Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
File: l04fjAqkvQNL6t2zOJvXNspEPsA.mft (raw, json)
Hash identifier: O8kd/DyS0jheJ/jceYZ5ipQfuDwJJZZYkh9cm7Wni2w=
Subject key identifier: 2A:51:49:43:DF:19:B8:15:6C:B6:98:80:56:0D:0E:31:4A:61:DF:3E
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Certificate issuer: /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial: 01A1830737D6468682D456E2C218561BEA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
Manifest number: BF
Signing time: Wed 28 Oct 2026 15:00:50 +0000
Manifest this update: Wed 28 Oct 2026 15:00:50 +0000
Manifest next update: Thu 29 Oct 2026 15:00:50 +0000
Files and hashes: 1: 7BZeedmWNxSvPKrlY8KT7vjjkl0.asa (hash: rlQ8KOmIrplS+aFjafrA9Je7LwJ3y4Bn50nbQiuj0HQ=)
2: L7XJcrXAsnA6L5HcXO_kON78iWI.asa (hash: /DLviuOmkxdGJXwWmiv78YOY3ddIPscOZgPQdVy3/GU=)
3: l04fjAqkvQNL6t2zOJvXNspEPsA.crl (hash: RGNEKKrQc5955RW9Po6DO3r3Bd7IzHG9rHqSxts8GlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:37:d6:46:86:82:d4:56:e2:c2:18:56:1b:ea:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Validity
Not Before: Oct 28 15:00:50 2026 GMT
Not After : Oct 29 15:00:50 2026 GMT
Subject: CN=2a514943df19b8156cb69880560d0e314a61df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:e9:23:59:a3:99:29:1b:65:1c:15:57:60:
9d:bb:d4:e5:e0:cc:82:7f:ce:54:54:f0:a2:e6:39:
e7:dc:83:40:09:93:1d:7f:89:7d:86:e1:a6:78:fc:
27:f6:b3:ec:4e:d2:a8:78:e8:05:a2:ef:25:a8:49:
0f:0f:a3:89:59:8a:b6:c2:8b:99:45:e1:c4:9a:26:
9b:bb:9a:db:47:32:38:3b:5a:2b:e1:1a:40:a1:dc:
c0:cb:78:a3:19:d7:77:f5:49:f9:e6:3b:50:81:9a:
66:b1:4e:a1:a9:04:fe:f4:ca:7a:30:ef:a3:f5:94:
62:f7:93:83:33:2a:ca:52:d6:e3:20:34:0b:12:37:
4d:08:00:2d:c1:0b:1b:ea:84:3d:95:56:84:a6:1e:
9f:19:db:95:56:71:3f:b3:e4:a4:71:38:6c:52:37:
74:4f:b4:3c:cb:67:72:6e:57:61:39:94:27:1c:ee:
ac:30:d6:a9:67:ea:08:03:95:0e:b9:45:d1:20:67:
42:a5:e8:78:a7:fe:c6:47:94:94:48:b0:39:f2:c9:
de:a4:b6:9c:3c:ed:f6:20:91:3c:bc:5f:64:3d:fa:
07:cf:a3:01:39:90:8b:a2:00:5d:ef:84:fe:76:a1:
15:b2:3b:bd:37:4b:53:7b:c0:a9:7b:be:59:7f:10:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:49:43:DF:19:B8:15:6C:B6:98:80:56:0D:0E:31:4A:61:DF:3E
X509v3 Authority Key Identifier:
keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:18:98:f6:bd:7f:49:14:e6:52:6d:81:e0:10:15:20:53:f6:
55:df:52:c0:13:84:9b:83:6f:e4:06:41:8e:9e:20:7e:bd:82:
4d:7d:6a:35:7f:23:0d:b2:b1:9b:e5:94:03:9f:e1:15:a8:13:
69:13:d5:30:cd:87:ab:33:25:37:c8:9f:40:7e:85:d2:c9:9c:
27:bf:31:3e:0a:98:a2:fa:36:24:de:a3:c6:08:6b:c0:22:b1:
3d:c9:df:70:08:8c:db:83:4c:17:84:4d:ad:92:5b:60:6f:88:
da:8e:43:fb:01:53:d1:8f:40:36:d9:f6:0e:60:e8:b7:d8:9c:
56:85:29:4d:17:9c:72:3b:2a:08:64:6d:c9:29:ed:79:95:98:
a7:bb:f9:aa:5d:cc:66:a0:85:16:92:f9:43:da:d7:76:65:22:
ef:e0:f6:da:60:b9:d8:d8:8a:89:41:42:6e:0e:f8:f0:0b:6d:
fb:9d:a9:1e:11:ba:1a:7f:d9:ee:c9:83:48:e3:e0:80:cc:9e:
2b:9c:3a:5c:8b:1a:c3:77:f5:5d:0e:24:87:d2:f0:e3:d6:16:
b3:a1:7c:b7:36:fe:41:da:4c:b2:d0:32:79:b4:81:f2:65:49:
80:37:7d:a3:fe:2e:19:70:39:d8:84:98:31:cd:3b:c9:07:17:
63:24:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:39:22 2026 by rpki-client