Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: /KD3a4Vur/IdkFJd/mus8pGzZIuO4KpAaqBwzER3wwg=
Subject key identifier: 66:FC:E5:5B:58:5E:25:47:CE:AC:B0:EE:04:46:54:A9:D6:77:18:0D
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 01A176276A51B1B5366D7161656A0A5148B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 03:00:56 +0000
Manifest this update: Mon 26 Oct 2026 03:00:56 +0000
Manifest next update: Tue 27 Oct 2026 03:00:56 +0000
Files and hashes: 1: dYTWl_HrN9r92Nekpg3pgJtlLjM.roa (hash: voD1ajQ6b6swHMNJXe4JnTjlvgwr00xMQAtpSBslD8k=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: j/YkxGtoIH6q3xNuiJ7p5co+njHt3TKnfNq2AZlb74w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:6a:51:b1:b5:36:6d:71:61:65:6a:0a:51:48:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Oct 26 03:00:56 2026 GMT
Not After : Oct 27 03:00:56 2026 GMT
Subject: CN=66fce55b585e2547ceacb0ee044654a9d677180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:3f:1e:69:25:f2:f5:2b:cd:43:34:b0:67:
af:d7:1d:47:fd:0f:26:44:e1:05:47:89:4b:46:67:
93:5d:56:13:e1:1d:1e:ac:94:d6:29:d6:bc:98:ec:
f5:48:8f:e1:b8:5a:ab:28:36:ef:6a:bc:a0:e6:c4:
b4:b9:32:58:63:58:cd:4e:17:26:d9:f2:c4:da:5b:
d4:23:66:88:70:98:e3:92:84:ad:01:42:b9:19:b0:
32:5e:31:b6:bb:47:73:e5:2a:97:c2:fd:2b:b6:77:
f8:51:fc:e0:d4:b1:3d:71:cd:8b:f2:6d:67:af:ba:
31:fd:52:f0:a3:c2:f9:b3:52:9f:74:41:b7:ed:9d:
30:80:b0:22:40:90:97:99:de:09:34:aa:f5:ba:c9:
19:a3:58:d9:f1:51:f0:85:78:cf:17:95:e9:ef:0f:
dc:00:2f:96:0d:7b:8d:aa:7a:fc:68:dd:01:f7:10:
a3:c1:c4:66:3b:d3:88:0b:08:48:3e:f9:b7:15:2e:
03:f9:1a:2b:2d:ca:70:57:d5:32:4f:1d:7b:f4:a6:
ac:65:26:5e:94:8d:2a:b1:89:5e:d8:a5:1a:a0:47:
f9:8b:5e:29:5d:d7:ba:26:bf:4e:9d:89:cf:f7:77:
bb:c1:ba:47:38:ad:65:45:0f:8f:78:b5:54:a1:ef:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:E5:5B:58:5E:25:47:CE:AC:B0:EE:04:46:54:A9:D6:77:18:0D
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fc:55:c1:59:69:7f:91:29:41:a5:e8:96:4b:e7:f0:88:28:
d7:8a:e5:c5:0f:03:50:c4:65:c6:50:a5:cb:7d:bf:21:0f:e7:
a4:15:7d:1b:02:6c:c2:66:dd:93:21:bf:e7:92:18:b5:68:d5:
56:b3:d6:85:5f:31:33:1d:89:30:c0:63:68:8a:0c:8e:88:a3:
d4:02:f9:d4:9b:2a:e2:35:92:00:29:48:ab:83:fa:51:01:b4:
c4:9a:94:1b:a7:a0:92:42:95:f7:51:88:2e:86:00:5c:4d:26:
5d:55:e9:3f:02:64:67:f5:de:05:cd:96:bb:20:f4:8b:fe:43:
d4:98:57:a0:1b:b3:5d:c1:eb:93:ac:cf:48:3d:2c:66:16:61:
a6:d1:3c:c8:da:07:1b:3c:89:4f:5d:4e:58:d9:4b:2e:ec:7c:
bf:4b:08:9e:34:53:ca:3c:5b:d0:a2:56:d4:2a:e6:9a:3f:60:
81:e3:8e:b8:0c:3e:fc:db:82:60:1b:aa:d9:ca:27:da:19:c9:
0a:5f:93:b8:f1:34:22:ca:60:47:a6:d3:90:84:b2:98:1f:d0:
4a:13:62:c4:a0:44:e3:42:76:20:5a:e9:eb:fa:49:6a:98:38:
28:a2:c5:ef:09:80:19:3c:14:4b:03:e0:2b:22:a2:15:2c:ca:
be:5c:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:24 2026 by rpki-client