Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: kj/U8lfoPDznKyaIeBvwU8jJ9O1paSchjX+XwwwnTgY=
Subject key identifier: C3:18:DE:9F:4E:E6:28:C3:39:F2:13:8A:88:CB:EA:5B:21:0E:E7:57
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019D2772D89B6F0836A83C87F0336DB98B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 1093
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: vanx4H48/5oKxqPnUMCGiDACHF20W/utGLkAe8yf7yI=)
2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d8:9b:6f:08:36:a8:3c:87:f0:33:6d:b9:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=c318de9f4ee628c339f2138a88cbea5b210ee757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:29:66:74:0b:4e:a7:22:4d:96:ba:b9:1a:
fc:0b:11:47:f8:07:b4:74:e8:db:45:59:ba:e3:5d:
73:6f:38:2e:a7:cf:bc:67:c1:4e:db:57:73:e2:16:
dd:a7:0a:8f:f0:d4:27:a7:bb:c5:87:a3:bf:5c:aa:
6f:3d:9f:c1:15:8c:ff:16:b5:ef:3f:83:48:71:f4:
8a:a6:44:71:c1:53:c7:67:27:23:67:6b:6d:76:51:
dd:f8:99:c1:d6:2c:c8:3b:0e:60:cb:cd:fb:35:51:
b2:5d:fa:da:33:5e:84:4e:c5:04:29:06:31:25:c3:
4f:aa:a0:aa:76:72:01:13:52:a4:24:33:eb:4a:38:
3f:f2:10:8d:e5:e9:b2:bf:30:d7:47:e4:43:a1:d1:
9e:a1:e1:3d:4b:5d:2f:18:2d:0e:03:6e:ba:c0:af:
54:8e:40:92:34:8c:e6:29:ca:65:bb:b5:df:85:a1:
06:b8:07:41:d6:ca:7a:e7:10:da:6b:68:ca:b4:38:
c0:89:35:78:59:c1:84:a6:fb:39:6a:3d:5c:87:1a:
72:3a:aa:3a:ab:52:2c:33:e1:9e:75:87:ad:2f:c0:
6a:cf:3a:4c:c3:d3:7b:f7:df:34:cf:f9:62:83:47:
e3:6a:e4:6f:79:6e:91:9e:dd:6c:92:9a:7d:69:c6:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:DE:9F:4E:E6:28:C3:39:F2:13:8A:88:CB:EA:5B:21:0E:E7:57
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c1:9c:f6:7c:d1:03:f2:2a:e6:c8:06:7c:50:75:4b:1f:50:
69:68:f4:e6:6c:60:57:93:fe:a8:f0:99:7c:d5:73:17:15:ed:
86:58:11:a0:2f:57:ed:bc:08:36:cf:2c:e3:1b:a2:cf:12:69:
83:a1:23:b8:16:8a:8e:75:0f:4c:96:46:b1:67:84:d6:25:59:
b8:f4:b4:88:1a:67:46:84:6b:27:df:2e:65:81:53:0e:ff:9b:
70:df:e2:6f:00:dc:2f:9b:8d:9d:7c:89:3f:5e:38:01:81:49:
9c:6c:48:b3:03:bf:9f:d7:83:a4:8b:a0:cb:b4:e5:86:20:ae:
fd:7e:cb:39:88:33:f0:17:ec:5c:e9:c2:3b:19:f5:d8:b4:49:
fc:dc:12:b5:59:68:18:17:6f:bb:6b:8d:9b:84:9f:77:11:6e:
e2:e6:0c:c8:95:83:a8:ab:3a:51:8e:3e:5e:b3:14:39:4e:5f:
02:34:be:07:3e:c7:d0:76:88:d9:58:f3:50:01:38:a0:12:29:
72:99:5c:52:fe:97:22:b6:60:40:d8:70:32:77:51:f7:8e:7e:
58:89:d1:39:e0:4e:ac:a2:b4:79:38:9c:61:76:c0:96:7a:09:
ef:d0:49:2d:dc:dc:ba:46:d1:be:21:50:fa:9a:b1:50:8f:ec:
bf:17:e0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nctibbwg2qDyH8DNtuYsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz
MjUxOWYwHhcNMjYwMzI2MDAwMjExWhcNMjYwMzI3MDAwMjExWjAzMTEwLwYDVQQD
EyhjMzE4ZGU5ZjRlZTYyOGMzMzlmMjEzOGE4OGNiZWE1YjIxMGVlNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGcpZnQLTqciTZa6uRr8CxFH+Ae0
dOjbRVm6411zbzgup8+8Z8FO21dz4hbdpwqP8NQnp7vFh6O/XKpvPZ/BFYz/FrXv
P4NIcfSKpkRxwVPHZycjZ2ttdlHd+JnB1izIOw5gy837NVGyXfraM16ETsUEKQYx
JcNPqqCqdnIBE1KkJDPrSjg/8hCN5emyvzDXR+RDodGeoeE9S10vGC0OA266wK9U
jkCSNIzmKcplu7XfhaEGuAdB1sp65xDaa2jKtDjAiTV4WcGEpvs5aj1chxpyOqo6
q1IsM+GedYetL8BqzzpMw9N79980z/lig0fjauRveW6Rnt1skpp9aca4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMY3p9O5ijDOfITiojL6lshDudXMB8GA1UdIwQY
MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt
Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx
LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcGc9nzR
A/Iq5sgGfFB1Sx9QaWj05mxgV5P+qPCZfNVzFxXthlgRoC9X7bwINs8s4xuizxJp
g6EjuBaKjnUPTJZGsWeE1iVZuPS0iBpnRoRrJ98uZYFTDv+bcN/ibwDcL5uNnXyJ
P144AYFJnGxIswO/n9eDpIugy7TlhiCu/X7LOYgz8BfsXOnCOxn12LRJ/NwStVlo
GBdvu2uNm4SfdxFu4uYMyJWDqKs6UY4+XrMUOU5fAjS+Bz7H0HaI2VjzUAE4oBIp
cplcUv6XIrZgQNhwMndR945+WInROeBOrKK0eTicYXbAlnoJ79BJLdzcukbRviFQ
+pqxUI/svxfg6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:00 2026 by rpki-client