Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: XHDSAngw7w53z6fdCItmOSfvBb1lc8QwNMWW0SD+QRg=
Subject key identifier: AF:03:7E:C1:78:5C:37:43:54:43:7B:A5:3F:14:2C:EB:D9:33:30:81
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 01A0D3EF750AB8E70848F3159E6D827B92AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1AAC
Signing time: Thu 24 Sep 2026 15:01:20 +0000
Manifest this update: Thu 24 Sep 2026 15:01:20 +0000
Manifest next update: Fri 25 Sep 2026 15:01:20 +0000
Files and hashes: 1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: dfNg2Mekx8f/OQctMxSTNxFGu76TXN+avWkDpUJGAuM=)
3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:75:0a:b8:e7:08:48:f3:15:9e:6d:82:7b:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Sep 24 15:01:20 2026 GMT
Not After : Sep 25 15:01:20 2026 GMT
Subject: CN=af037ec1785c374354437ba53f142cebd9333081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:63:1e:96:fe:f2:d3:64:45:a1:34:6b:68:
10:9b:c9:db:aa:e9:01:3f:1a:35:f5:a2:ef:f7:21:
0f:3a:aa:19:3e:1e:7b:35:64:8f:0a:60:49:69:6f:
b8:16:7e:e0:4f:f7:29:f8:7e:97:b1:0a:b2:7e:8f:
33:89:ff:fd:81:52:4c:cd:91:77:8b:89:99:14:7b:
db:bb:60:67:45:cf:e7:4b:5f:e1:25:91:92:ff:ed:
2f:39:74:ea:e6:77:20:9b:7c:cf:fd:64:c1:0a:03:
8d:ff:7b:c3:cf:ed:94:43:f9:c9:c3:c9:a5:2e:98:
44:2b:46:af:31:ba:fe:5f:05:c5:9a:a6:de:c7:52:
da:42:5c:eb:b9:45:79:b2:9c:1d:78:a4:be:97:a8:
ce:b9:bf:2d:54:fe:63:c0:bf:eb:db:4b:a2:1b:d4:
8c:9b:f2:a2:d0:8a:5e:f2:0c:e4:c4:f6:1d:1e:61:
b0:e9:65:76:06:82:af:cb:8f:c3:ae:63:7c:af:40:
23:60:1e:8c:c6:f3:32:08:af:39:25:9d:ae:24:67:
07:53:40:33:57:ba:09:e7:64:8f:a7:3f:5d:9d:d0:
f9:eb:0e:55:e0:60:a4:e4:63:0f:8e:d4:f0:94:ce:
f6:dc:48:de:32:04:63:7e:ad:71:97:a3:59:41:e6:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:7E:C1:78:5C:37:43:54:43:7B:A5:3F:14:2C:EB:D9:33:30:81
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:04:11:cf:3e:9c:8a:40:61:14:9b:6e:ff:d9:08:dc:82:f0:
cf:24:a6:c2:0a:b0:63:de:e1:56:3d:8f:61:1a:f9:3b:67:aa:
08:8b:bc:f2:f3:1b:81:b3:a1:5c:b1:e8:4f:74:7f:6b:52:a7:
3d:42:48:3a:01:15:62:6c:20:b9:54:5d:2b:a7:0b:24:3b:65:
f7:45:08:be:98:81:3a:76:be:84:0b:cf:e8:5c:ee:6f:f6:df:
ad:c1:ba:7f:23:63:8e:f1:ca:c5:23:ff:60:f8:d0:d3:a0:49:
41:85:b4:53:4e:b2:e9:1c:74:2b:28:95:f6:e9:18:c8:be:74:
59:dc:2f:fa:24:83:53:9e:83:c2:51:f8:f8:16:c1:b8:44:42:
9d:0f:56:2e:8d:47:4c:9e:02:f2:7a:96:ed:71:ad:2e:62:d7:
32:62:56:22:0d:04:d3:4c:f2:fa:3b:25:f0:a1:a1:49:ef:f5:
cf:f9:02:69:e3:a6:99:39:aa:63:c5:20:e9:b5:fd:b7:24:6c:
2e:fa:86:5e:c4:22:06:66:1e:cf:5c:ee:2c:52:0a:b0:38:bc:
11:0b:61:2b:41:87:60:42:8b:ba:a1:be:c4:3a:f3:ec:cc:ca:
17:17:ba:72:31:73:81:c1:17:82:e4:66:c5:db:b8:e0:bd:00:
07:87:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:34 2026 by rpki-client