Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: Bw/blqq67WQiYh8Rfg5Ppgz9enpOzUzjr/LSlaXwp68=
Subject key identifier: 71:BC:3E:46:20:80:4A:4F:C1:3D:59:32:41:09:F7:55:D8:DB:E2:4F
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 01A190FA155D4A4E55F6B2245D1BBF6596CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0ED2
Signing time: Sat 31 Oct 2026 08:01:10 +0000
Manifest this update: Sat 31 Oct 2026 08:01:10 +0000
Manifest next update: Sun 01 Nov 2026 08:01:10 +0000
Files and hashes: 1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: BrWEJ/ELgyzIAtWvB1+trKyfnlGnOS06XwTXFv0Px0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:fa:15:5d:4a:4e:55:f6:b2:24:5d:1b:bf:65:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Oct 31 08:01:10 2026 GMT
Not After : Nov 1 08:01:10 2026 GMT
Subject: CN=71bc3e4620804a4fc13d59324109f755d8dbe24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:35:80:e8:14:2d:ee:5a:5e:c4:b8:a9:50:
7f:95:a7:72:f3:9b:58:23:da:e5:b6:7e:8d:73:07:
0c:d4:ca:c0:40:20:2b:1e:e0:ec:4c:89:33:ec:5c:
0a:99:ba:10:50:d4:65:e6:3c:8b:af:64:2f:31:4d:
cd:4a:c0:d1:23:4d:71:ea:3d:de:e7:23:70:4e:71:
ef:a1:52:88:a2:88:b8:44:77:b6:51:52:7f:b6:18:
ca:d4:3e:c0:72:ce:dd:15:ea:00:fb:6f:a0:45:c4:
0a:e0:d4:fe:fe:6d:f8:c2:ba:21:05:ae:75:85:e8:
03:82:de:cb:59:dc:ef:80:b8:3c:1f:4a:55:70:b9:
e4:80:ec:7b:c4:b5:73:21:81:2f:2b:06:28:93:85:
ad:05:ce:ae:4b:68:d9:1b:ef:49:1f:7f:a7:ff:70:
35:b7:6d:f2:b0:5e:a4:bd:3c:1e:cc:44:46:64:75:
88:9e:af:62:6b:a0:d3:5d:48:ed:44:5f:de:42:c7:
f3:9a:17:c9:d2:24:d6:14:c6:df:2f:2e:89:40:e9:
16:e1:43:01:f4:43:4e:a1:57:3b:e9:ad:07:8e:8c:
0b:ca:92:98:f4:c1:85:ee:0c:94:bb:6c:63:5c:7e:
59:c5:0e:33:10:74:42:ae:53:93:75:5c:dc:da:4f:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:3E:46:20:80:4A:4F:C1:3D:59:32:41:09:F7:55:D8:DB:E2:4F
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:95:15:88:17:82:87:39:57:dd:dc:38:e3:84:07:a9:d7:da:
51:6a:aa:53:9d:35:ba:0f:4b:60:5b:2b:5e:23:8f:57:85:9e:
15:19:63:99:83:4a:7e:0c:68:4b:2c:60:6a:21:91:44:6e:29:
8d:85:b6:ef:95:1e:fc:22:35:5d:8a:f3:58:5f:f3:2b:f9:30:
8a:dc:3d:a4:fe:3b:fa:8d:9d:ff:54:ff:74:a6:cc:be:fc:28:
f2:5e:47:50:47:ce:a9:09:0d:a0:76:24:74:42:42:12:cc:47:
43:6c:aa:7f:34:04:47:98:d1:67:d2:db:b7:b7:f8:70:e2:35:
d7:f5:40:4d:c0:a8:fa:e5:a9:f3:58:30:81:cb:5a:f1:7f:cd:
1c:5f:f6:57:a6:0a:8c:ec:50:ee:9e:72:aa:55:fe:2a:df:de:
08:e2:27:45:a0:e4:f1:e4:c4:1c:7c:7d:93:dc:e4:43:59:e5:
c0:65:a7:9e:18:33:bd:56:d1:0f:70:41:f7:36:d0:26:e7:b8:
87:f4:b0:8a:ea:eb:a0:cd:4c:3f:b5:f8:88:b2:08:91:e1:35:
d4:73:11:92:56:5d:9f:fc:96:9f:37:27:52:6d:f2:09:50:f4:
12:4c:cf:2f:84:d5:6e:f2:76:5d:35:d5:fe:1f:0e:94:94:68:
e3:7b:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:22:54 2026 by rpki-client