Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: qpNlIITKLn6HuCxxkPmsGC+pFWnegPs1/98LL8iUIas=
Subject key identifier: 15:82:BB:F5:9B:F4:6F:C4:A5:6D:6E:32:21:41:73:A5:EA:04:49:DD
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01A18AF790BE1CB7D848B03A3FEE70BBFAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1AB2
Signing time: Fri 30 Oct 2026 04:00:42 +0000
Manifest this update: Fri 30 Oct 2026 04:00:42 +0000
Manifest next update: Sat 31 Oct 2026 04:00:42 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: rbcSD8NUqqLEDUmbXuX9/MA9l8Jy0NAt2OwAqHu4PFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:90:be:1c:b7:d8:48:b0:3a:3f:ee:70:bb:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Oct 30 04:00:42 2026 GMT
Not After : Oct 31 04:00:42 2026 GMT
Subject: CN=1582bbf59bf46fc4a56d6e32214173a5ea0449dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:91:1a:f0:44:65:0e:9d:35:50:12:8f:3c:
d3:d5:21:5a:85:62:bd:63:ae:42:3c:49:49:75:ce:
ef:4f:4a:b4:af:81:92:35:44:90:18:ce:6a:b4:8f:
ca:84:f4:b7:2f:f5:46:b1:99:3f:f6:ce:46:ec:73:
6b:33:d1:59:55:88:93:fe:09:3b:6f:36:f5:8d:16:
c1:ac:ad:f5:bb:aa:b6:92:cd:97:26:80:df:89:8a:
6b:2e:ab:41:31:4e:5a:d1:20:29:ea:00:38:5f:57:
c4:0d:79:26:cd:29:d0:c7:b7:7b:78:58:ec:ad:51:
9d:1b:cc:02:8b:8a:ef:4c:f9:d7:72:d1:8b:48:be:
0b:cb:55:6e:f9:00:a3:5c:4b:39:c8:e3:dc:c6:9e:
db:a0:ba:64:22:e5:cc:ec:d2:b1:2c:ba:4c:ae:98:
cf:64:bf:21:95:24:9d:93:db:8c:ef:4b:4b:83:3c:
e6:db:41:0d:e6:e3:5a:e3:37:1e:f2:31:65:89:ac:
25:f0:e1:45:a8:b8:ac:77:40:ac:c1:ca:3a:e2:7b:
27:f0:e1:56:1e:68:f8:45:53:03:8d:04:e0:87:d4:
48:29:7a:b3:05:77:27:5e:5e:07:88:2e:b4:54:bf:
93:28:ab:fa:b6:ef:27:97:81:b1:ff:7a:7d:96:c8:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:BB:F5:9B:F4:6F:C4:A5:6D:6E:32:21:41:73:A5:EA:04:49:DD
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2a:f4:10:b6:3f:f0:af:88:7e:8c:4d:bf:ed:e8:04:e2:b5:
f8:0d:f5:13:f6:d5:34:ee:0b:2c:20:33:0f:cc:61:3e:57:fd:
65:5e:ae:a6:79:2c:55:8b:09:e9:40:89:65:92:68:fe:da:87:
9a:0c:52:c3:45:79:1d:fa:b9:02:b4:4e:8b:2d:70:c4:d3:e2:
fb:02:c9:72:cd:ab:cb:6d:39:5d:b3:cd:4a:6a:8d:24:02:63:
a6:90:9c:7d:c9:b1:e7:0f:6d:e7:a0:a7:ed:79:ab:99:56:b4:
d8:da:4a:00:ef:e6:f5:09:5a:15:a7:9b:1b:7e:af:bc:d7:5f:
c4:79:8a:83:b4:25:30:c2:02:f3:d2:be:88:ec:6e:32:cc:bf:
c3:0f:ce:71:d2:b5:5c:b5:85:27:91:d4:82:c6:2b:6f:3f:e9:
be:ab:04:42:af:fd:b0:75:86:f0:dd:1b:70:2e:a7:40:90:e1:
9e:6f:2a:cf:3a:53:aa:4d:70:82:4c:e2:5e:9c:65:a4:b9:41:
94:d5:fb:8d:71:d8:35:40:f0:95:df:95:be:8b:1a:8e:0c:17:
04:41:38:b2:41:66:90:b9:17:5e:43:98:ff:e7:1c:33:20:46:
0f:d8:ab:05:46:c7:a1:71:6d:4f:02:5f:a8:bb:5a:85:11:8d:
9a:07:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:23:34 2026 by rpki-client