
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: oC8rNFF+GY24d0KmPuDfIFnvuI9gV3mODjeX1OC2fc0=
Subject key identifier: C6:88:60:4C:BD:A1:CE:19:DD:00:04:11:9A:A5:D1:32:8C:86:6C:01
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 01A17FD01A4DD22114254493EE66AC3C8F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1B05
Signing time: Wed 28 Oct 2026 00:01:46 +0000
Manifest this update: Wed 28 Oct 2026 00:01:46 +0000
Manifest next update: Thu 29 Oct 2026 00:01:46 +0000
Files and hashes: 1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: debLwW0m5qsIZv4gBueI6pJm3v+FPTNbuTpQ/MBHrRw=)
3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:1a:4d:d2:21:14:25:44:93:ee:66:ac:3c:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Oct 28 00:01:46 2026 GMT
Not After : Oct 29 00:01:46 2026 GMT
Subject: CN=c688604cbda1ce19dd0004119aa5d1328c866c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:a9:db:49:05:49:ce:0d:1b:3d:e3:09:f6:
ef:4a:ca:73:ba:48:8a:67:4f:5a:c7:1c:bb:e3:13:
aa:33:53:d9:e0:ae:de:ce:27:32:a5:25:ec:cc:68:
77:84:c6:aa:c5:ed:1e:d3:54:1d:cb:17:03:4c:ee:
c9:6d:7f:8f:2d:25:7b:de:a6:02:42:6c:7e:62:5f:
26:d3:09:63:92:77:3e:25:4e:ee:0b:fc:d0:54:30:
04:e0:f0:46:a8:43:a9:e1:13:05:fb:e0:f8:66:0c:
07:ea:b1:7e:49:6e:56:1a:ca:01:b6:9d:04:c4:7e:
f1:30:4c:18:30:3f:2d:ee:eb:13:3d:af:fd:97:2b:
f5:a5:8b:8d:d3:c9:77:0d:14:95:9c:f5:84:b4:9e:
1c:a5:02:00:c1:5a:eb:f6:3f:7e:45:5a:09:d1:02:
b8:3c:f2:6e:52:50:80:48:ca:d4:3d:d0:54:5a:42:
9d:77:db:e5:6b:07:dd:2f:56:ff:96:40:d4:f7:7a:
27:cc:c7:ae:6d:cf:29:f9:cd:6b:c5:94:1c:39:48:
2a:47:05:c6:42:61:69:10:65:c5:b9:fb:b9:66:3c:
4e:6c:a0:eb:3c:ff:cd:a8:33:66:b1:8f:88:25:23:
ff:9f:55:11:07:c1:8c:23:6a:24:3d:35:4d:b0:cd:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:60:4C:BD:A1:CE:19:DD:00:04:11:9A:A5:D1:32:8C:86:6C:01
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2e:ef:0a:77:8a:45:75:24:c6:47:74:4b:fc:a5:30:cc:76:
eb:d6:04:dc:fb:ee:4f:78:f2:35:d0:18:87:f4:cf:7d:75:be:
aa:77:91:47:2c:bf:6e:fd:a3:38:12:da:0e:fd:bc:76:9d:cb:
04:d1:13:75:91:8c:ed:b9:9b:43:81:6a:f9:6d:3c:bf:53:40:
e4:46:05:d8:b8:5b:cf:24:77:54:9a:a1:07:e2:dd:ab:42:d2:
1b:35:70:de:98:7c:e0:92:b0:c3:2c:b1:9f:dd:66:18:61:f3:
37:58:a3:d8:4b:99:e0:7e:34:68:7d:cb:f1:62:60:a5:75:79:
2c:a3:21:f5:a3:62:99:37:92:37:1d:ec:71:ad:0c:53:a0:ab:
ff:67:bf:88:1a:a7:24:23:f4:84:f4:73:df:bc:2b:b7:f9:73:
68:7b:19:aa:fb:f9:35:9e:5a:e8:93:39:e9:03:0c:12:49:f3:
60:ff:c5:0d:0e:36:b9:6c:61:cd:c1:6a:b1:b6:2d:4a:c3:c6:
a7:36:47:b7:91:51:61:cf:b2:fd:d2:d7:98:20:ca:d4:1b:ac:
d4:7d:a8:44:98:18:ad:10:97:64:07:19:e5:36:65:0f:2f:89:
88:42:bd:90:39:b4:7b:1a:1a:17:9b:c6:c9:fa:6d:eb:cd:db:
eb:5a:89:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/0BpN0iEUJUST7masPI9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjYxMDI4MDAwMTQ2WhcNMjYxMDI5MDAwMTQ2WjAzMTEwLwYDVQQD
EyhjNjg4NjA0Y2JkYTFjZTE5ZGQwMDA0MTE5YWE1ZDEzMjhjODY2YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Kp20kFSc4NGz3jCfbvSspzukiK
Z09axxy74xOqM1PZ4K7ezicypSXszGh3hMaqxe0e01QdyxcDTO7JbX+PLSV73qYC
Qmx+Yl8m0wljknc+JU7uC/zQVDAE4PBGqEOp4RMF++D4ZgwH6rF+SW5WGsoBtp0E
xH7xMEwYMD8t7usTPa/9lyv1pYuN08l3DRSVnPWEtJ4cpQIAwVrr9j9+RVoJ0QK4
PPJuUlCASMrUPdBUWkKdd9vlawfdL1b/lkDU93onzMeubc8p+c1rxZQcOUgqRwXG
QmFpEGXFufu5ZjxObKDrPP/NqDNmsY+IJSP/n1URB8GMI2okPTVNsM0rdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaIYEy9oc4Z3QAEEZql0TKMhmwBMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS7vCneK
RXUkxkd0S/ylMMx269YE3PvuT3jyNdAYh/TPfXW+qneRRyy/bv2jOBLaDv28dp3L
BNETdZGM7bmbQ4Fq+W08v1NA5EYF2LhbzyR3VJqhB+Ldq0LSGzVw3ph84JKwwyyx
n91mGGHzN1ij2EuZ4H40aH3L8WJgpXV5LKMh9aNimTeSNx3sca0MU6Cr/2e/iBqn
JCP0hPRz37wrt/lzaHsZqvv5NZ5a6JM56QMMEknzYP/FDQ42uWxhzcFqsbYtSsPG
pzZHt5FRYc+y/dLXmCDK1Bus1H2oRJgYrRCXZAcZ5TZlDy+JiEK9kDm0exoaF5vG
yfpt683b61qJgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:04 2026 by rpki-client