
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: MWlNnQxUUnTh0ZvjgSSi2TZjfzu5MdYHcYSdP+NS9Jo=
Subject key identifier: 29:62:9E:13:FA:21:51:A5:16:30:D2:C7:60:43:2C:B1:99:3A:5E:FB
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019E1EA36470EE0E8902DEA69E7061364BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 1113
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: L883Op+GUmGiimEWQmmtS1yqP+9wh/AWxQ9StqGY3xY=)
2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:64:70:ee:0e:89:02:de:a6:9e:70:61:36:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=29629e13fa2151a51630d2c760432cb1993a5efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:4b:06:43:15:29:51:41:45:2a:41:11:4c:
f5:f0:b0:b0:cb:8d:f7:a3:5d:09:8f:a9:bb:7a:2a:
53:d1:ba:82:31:ac:cb:bf:65:34:32:22:1d:21:4f:
94:c4:59:67:0b:68:db:69:ca:87:3f:36:c4:06:0b:
d0:0e:ac:75:18:c8:1e:23:cd:25:68:dd:12:19:91:
8b:92:3e:f4:69:59:17:d9:0a:62:c7:d4:ae:13:a0:
7b:30:3a:7e:f9:98:38:dc:63:31:de:be:65:a8:24:
b2:ff:12:32:2f:51:b2:b2:21:4a:2e:fa:ce:f4:67:
14:73:aa:57:00:64:5d:66:05:53:70:59:2c:f7:b2:
e5:57:b7:83:0a:da:e5:87:b0:ed:55:43:e0:a7:37:
27:c0:9e:74:47:95:41:4c:9e:f3:26:a5:51:7d:d3:
b0:b9:4f:25:ac:7b:4e:7d:c6:20:01:c7:85:67:36:
f9:8c:e7:1b:eb:52:84:b9:3b:f9:95:95:df:84:20:
93:89:84:2d:c5:c6:08:3c:52:99:0d:66:09:4c:6c:
e8:03:7c:2a:ee:5d:03:eb:ba:31:b8:1f:97:c3:17:
55:19:b4:9d:45:c6:ed:57:be:d4:ef:da:f5:c0:3e:
28:02:4f:fb:5d:07:16:d4:19:25:c4:e8:12:14:75:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:62:9E:13:FA:21:51:A5:16:30:D2:C7:60:43:2C:B1:99:3A:5E:FB
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9b:df:a3:42:2f:1a:da:3d:94:e3:2d:d6:10:52:d9:4d:7a:
0c:aa:95:ba:9c:e8:af:f4:30:c7:bd:37:ff:de:37:12:ce:9b:
93:a8:3d:ca:62:b9:1a:9d:cb:0e:df:9a:5e:40:57:d5:11:4a:
21:d4:19:96:03:cf:8e:cc:1f:ac:28:67:35:59:62:ac:f6:db:
d6:a8:ab:48:63:11:d2:65:80:18:20:07:8f:46:86:be:98:d7:
9e:01:25:d6:eb:04:1b:cf:41:5c:9a:6d:90:83:d9:b8:7b:3d:
47:40:ed:41:33:42:ba:4c:4e:54:b2:59:73:3b:0d:38:8e:f6:
ff:f2:0a:43:63:e2:c6:13:e1:5b:c4:37:79:2c:53:a0:c7:43:
46:7d:70:3a:08:df:06:cc:5f:30:56:1f:5c:23:9d:d6:95:a8:
00:89:8b:fa:f4:74:d6:04:82:58:50:17:78:3f:95:ba:64:89:
2f:cf:64:e5:9e:25:ec:f2:12:8d:0b:63:10:ec:51:3d:db:87:
d3:6d:b0:f9:80:33:a1:28:6f:01:b3:70:90:61:3a:05:62:54:
92:f6:18:d6:67:d8:c9:fb:e3:c7:19:21:dc:2b:91:c0:b7:e5:
f7:4c:19:94:9b:78:25:4b:85:d4:9a:bb:32:be:c3:7f:6d:3a:
39:26:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:49 2026 by rpki-client