Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: qY1Bf/4tbrAGKiyHNb2OI0DFROxyGOgRyHAfoec70YA=
Subject key identifier: 6D:99:4F:F3:97:F9:B2:CE:55:14:85:9E:FA:0B:49:29:E1:19:7F:EF
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01A0D124A2D29451B2242AAAC992356BDB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 02:00:34 +0000
Manifest this update: Thu 24 Sep 2026 02:00:34 +0000
Manifest next update: Fri 25 Sep 2026 02:00:34 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: Izl05DTYKvIPhRIHz1j1n1wmowDZBcLr8o+y05pbZNU=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:a2:d2:94:51:b2:24:2a:aa:c9:92:35:6b:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Sep 24 02:00:34 2026 GMT
Not After : Sep 25 02:00:34 2026 GMT
Subject: CN=6d994ff397f9b2ce5514859efa0b4929e1197fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:90:1f:39:e3:b1:6c:2e:1c:09:da:02:db:6d:
f2:ea:dc:32:bc:b1:73:f1:81:a8:0e:32:a9:c9:3d:
38:c6:e8:58:50:d7:c6:a2:e5:b7:5e:8d:47:58:af:
aa:b9:c4:fe:02:55:f9:21:0c:23:1d:2c:97:5c:4f:
b3:72:b7:7a:22:60:db:85:ec:81:17:c2:e2:f6:a0:
75:f8:c7:96:7e:57:c4:b5:94:df:5e:85:48:78:46:
cf:7d:7f:aa:b9:de:7f:23:ea:87:c6:8e:0c:2f:c3:
55:f0:ef:7a:09:f4:f9:53:4f:63:53:92:53:d1:49:
04:12:8f:09:c1:86:91:d8:1c:b4:a1:7d:37:07:d8:
c5:ff:00:91:95:00:32:57:d4:d7:71:f7:db:1b:23:
83:2b:b2:11:4a:6f:62:21:a0:e1:69:cf:c3:e9:9b:
02:a5:fd:0c:d8:66:93:26:63:ec:c7:b2:8f:a5:32:
20:65:98:b9:7a:81:cb:d2:bb:ff:19:5b:53:c9:cb:
af:d8:60:5b:87:1d:01:33:1e:be:d8:27:61:e5:c3:
65:a3:6f:59:ef:e8:80:cb:31:fa:bc:00:a8:fe:96:
2d:35:5a:f5:c9:bb:6c:29:59:bb:d2:a0:1f:dd:25:
39:16:57:7c:01:31:fc:dd:d5:bf:d8:ec:bf:e1:a3:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:4F:F3:97:F9:B2:CE:55:14:85:9E:FA:0B:49:29:E1:19:7F:EF
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:a3:01:ea:42:a0:dd:28:4c:4e:11:76:76:36:c2:4e:d5:
ba:0a:59:a7:21:40:5c:28:89:0a:35:e8:75:24:e5:48:23:29:
27:cb:9b:08:70:ea:98:e6:ab:97:5c:8f:c1:d9:28:d5:7c:27:
c1:7a:91:c5:5a:57:7a:20:fb:0c:fe:55:72:28:d8:f3:1c:57:
db:25:ca:82:02:e9:33:7e:ca:b9:ca:77:a1:78:fe:12:db:8c:
a8:76:9c:94:a3:08:a3:d1:38:88:13:0a:22:9c:97:7e:0e:f5:
cb:d2:9a:a4:1e:78:4a:70:e8:c1:8c:bf:82:dc:7f:34:99:b4:
53:6c:64:1a:cf:c1:ea:80:96:0b:9a:06:bc:f3:b7:78:c2:9b:
10:2c:57:a8:5a:dd:6c:20:27:76:8c:59:b3:bc:91:5a:3e:a7:
19:08:3b:8a:54:3f:69:8e:cf:f2:d7:49:42:de:ea:86:96:0b:
9b:92:76:d2:e6:7e:d6:ee:e6:20:49:0c:31:c5:27:fe:d0:37:
2f:e3:7d:14:e3:c7:ce:0b:b0:0b:45:6d:10:5c:d4:ec:04:21:
3b:cd:b4:83:e5:dd:d3:4a:b2:ea:26:7a:47:30:db:68:7c:66:
24:cb:a6:7d:fa:63:79:c2:1e:73:3f:c4:f0:6c:54:c6:8c:6e:
fe:3d:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:10 2026 by rpki-client