Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: KduXtcrfIxDYHQexo/LoweCPhtw4jRTMm9gCzyWOe+U=
Subject key identifier: 10:93:73:52:9A:86:25:B5:30:11:41:5A:A2:AE:97:D7:7D:5A:0E:D6
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 01A17C97D0596A019A92D65867C1684F6090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 10B2
Signing time: Tue 27 Oct 2026 09:01:26 +0000
Manifest this update: Tue 27 Oct 2026 09:01:26 +0000
Manifest next update: Wed 28 Oct 2026 09:01:26 +0000
Files and hashes: 1: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: StH0t83wftJywhW8hNC1EDcFIwbwi3Rh6iMp+m4kF1w=)
2: uWpjW8EwvAg8xDTN_thfrhA4LAw.roa (hash: ymWyRdJuJht5zV2QVlIv93b0gP0KmipQqoXtKDEDweQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:d0:59:6a:01:9a:92:d6:58:67:c1:68:4f:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Oct 27 09:01:26 2026 GMT
Not After : Oct 28 09:01:26 2026 GMT
Subject: CN=109373529a8625b53011415aa2ae97d77d5a0ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:49:f1:6c:28:80:08:e1:c1:04:b3:cc:48:
eb:46:1a:29:dd:36:28:10:02:d5:0a:f9:0f:11:b6:
32:a4:e1:2d:77:d2:25:51:93:a1:d8:fc:52:47:49:
d4:53:44:f2:a6:05:52:a2:67:f8:57:2a:08:1c:8c:
3d:50:30:78:3e:a9:24:fc:34:af:94:aa:e7:89:ea:
65:60:49:97:b4:24:63:92:9f:f7:fe:45:51:d5:1d:
1a:b0:c5:c6:b2:15:fe:00:e0:3e:26:27:e2:7e:7b:
d1:20:30:0b:af:ef:5d:a2:0b:87:2b:3b:83:08:bb:
da:57:0f:28:bf:be:4a:b4:34:d1:3e:6d:50:9b:40:
1f:09:e4:a2:57:1f:00:99:3e:10:50:f0:ac:f8:be:
8d:c4:db:91:4a:c7:ae:2b:f9:4f:7c:85:13:87:31:
a4:78:b2:67:ba:c8:b5:96:dd:1a:c8:4f:9d:0b:b8:
1d:2b:b7:25:f6:5e:2f:23:6b:f9:e5:89:89:3c:c6:
47:fd:bd:8e:5c:cb:43:32:7c:38:58:0b:62:ad:8e:
10:ab:ba:28:e6:9c:e2:e3:1e:7a:fb:40:79:12:89:
d1:4e:1a:5f:10:99:af:0e:61:63:d1:74:d1:37:5a:
ff:13:11:91:cf:53:2a:c9:3d:1f:53:23:11:9b:c8:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:73:52:9A:86:25:B5:30:11:41:5A:A2:AE:97:D7:7D:5A:0E:D6
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2f:65:8f:2c:d1:5c:80:5e:27:c5:91:5a:17:bf:4f:36:21:
81:6f:96:77:b8:d6:4f:96:1c:07:a4:16:d8:3e:20:a3:6f:d1:
42:e5:a3:bc:f6:8f:64:1d:af:0c:0a:93:d6:ca:e2:e8:90:60:
12:da:4e:bd:21:71:10:0b:1c:a1:14:82:71:50:43:75:6d:00:
4c:85:58:f6:0c:09:c2:ca:d8:e6:7c:bd:41:5c:03:01:16:cd:
48:e4:85:6c:db:88:10:0f:0f:74:ce:57:c4:89:07:ed:ba:cb:
fc:5e:dd:3d:32:a7:93:5f:37:a7:b8:d6:6b:9b:b3:1a:2e:1e:
d0:5b:f7:e2:35:bc:cd:14:f9:94:4b:7b:c3:0d:62:35:ac:dc:
88:c4:54:82:2d:eb:85:8e:12:1e:40:22:e5:34:dd:bd:1e:ee:
62:56:70:c3:bc:fb:a4:94:a8:ca:94:68:95:ca:22:10:53:77:
3f:10:03:ca:f3:38:02:de:60:16:b1:e4:64:b4:2c:bd:44:1c:
45:23:29:74:c0:7b:50:3c:a8:a6:71:15:0a:43:88:e3:c8:fb:
dd:65:60:70:0b:03:3a:58:f0:03:4a:05:2c:42:ea:cc:e7:42:
a2:b0:14:6b:ef:8d:a3:54:81:0a:89:94:62:51:95:ed:97:12:
31:d1:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:55 2026 by rpki-client