Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
File: L-AKZEtkBmYThodpOCvZdWJUt0w.mft (raw, json)
Hash identifier: AkYGqfgjzWio+I2qeZra0kQYcSkZvl5Xzk5O6UfpeiE=
Subject key identifier: 29:3B:9D:8D:DE:3D:44:67:ED:2E:2B:7E:B8:BF:CD:AD:98:75:41:90
Authority key identifier: 2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
Certificate issuer: /CN=2fe00a644b64066613868769382bd9756254b74c
Certificate serial: 01A17D73E6EE68F540D05E42548CD06410E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
Manifest number: 64
Signing time: Tue 27 Oct 2026 13:01:50 +0000
Manifest this update: Tue 27 Oct 2026 13:01:50 +0000
Manifest next update: Wed 28 Oct 2026 13:01:50 +0000
Files and hashes: 1: Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa (hash: ZZqXUKHYxTr9MHDKXflyXYtvngRtOV46eqRt3MsLLZ8=)
2: L-AKZEtkBmYThodpOCvZdWJUt0w.crl (hash: XpHqg5R4+FryyXGZELO/Yzg2xOWqwNCtXMnZN+KJy/U=)
3: jgOL2tJQLrYm30Lq61CCvxxKTLU.roa (hash: eBcqqbVvXfc7hYjWR9k75RZaMKi04DdasRprdoGGtDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:e6:ee:68:f5:40:d0:5e:42:54:8c:d0:64:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe00a644b64066613868769382bd9756254b74c
Validity
Not Before: Oct 27 13:01:50 2026 GMT
Not After : Oct 28 13:01:50 2026 GMT
Subject: CN=293b9d8dde3d4467ed2e2b7eb8bfcdad98754190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:d5:1f:19:7b:17:41:98:fc:cd:2f:f1:d2:
56:48:9d:85:94:03:2c:fe:2b:d7:9f:07:14:6d:c2:
fe:bc:0f:40:a7:f6:bd:f7:5d:71:8b:a7:4c:2c:f3:
41:bb:37:45:49:e4:70:01:e9:46:ec:92:b5:17:57:
ff:b8:f3:0d:03:2f:db:0d:b6:11:56:b3:9a:2b:f3:
a2:a8:9d:14:18:86:b6:39:6f:58:9f:6d:5a:36:38:
47:96:1e:29:ad:34:5d:4f:c8:b3:bd:47:75:04:64:
a1:ed:de:89:63:24:6b:cb:72:b4:85:5c:97:0c:fe:
e5:e6:c2:3e:30:f4:20:7e:cd:e3:68:c6:14:81:78:
01:79:ce:b9:dd:9d:43:22:52:e4:ad:a2:e4:c1:41:
30:a7:ff:1c:70:62:43:06:55:5f:eb:a2:94:70:4c:
a5:0a:19:9b:e0:86:3a:db:09:8c:5d:11:63:52:c7:
12:80:57:48:24:3d:29:e0:3c:87:75:a7:1d:67:98:
52:06:1f:f7:0b:85:0f:38:8d:fc:84:b7:0c:36:ea:
54:9b:9d:d0:f7:b3:ef:75:66:d8:f9:dd:ae:a8:a1:
29:1d:4d:60:c9:b0:e3:be:ae:11:1f:a9:ad:15:f0:
52:8c:c0:15:0c:52:8f:d2:54:33:ce:55:3d:6c:57:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:9D:8D:DE:3D:44:67:ED:2E:2B:7E:B8:BF:CD:AD:98:75:41:90
X509v3 Authority Key Identifier:
keyid:2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:67:fb:bd:fc:5a:c3:fd:91:21:37:c4:8a:d0:d0:da:cb:
eb:94:4f:c6:eb:e0:21:76:23:eb:73:fb:6b:47:3c:64:90:13:
c1:72:52:c3:be:47:f4:82:58:bb:66:51:fe:c2:04:aa:51:de:
9d:cd:ac:97:ce:62:e6:fb:86:80:da:2b:dd:fb:0d:85:04:ea:
2a:2e:9a:83:6d:bb:89:0e:94:94:81:4c:4d:aa:68:ee:ec:3a:
27:c7:1f:1d:50:34:a4:d9:4d:32:ff:b4:ac:8b:c8:46:85:4a:
24:20:39:c0:fb:78:a7:79:79:31:3d:9b:41:47:15:3d:3a:28:
5b:29:bf:2c:7a:51:7f:7b:b4:c9:08:ba:31:fc:2d:53:1a:23:
5b:4f:16:cc:49:99:d2:f5:b7:6b:d4:41:73:e5:37:24:9a:84:
a4:cd:ca:5d:4a:0d:c2:bf:2d:66:11:7a:ad:ee:ed:1e:44:e4:
04:f0:17:80:68:b0:8f:43:29:a7:24:75:06:92:1a:ae:cd:01:
c9:80:ad:69:fc:a0:95:fa:20:c4:de:d0:e9:89:a9:47:38:07:
7a:86:e3:5e:1e:11:86:8d:0c:f0:cb:38:69:e1:5f:0c:47:28:
68:4b:12:3a:16:5a:53:00:5c:42:6a:49:ac:86:cc:f6:9b:54:
7a:c3:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:54 2026 by rpki-client