Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: qX1Ny1cyPLxBgLA2Zdq+BGFOpXWlNLpgxxOchPasKKw=
Subject key identifier: B8:E8:28:E1:0F:63:D5:84:18:FA:1C:CA:29:6E:B1:BE:3A:5D:6C:91
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 01A18C0A7B48181FA713A74B02CD53568DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 11AF
Signing time: Fri 30 Oct 2026 09:00:59 +0000
Manifest this update: Fri 30 Oct 2026 09:00:59 +0000
Manifest next update: Sat 31 Oct 2026 09:00:59 +0000
Files and hashes: 1: KvUEBw_c3LAvx8JkTNqlupKNmYM.roa (hash: 69WDGhre8T/PoMvfRVwqXkaaHl64kNVjvBY/md35JrU=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: yW1DALKx1sAOpa3GslSQlTLDIUiwd272w8kD6jLgiSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:7b:48:18:1f:a7:13:a7:4b:02:cd:53:56:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Oct 30 09:00:59 2026 GMT
Not After : Oct 31 09:00:59 2026 GMT
Subject: CN=b8e828e10f63d58418fa1cca296eb1be3a5d6c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1b:5f:b0:db:00:f5:f5:2f:c4:a6:07:58:11:
1a:74:91:6d:e9:50:5f:03:f8:eb:0d:42:5a:3e:af:
96:4c:0a:5f:de:95:76:35:c9:a6:03:92:49:ad:72:
b3:c0:13:6b:13:4f:98:b9:18:ba:84:71:65:79:d9:
31:b9:87:d3:7c:2f:90:24:3d:78:e2:d8:9c:06:4e:
a9:df:5f:e9:a2:86:e3:8f:17:87:df:f0:f4:82:54:
e3:0d:4f:30:20:08:9e:4a:f6:1f:20:2a:0c:21:36:
9e:88:ba:76:13:c0:cd:8b:d2:79:9b:bc:35:1e:a8:
b9:62:4d:bb:76:7e:2e:95:b5:61:a8:5f:c3:f4:0e:
8d:c6:b7:0d:3d:c9:e6:24:4f:35:3d:b3:e6:0c:7f:
4f:7b:0a:a2:98:48:5b:85:a4:1c:65:c3:0f:96:ad:
a1:5c:fb:15:b7:34:5b:bc:7d:bf:f0:81:e8:2c:0b:
ce:86:54:dc:2d:dc:5a:9f:44:bb:ba:68:28:ab:fd:
bd:7b:6e:da:04:4b:91:a1:8f:5f:8f:c8:ef:80:be:
23:3d:26:53:ce:c7:7d:b2:f5:db:28:f2:3a:e8:1b:
48:b8:17:60:19:2d:e7:a4:c4:4c:e6:f5:a5:0c:55:
e0:ce:57:30:28:c4:4a:a3:93:ea:b3:87:88:1b:08:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:28:E1:0F:63:D5:84:18:FA:1C:CA:29:6E:B1:BE:3A:5D:6C:91
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:d3:bf:65:82:95:3b:ff:19:51:4a:33:ac:56:62:2b:be:
a2:d7:d8:e7:b9:f6:03:85:1c:ea:a6:6f:b6:ec:48:83:0c:48:
f4:9c:34:99:ac:c0:cb:09:89:76:4b:08:4b:20:9a:e0:d3:d5:
6b:ad:e1:72:4e:c1:9f:93:ac:16:26:d8:33:21:31:72:2a:5f:
0f:55:5c:19:1c:ff:65:55:7a:5f:d5:06:20:c0:7d:f3:08:01:
b8:e9:95:d8:8b:3c:8c:7a:7f:a8:3a:10:95:9e:76:09:80:b1:
d6:da:47:09:89:31:65:4f:bb:b5:9a:15:ad:ee:8e:f4:f2:71:
02:93:d6:a2:0b:29:2b:86:09:9c:f5:a4:2e:df:85:59:79:c8:
2c:ed:a4:97:5f:59:52:6b:2d:24:81:b9:c6:09:21:ae:26:d9:
e7:e2:35:b1:2a:25:bd:8d:bb:53:fc:ea:58:57:c5:5e:86:51:
0f:80:fe:4f:65:50:85:e7:c5:d3:93:0f:a2:39:ae:62:de:b9:
83:ea:41:99:18:db:4f:9c:ab:6b:1a:07:84:89:89:d6:14:a7:
f1:71:70:93:57:e4:9e:71:19:8d:76:f5:f1:fd:6b:dd:da:10:
fe:4d:5a:81:49:0a:ec:2c:16:c1:da:dc:b6:77:74:2f:11:36:
3e:94:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:52 2026 by rpki-client