
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
File: L-KdbJy8NTcKAaomhNP3cxr5TJw.mft (raw, json)
Hash identifier: +bre/ikZFMu9MKeOek6MewAT+ba5U8SdEcF3uvf4juM=
Subject key identifier: E0:0E:88:58:9E:1F:0D:40:67:5D:6C:92:7E:2A:4C:86:43:95:85:A3
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Certificate issuer: /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial: 01A1743968D91F4F0A28E677BBCCF5708A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:21 +0000
Manifest this update: Sun 25 Oct 2026 18:01:21 +0000
Manifest next update: Mon 26 Oct 2026 18:01:21 +0000
Files and hashes: 1: L-KdbJy8NTcKAaomhNP3cxr5TJw.crl (hash: YDwuR7qq2QNrDeFggMMUvt++J5lQtYE34IReHU1C9c0=)
2: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (hash: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:68:d9:1f:4f:0a:28:e6:77:bb:cc:f5:70:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Validity
Not Before: Oct 25 18:01:21 2026 GMT
Not After : Oct 26 18:01:21 2026 GMT
Subject: CN=e00e88589e1f0d40675d6c927e2a4c86439585a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:78:b4:5c:8f:ad:78:b2:a3:45:cc:47:e1:
27:fd:27:07:d8:47:a6:b1:b6:d0:c4:46:b4:43:1e:
28:2c:82:a4:fa:dc:d2:d4:5b:e1:1a:26:09:59:91:
32:90:0d:96:1f:4b:23:3a:1f:74:5f:93:9f:b2:bd:
e9:8a:2f:d4:3e:41:3b:22:15:a9:02:07:af:a0:26:
a7:c6:50:fa:d6:54:ec:6e:8a:6e:59:91:ff:a6:ed:
a8:0b:89:13:2c:dc:4b:50:b8:8b:ac:54:3d:20:10:
6e:a9:1f:20:71:9b:f8:7f:ca:c9:73:72:ca:19:29:
88:21:de:63:20:4f:8c:2b:9f:e1:f1:15:9d:f2:5c:
7d:9c:88:8b:4a:8f:bd:eb:87:15:59:12:35:07:d4:
2c:02:1e:eb:c0:5c:78:d6:a7:7f:40:26:31:90:ac:
51:8b:47:80:99:64:a6:54:bd:ec:6c:55:e1:79:d3:
2a:05:a3:07:d4:51:9c:45:2f:46:39:13:e1:b4:17:
b1:5a:c0:ef:e3:8a:a9:da:91:0e:e4:1f:92:68:ef:
34:a3:74:d3:86:b8:19:ff:9d:93:0e:05:07:04:4d:
64:96:9c:67:b5:57:54:a1:1d:54:f6:c6:dd:ed:d3:
fd:70:be:38:4a:81:52:b0:bf:6d:0d:2b:3b:74:49:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:88:58:9E:1F:0D:40:67:5D:6C:92:7E:2A:4C:86:43:95:85:A3
X509v3 Authority Key Identifier:
keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:b0:92:c7:75:52:ad:23:33:49:9f:42:3e:56:60:42:69:
e1:fe:7a:e1:d3:ef:b1:41:dd:2a:5e:10:1c:0f:c1:66:a5:5e:
a0:95:4d:de:1f:98:43:1d:37:0d:0a:6e:5a:e7:37:cf:7f:94:
1b:06:cd:74:b9:a5:18:d5:bd:dc:3f:cf:8e:08:f1:e7:db:79:
93:18:20:22:82:41:1f:ab:8c:10:60:ac:68:30:38:37:85:c5:
95:7e:43:b7:8c:58:27:92:6c:b9:f1:a8:5a:5c:e3:da:7c:1c:
b7:01:b6:6b:db:ff:be:d7:26:ab:2e:6d:78:d7:55:57:bf:32:
61:12:60:b9:0d:67:33:6d:d9:aa:1f:9f:51:be:75:65:62:ce:
b9:75:96:ee:63:22:2c:f4:f8:b1:ad:35:45:cb:6d:91:17:45:
e9:dc:46:29:29:86:f2:33:e7:99:be:c8:64:73:00:d6:b9:ca:
c3:cf:1c:5b:40:79:53:42:5c:b3:a2:1f:19:58:5d:66:0e:36:
6f:65:ee:7e:95:c3:a9:a5:26:01:52:98:1e:b8:d8:22:c2:39:
58:d9:7f:2a:c8:6c:e5:24:0e:e3:2d:4c:33:bc:f6:52:09:58:
fb:1e:a8:17:33:34:34:98:db:b9:a6:df:3b:d6:33:68:37:ba:
4f:a1:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:28:41 2026 by rpki-client