
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier: MpdctowYDpWnyy/FZvIokTL73g76ymdkBxzZHwuey+s=
Subject key identifier: 2F:75:E3:A3:87:8F:8C:28:41:76:43:DB:3B:20:AB:3F:C6:47:B5:BB
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 01A17FCF770D0BCF02404A963BFC68B19A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 00:01:05 +0000
Manifest this update: Wed 28 Oct 2026 00:01:05 +0000
Manifest next update: Thu 29 Oct 2026 00:01:05 +0000
Files and hashes: 1: 3RBCVkBsQ6_V7wN6k9fIFJdSpp8.roa (hash: nfpey2pShwBixsacoxSoNyyC/Cgr+HILJV9+oDPT+a0=)
2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: gjYgBCAK0B4FqbNiDtO2PX+Gehphtctj1mVxyMgK0ME=)
3: Wx0tuGvy7Ik_CwijVq0hyyYCJNE.roa (hash: F7OSj77dk7wzXt/at0+fTmTHxHYJ8OWNXq9VDQhTOcs=)
4: xfyMUvyO8DDhcxSBKaxnnxjvYhc.roa (hash: W6rHIx7iAQO/hl2oAqLrj2UwizqFE2L+eavtuywb88I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:77:0d:0b:cf:02:40:4a:96:3b:fc:68:b1:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Oct 28 00:01:05 2026 GMT
Not After : Oct 29 00:01:05 2026 GMT
Subject: CN=2f75e3a3878f8c28417643db3b20ab3fc647b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:f4:41:8d:ea:a3:e1:c6:2a:c9:25:3c:f4:
d6:0d:9f:29:de:15:ac:e0:67:71:68:ff:82:7d:91:
0f:b9:9a:aa:10:af:66:c0:f4:ec:a7:29:7a:06:2f:
69:ce:1a:4c:b8:8c:6e:7f:52:82:24:ed:43:70:b9:
3b:a2:7d:6a:7a:e5:58:f7:58:7a:34:65:ce:11:d2:
df:f6:62:1a:de:e2:20:63:2f:db:bf:cb:42:fe:38:
e4:c3:0c:cf:6e:2c:26:c0:37:b1:1f:6e:0d:d4:0b:
b4:24:9e:71:47:13:8e:b7:c3:e5:57:24:29:6a:fb:
b1:57:a7:ef:84:59:8b:6a:4a:e5:13:d7:d2:4a:b7:
96:4a:4f:39:5a:cd:e6:53:93:a7:65:52:78:1b:6c:
02:d6:4c:6e:0b:36:86:81:af:88:5e:58:1b:35:84:
d1:2d:6e:02:82:97:93:3a:36:d9:05:05:1c:c2:7e:
3f:a9:aa:81:46:63:bf:42:c3:44:53:b3:96:b4:ab:
d6:05:15:3c:8a:17:e8:52:88:84:fe:2a:08:93:ec:
37:d6:8d:03:78:4a:f3:f6:c2:d6:11:78:cd:b2:78:
93:92:e5:b5:6b:84:a6:47:9b:bc:38:fb:00:97:29:
3d:2a:97:43:7e:5b:4f:ee:6a:7f:0e:59:94:8d:b7:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:E3:A3:87:8F:8C:28:41:76:43:DB:3B:20:AB:3F:C6:47:B5:BB
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a6:be:e0:dd:de:06:b3:e9:04:8e:09:f6:ed:a0:c5:82:f0:
fa:2a:0b:b6:e8:1c:b9:2e:3c:42:af:5d:82:dc:ee:8d:26:39:
d4:b4:f0:81:99:bd:20:7c:df:59:f4:43:31:2d:9f:4a:30:80:
38:0e:d9:f8:6e:e0:20:3a:52:d4:3b:ff:16:34:74:8b:06:22:
64:f0:d7:e6:26:80:fc:15:84:fd:0b:bd:31:4f:1b:09:84:e5:
b1:72:dd:35:ce:cc:9a:08:51:d9:b0:eb:b2:3f:fa:9a:99:6b:
8a:67:2d:b1:eb:f5:2b:bb:5f:6d:77:a9:69:b8:77:22:15:a9:
51:b2:da:4f:48:24:f8:71:cb:0d:4a:3b:c4:f0:bf:9a:ac:32:
27:17:79:5f:13:ee:64:81:4c:64:1d:42:63:5e:88:0c:bf:29:
98:66:18:7b:eb:da:83:bb:6b:ad:e9:58:9c:5c:d4:cc:da:0e:
ee:60:eb:7c:ba:4a:97:98:f8:52:db:41:1a:79:be:0e:68:d0:
73:2b:89:57:ba:4d:b3:c0:bf:27:b5:50:4e:47:3d:77:d0:75:
64:b5:df:6c:28:c2:6f:fe:e3:58:d4:32:f2:ee:f2:1a:fb:db:
a4:80:0e:51:a1:22:13:f7:75:e2:10:3c:99:b7:5b:ad:7f:93:
c1:1e:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:38:41 2026 by rpki-client