Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: UUA+0h4Hdhmq9i1IK7ZQLkborScD+xdO8YztCOfsOWk=
Subject key identifier: C5:8F:2B:DD:2F:3A:D7:DE:96:04:3E:80:02:77:8F:B6:2D:91:08:B5
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01A18D1D20B196E2276B9E583BD809B8FED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1AD3
Signing time: Fri 30 Oct 2026 14:00:58 +0000
Manifest this update: Fri 30 Oct 2026 14:00:58 +0000
Manifest next update: Sat 31 Oct 2026 14:00:58 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: TnRr0Zqdha1CVOAf1DVJs+Evky+iy/DFrh+EWUN0wqo=)
4: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (hash: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=)
5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:20:b1:96:e2:27:6b:9e:58:3b:d8:09:b8:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Oct 30 14:00:58 2026 GMT
Not After : Oct 31 14:00:58 2026 GMT
Subject: CN=c58f2bdd2f3ad7de96043e8002778fb62d9108b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:c3:24:1c:94:3c:43:61:06:f9:97:62:13:
68:f8:84:6b:8a:da:8b:6f:17:96:6b:06:e7:05:9a:
1a:bc:99:38:6c:01:69:58:06:d0:2d:ef:c6:5f:67:
87:59:4f:b7:2c:e7:db:52:a6:73:8a:fe:66:f8:2a:
74:46:e8:8c:51:d7:e6:fd:75:77:73:00:42:82:a0:
6d:3e:5a:4e:31:f1:28:00:98:25:06:b0:9f:82:68:
4b:dc:e0:49:b9:3d:e0:c8:f6:41:c9:d7:e3:a9:ad:
cd:43:e1:3c:76:20:10:46:e6:b6:e9:c3:8f:af:df:
72:52:ab:05:2a:1e:a9:ea:a1:24:a4:5c:0e:74:59:
19:55:70:04:51:fa:40:8a:f1:a2:dc:bc:2c:0c:47:
3d:03:dd:80:85:c1:19:5f:08:69:22:62:5c:68:f6:
f6:90:85:0d:a9:8b:9c:1b:a8:5a:4a:26:8f:ac:10:
54:5d:47:b6:1f:0c:d9:48:ff:21:92:df:9c:b5:c6:
8b:0a:7f:41:75:a7:77:82:47:c0:af:4e:63:ff:b6:
d1:bd:93:8f:13:57:d3:78:89:1e:e4:c4:28:e7:2f:
69:e9:7b:4b:18:da:9d:24:40:24:a1:9e:5c:d3:58:
08:82:37:0b:b3:4b:af:88:d7:0d:d4:71:92:6c:71:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:2B:DD:2F:3A:D7:DE:96:04:3E:80:02:77:8F:B6:2D:91:08:B5
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:bb:d1:90:df:96:f7:79:01:e9:05:d6:02:70:b2:7b:72:
98:43:23:d9:32:26:b4:b3:01:4c:34:29:59:79:68:3e:d9:44:
72:7d:06:f4:c5:2e:21:88:63:aa:26:6f:50:67:8d:8c:1e:15:
18:be:8c:3d:60:e7:98:9d:a4:16:f3:96:3c:c9:bc:51:4a:d8:
59:ef:d2:57:81:7c:76:71:2c:a4:16:e9:4f:a0:6e:0f:3b:ee:
9e:2b:58:37:3c:b9:d3:59:9c:bd:91:d0:72:f0:ef:85:83:5b:
01:f4:1f:42:1e:7d:a3:96:5f:b0:a7:3c:9f:98:9d:60:7e:0c:
87:06:49:28:b1:16:f6:aa:cb:0e:76:ac:24:03:de:fa:ce:02:
0d:d8:da:74:3a:54:28:c6:bb:0d:ad:52:45:fa:28:3c:17:cd:
a5:cf:9e:75:4f:51:9e:53:27:04:69:13:06:07:67:16:85:86:
d5:4b:8d:5e:70:7e:d4:96:f5:47:c6:16:64:b4:9f:0e:d9:78:
c5:4d:1c:6d:c4:0f:f4:d9:d6:95:9e:e0:7b:8f:63:64:5d:0d:
44:ed:b6:c0:23:e9:ed:33:43:f8:7b:ec:21:9f:d6:3d:cc:08:
e3:57:43:1c:2b:1c:41:2b:26:72:d3:c0:2c:19:9e:9e:fa:23:
89:f4:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:08:14 2026 by rpki-client