:cc:95:18:8b:
48:e7:93:cb:60:0d:e6:79:18:39:77:df:e5:9e:1b:64:c2:b7:
e0:71:43:96:89:59:95:77:2a:9e:75:ad:e8:ef:45:08:0c:5f:
8d:cb:8c:3c:7b:41:b3:4b:6f:91:af:5c:f8:2d:a2:51:5d:23:
45:24:d0:10:74:0e:3b:75:4f:d3:22:a9:5e:15:24:0f:dc:67:
86:47:5a:e4:7b:75:6f:33:54:4d:50:8d:9b:cb:8b:c8:5a:fc:
fa:e0:29:7b:29:01:a2:26:c4:bb:bc:d6:2a:1e:97:a4:e5:2d:
90:53:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:20 2026 by rpki-client