Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: qdCPcNQDRL5tn8v72gjx0WEMn1EF6cUW6PNV3NPgQg4=
Subject key identifier: AA:1C:1F:B4:84:F5:9F:4E:15:29:97:84:75:2C:99:5E:50:B7:D3:44
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01A13D49FC07B2058041B56EFBEABEE16B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 02:00:21 +0000
Manifest this update: Thu 15 Oct 2026 02:00:21 +0000
Manifest next update: Fri 16 Oct 2026 02:00:21 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: hPvCxNMxaTfgayvqIuA2o30HSyoGI8VK96TfYmMFqmY=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:fc:07:b2:05:80:41:b5:6e:fb:ea:be:e1:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Oct 15 02:00:21 2026 GMT
Not After : Oct 16 02:00:21 2026 GMT
Subject: CN=aa1c1fb484f59f4e15299784752c995e50b7d344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:86:27:40:15:41:8a:6f:2d:ad:7d:d8:ff:
73:45:0b:5d:52:75:14:a9:d3:f8:83:76:f6:2a:ad:
02:19:48:11:18:cd:c8:4e:b1:fc:02:3d:52:b1:5d:
21:cd:58:89:98:71:e2:3d:b2:ce:7d:34:d9:0d:7d:
b1:7a:76:f7:f3:05:a4:b7:af:85:3a:d1:d7:b5:ca:
5a:64:ae:78:04:3a:2c:95:1b:a5:17:66:e7:71:e1:
09:4c:03:55:e3:9a:ce:65:20:28:a6:e8:d3:b7:a5:
af:d0:9f:ba:09:88:17:3e:bf:c4:80:bf:23:2a:9b:
d6:15:bb:2a:fd:f2:ce:8f:bf:7c:5b:14:2f:5e:bc:
f9:86:5d:49:b8:f7:1f:86:34:26:c3:28:cb:5b:0d:
ea:dd:b3:4b:7f:58:b1:9a:36:70:44:c4:44:c4:72:
69:6e:9e:1b:f8:42:24:a3:79:57:5b:b5:22:86:42:
3d:1c:b1:f6:cb:99:45:9d:81:a5:18:a6:cb:c3:a0:
84:6c:33:7e:52:88:96:95:b9:ed:f3:ad:aa:2b:4d:
f7:cf:90:d8:fd:a5:4d:b9:dc:2a:2c:c1:3b:ed:4d:
9e:32:2b:d3:7f:c8:18:c0:12:dd:bb:71:8d:91:1d:
3f:5d:95:aa:04:8c:da:cb:4c:4b:c6:b1:e2:09:fa:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:1F:B4:84:F5:9F:4E:15:29:97:84:75:2C:99:5E:50:B7:D3:44
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:67:6c:30:95:df:b2:48:03:9c:91:d5:ac:0d:48:2d:29:
99:18:dd:3d:5f:f0:a2:dc:43:99:4e:59:5b:33:4f:70:92:8c:
83:5a:cc:30:85:a0:df:72:91:fc:00:28:bf:c3:88:88:22:96:
cd:1c:5d:d9:68:29:e1:02:e0:e7:39:1b:f8:62:dc:af:a5:ba:
4a:c0:72:fd:0a:f4:4b:c1:dd:57:3d:d3:f7:25:84:83:27:c7:
d5:17:9f:77:69:61:ce:35:ed:dd:74:f0:05:eb:b7:0e:6e:fb:
d1:61:dd:48:c4:ae:3f:2e:78:1c:29:ac:53:cf:a2:84:f2:f8:
ca:2c:64:d0:cb:9a:ed:b1:f8:75:41:a7:fe:76:67:7f:0e:f3:
0b:ca:82:54:42:ac:15:88:eb:57:51:7a:8e:51:e6:21:be:c8:
16:c1:20:91:d5:44:27:26:d2:35:0c:b7:c4:1a:11:cd:9e:1d:
c8:3a:47:28:95:18:71:90:86:6c:27:2a:3c:e3:d3:de:b5:65:
1a:c4:68:b7:ea:f7:e6:b6:a4:44:12:06:de:7d:58:02:e2:03:
c1:e6:7d:3e:e4:8e:74:27:b2:cd:b8:fd:e1:ab:a2:0b:9b:87:
e4:1f:8b:b9:61:e5:d9:43:92:34:0c:51:c1:ec:b7:80:6d:49:
58:4d:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:04 2026 by rpki-client