Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: uW4vcOvhkOmFuQ8rY8a+ktyUznmEjA+FWJBYwAoos/A=
Subject key identifier: 58:39:D9:BF:7E:70:0A:5C:21:FC:A1:3A:05:62:B8:DF:8F:86:7F:47
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01A12FC594852205F75913616D8D3CD1377B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1A9B
Signing time: Mon 12 Oct 2026 11:00:40 +0000
Manifest this update: Mon 12 Oct 2026 11:00:40 +0000
Manifest next update: Tue 13 Oct 2026 11:00:40 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: dspKm5K42LQmvL64LXsbuu6yibSpUCMuvORVEeBnZUE=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:94:85:22:05:f7:59:13:61:6d:8d:3c:d1:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Oct 12 11:00:40 2026 GMT
Not After : Oct 13 11:00:40 2026 GMT
Subject: CN=5839d9bf7e700a5c21fca13a0562b8df8f867f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:13:c7:42:15:86:2d:f9:bc:ac:cd:72:21:
df:ae:ea:0a:94:f7:25:c4:86:52:2f:8a:17:fd:6d:
2b:45:8f:0b:33:c4:cc:14:11:3e:5a:29:5c:01:c7:
a3:46:0a:39:15:6b:cd:75:65:d2:69:96:b5:77:32:
c6:a6:63:f6:a1:2f:ed:ac:de:a4:28:b0:de:6e:c7:
7e:71:bb:2d:96:7a:3d:bf:e4:bd:97:c8:ca:3d:e2:
8c:c1:b3:b1:a1:ed:37:a7:56:c6:cf:5d:3f:a2:e5:
36:f5:af:f6:41:78:30:33:e6:5e:31:5e:ab:4f:07:
50:d2:88:1d:65:a8:80:90:2b:1c:8b:22:95:01:21:
3f:ad:c0:64:36:e9:a0:69:c4:7c:a5:95:a7:14:c3:
dd:c9:d1:8b:51:58:f7:3d:75:3b:65:42:b1:da:64:
b9:65:cb:69:75:d0:f1:9c:5d:80:3e:f1:ea:07:36:
78:fe:f1:1f:b0:9c:11:92:c5:5a:42:e7:0e:b3:59:
95:d0:d7:d1:8d:ae:7a:47:d6:11:e6:69:e0:39:85:
4e:45:bd:ea:c2:41:86:cf:d1:8e:a6:15:14:2d:61:
17:fc:83:5a:60:22:24:84:8c:0d:b0:f4:c6:66:96:
0f:5d:4b:29:e7:bf:f0:12:fc:e8:a6:84:6e:09:29:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:D9:BF:7E:70:0A:5C:21:FC:A1:3A:05:62:B8:DF:8F:86:7F:47
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f3:83:f5:4d:75:0f:54:bc:fc:18:1b:01:2b:a7:ab:27:ae:
82:fc:85:32:f2:27:a7:80:a5:53:bd:09:60:df:bc:49:46:95:
75:f6:72:b6:7f:64:ba:a9:8c:b9:97:dc:db:42:23:c8:06:d7:
fd:63:9c:78:70:8b:cc:d3:77:91:40:51:46:20:75:b2:d4:83:
6d:81:06:bb:4e:be:ec:c4:23:a2:68:74:a9:2b:5e:74:84:91:
91:0f:c2:2e:cc:63:f2:7c:ba:93:2f:ab:ac:64:0f:bb:63:b7:
7a:df:00:00:69:73:bf:b2:23:41:36:a1:cc:29:03:91:26:c5:
05:45:b2:38:17:7c:43:0a:40:4d:38:3f:63:77:93:83:02:71:
69:4c:90:e1:04:49:da:99:b9:0a:f2:14:d8:05:05:56:d9:bb:
9f:b9:02:19:a6:cc:66:2c:70:0e:3f:32:c4:25:38:c7:47:6f:
b1:01:c1:8c:db:33:92:56:30:6e:f9:8f:00:bd:83:09:66:6e:
65:66:f5:27:de:f7:ae:ca:dd:a9:f4:4f:8d:cc:ae:10:09:d6:
6d:d2:27:d2:38:eb:84:8a:6b:e9:85:46:f2:01:62:f9:0e:f1:
f9:98:53:a9:4b:fd:4d:8b:ec:57:7f:ca:c9:6b:fe:70:d0:eb:
79:bf:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:03:50 2026 by rpki-client