Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: W0JawS5aZhA52d3QqrKkB/ANsDtVWQgVbyccm/WIkm0=
Subject key identifier: 1A:A3:E5:8C:1F:71:80:00:99:90:24:0E:FA:81:04:87:BF:07:14:59
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 01A03F3B1D70E130E47D4707AFEBEFA5C597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 153E
Signing time: Wed 26 Aug 2026 18:00:33 +0000
Manifest this update: Wed 26 Aug 2026 18:00:33 +0000
Manifest next update: Thu 27 Aug 2026 18:00:33 +0000
Files and hashes: 1: JNmXvrsL4QUvDHkICJz6m5Up78E.roa (hash: BLhtsTAWR9XcWaxVCBS42M+LRcERJIfM10IC2M3COIA=)
2: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: OZxgxKA7F+TPi2P/Wh4K3mlqR2D6+j8NJo1KQMkbKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:1d:70:e1:30:e4:7d:47:07:af:eb:ef:a5:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Aug 26 18:00:33 2026 GMT
Not After : Aug 27 18:00:33 2026 GMT
Subject: CN=1aa3e58c1f7180009990240efa810487bf071459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:7a:b9:e3:18:51:55:73:0d:84:20:4b:28:
6d:5a:d6:34:18:67:76:c3:05:0c:b3:71:13:9c:f5:
6c:e4:10:33:f1:38:75:38:3a:5e:dd:51:45:b1:83:
05:b0:a1:8e:7f:7f:d0:33:de:be:9c:77:d8:0b:3e:
7b:7b:82:71:54:fa:5f:ef:e1:0e:05:9d:03:da:f5:
05:9d:85:93:3d:a6:00:c4:57:d0:32:0d:66:ba:1b:
14:4e:d3:c2:f9:eb:8c:99:07:bd:56:e2:b2:4f:8a:
52:36:6b:c3:29:d1:c2:f1:0c:eb:b2:eb:a9:fb:bc:
01:bd:ea:3c:ed:c5:4b:30:c5:33:1d:2e:7b:9a:b1:
e8:e6:eb:1f:cd:91:4c:ef:e1:d5:f9:60:c7:c6:54:
40:63:e9:a3:d2:a9:53:09:1a:38:2a:78:42:fd:5f:
62:38:17:9c:fa:3d:c6:9a:0d:ef:4d:54:a4:f0:4f:
81:34:4f:63:09:19:d1:40:bd:ea:27:b4:d4:70:d9:
26:91:ee:c6:a3:6a:4b:3e:4d:11:9c:c7:79:b6:45:
d7:4e:2d:97:c4:c6:5d:15:fc:78:3e:63:34:72:f8:
16:b2:47:71:58:f8:1e:b3:62:77:2a:ec:9f:68:59:
6b:9b:ae:23:98:aa:10:06:62:a0:80:42:f1:80:75:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:E5:8C:1F:71:80:00:99:90:24:0E:FA:81:04:87:BF:07:14:59
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:18:2d:54:47:99:0e:6f:5d:2d:5c:c2:4d:fc:22:34:eb:
f5:a2:7c:20:f3:a0:81:00:87:27:c5:0b:17:a3:3d:51:04:ad:
0d:7c:74:e6:74:27:6b:40:f2:01:44:b7:e8:8f:76:3d:5a:78:
08:2b:0f:75:8e:72:a5:c2:70:46:ba:73:fb:1d:6b:57:0a:3f:
e4:5d:c4:b8:a5:71:5a:c3:96:72:f1:99:39:b1:fb:75:57:87:
49:ea:c6:37:c0:84:db:7d:85:41:2c:d3:72:ca:98:b6:34:d3:
db:9c:d4:a1:c9:4d:28:a5:55:0b:c7:a0:1d:a1:2b:a2:e5:66:
0e:f5:9d:f5:44:ca:36:49:34:0e:c9:79:2c:f4:fc:7a:06:fb:
54:a9:5f:88:16:6b:10:03:80:fb:55:e5:f4:ff:98:94:d0:a9:
5d:19:3c:3b:0f:dd:c2:91:02:c7:32:9a:95:04:6a:1c:dd:ef:
26:c8:fd:9e:8e:83:77:41:af:ef:b2:8a:d9:06:ec:03:2a:96:
a9:69:60:ff:d7:d1:69:cf:e4:df:41:e7:79:d1:3a:82:21:75:
ec:7d:39:7e:bb:c8:23:92:93:53:14:3e:e0:79:66:9e:b3:52:
4d:a2:a9:c9:53:08:24:9f:83:bd:3d:a5:a9:1e:92:08:cd:15:
0b:28:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:33 2026 by rpki-client