Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: CyLVA32jpvdmepq8x+cbTyzUNY6qQWe4XeMDK1rD0DM=
Subject key identifier: 74:A5:5B:25:02:06:73:BB:52:B3:A9:0E:AE:4C:A1:29:09:07:BA:8A
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 01A176272201BFD9353BC13F9B7C3FD0471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 03:00:38 +0000
Manifest this update: Mon 26 Oct 2026 03:00:38 +0000
Manifest next update: Tue 27 Oct 2026 03:00:38 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: UFr9mimecJqC6b07xW4k+AVyFQGvA0YUjbGpWWuev4Y=)
2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:22:01:bf:d9:35:3b:c1:3f:9b:7c:3f:d0:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Oct 26 03:00:38 2026 GMT
Not After : Oct 27 03:00:38 2026 GMT
Subject: CN=74a55b25020673bb52b3a90eae4ca1290907ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:36:cd:60:e6:0b:83:92:db:29:7a:1e:f3:
13:83:61:4a:87:25:f3:45:b3:96:3c:ad:64:5a:75:
ea:40:df:50:2b:45:aa:67:65:f1:c3:c7:3b:ce:fb:
50:07:ea:5e:fe:95:82:04:e8:c0:b9:4a:b4:c3:f1:
49:cb:a6:35:e7:1d:ff:b5:1c:8f:94:d4:1f:c4:85:
1c:1c:35:af:4f:34:7c:8b:08:40:bd:a9:5c:02:bf:
71:91:1d:bb:98:d4:af:96:81:3c:5b:e9:4b:29:dc:
50:e2:1f:f4:5a:73:ea:f3:b4:3d:50:6e:97:a5:b2:
3a:7a:dc:e3:74:0d:e9:33:85:2d:ed:f6:47:a9:85:
0f:34:9f:8b:0c:32:91:a1:f0:10:f4:1a:7d:2d:bb:
bd:d7:77:68:9b:3e:23:86:2a:ad:d6:6f:1c:2f:40:
26:eb:0c:ef:c2:f2:bc:f1:ab:c0:0f:a1:a1:82:d5:
8d:89:c0:3b:2f:65:a7:95:4c:7c:7b:c7:a8:c1:96:
88:1e:40:f1:6d:49:86:0f:1b:e6:bc:19:d0:71:b8:
c9:7c:12:3b:e8:ec:f9:40:2b:40:2e:ac:2a:77:73:
0d:12:a8:1e:4d:a4:da:49:07:94:9f:94:ed:df:a7:
67:e8:a3:4b:29:b9:88:e4:95:9c:1b:30:78:d5:9a:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:5B:25:02:06:73:BB:52:B3:A9:0E:AE:4C:A1:29:09:07:BA:8A
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:18:c7:6d:14:d8:d2:c0:31:b6:25:a6:42:8f:10:0c:a6:
84:3a:90:c6:5b:21:ac:73:0a:ef:12:ee:03:5a:52:71:00:63:
05:57:de:b5:82:49:8b:1f:db:a8:13:ff:f0:b1:61:41:94:20:
63:d7:cc:93:0a:6d:3c:3e:a3:4b:31:a3:e6:4a:08:6a:9e:9b:
cc:88:ca:45:c8:c8:2d:62:99:67:e3:d9:b8:85:41:6b:f6:a6:
e1:6b:df:37:75:29:64:25:3e:98:ee:57:f0:8a:c4:db:76:0a:
3e:50:5e:70:e7:b1:1f:8b:43:07:e7:b8:0c:ea:3b:a7:d0:b0:
3b:99:39:43:47:d0:71:a3:1d:e4:fa:20:81:1b:69:9e:4b:e6:
89:8b:31:76:ba:0c:f5:18:7a:be:51:a2:9d:55:d7:64:4e:c8:
11:37:32:38:59:63:43:31:02:c4:ef:d1:64:0e:1e:8c:74:06:
44:08:78:6d:bb:b1:c8:94:50:60:ea:f2:47:6c:62:2c:96:dd:
90:9f:f2:e2:f0:da:ac:7f:10:cf:e4:4c:83:16:3f:05:53:db:
90:50:01:9e:92:4f:11:5e:75:f3:d9:50:23:26:c7:37:eb:82:
cd:67:b3:ca:dc:b9:1d:e2:5f:6a:5d:f8:d6:4b:45:ef:6c:b1:
44:0d:68:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2JyIBv9k1O8E/m3w/0EcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk
OGQzMmIwHhcNMjYxMDI2MDMwMDM4WhcNMjYxMDI3MDMwMDM4WjAzMTEwLwYDVQQD
Eyg3NGE1NWIyNTAyMDY3M2JiNTJiM2E5MGVhZTRjYTEyOTA5MDdiYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14E2zWDmC4OS2yl6HvMTg2FKhyXz
RbOWPK1kWnXqQN9QK0WqZ2Xxw8c7zvtQB+pe/pWCBOjAuUq0w/FJy6Y15x3/tRyP
lNQfxIUcHDWvTzR8iwhAvalcAr9xkR27mNSvloE8W+lLKdxQ4h/0WnPq87Q9UG6X
pbI6etzjdA3pM4Ut7fZHqYUPNJ+LDDKRofAQ9Bp9Lbu913domz4jhiqt1m8cL0Am
6wzvwvK88avAD6GhgtWNicA7L2WnlUx8e8eowZaIHkDxbUmGDxvmvBnQcbjJfBI7
6Oz5QCtALqwqd3MNEqgeTaTaSQeUn5Tt36dn6KNLKbmI5JWcGzB41Zo2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSlWyUCBnO7UrOpDq5MoSkJB7qKMB8GA1UdIwQY
MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt
OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm
LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYUYx20U
2NLAMbYlpkKPEAymhDqQxlshrHMK7xLuA1pScQBjBVfetYJJix/bqBP/8LFhQZQg
Y9fMkwptPD6jSzGj5koIap6bzIjKRcjILWKZZ+PZuIVBa/am4WvfN3UpZCU+mO5X
8IrE23YKPlBecOexH4tDB+e4DOo7p9CwO5k5Q0fQcaMd5PoggRtpnkvmiYsxdroM
9Rh6vlGinVXXZE7IETcyOFljQzECxO/RZA4ejHQGRAh4bbuxyJRQYOryR2xiLJbd
kJ/y4vDarH8Qz+RMgxY/BVPbkFABnpJPEV5189lQIybHN+uCzWezyty5HeJfal34
1ktF72yxRA1opQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:30 2026 by rpki-client