Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: +twMP3agyvVuXH49poerqx1zWCpN6SelPkqo3pfb9Gg=
Subject key identifier: 86:DE:5B:0E:23:1D:B8:60:F3:73:CB:D9:84:1C:E9:E0:8C:8F:D5:26
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 01A0D98373973B3F7E29B2C84E7D1B68A250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0E73
Signing time: Fri 25 Sep 2026 17:01:05 +0000
Manifest this update: Fri 25 Sep 2026 17:01:05 +0000
Manifest next update: Sat 26 Sep 2026 17:01:05 +0000
Files and hashes: 1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: +Mum8cJkYnEwC/g/xzFlxH1xIAI09pm5GT6yQpHrz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:73:97:3b:3f:7e:29:b2:c8:4e:7d:1b:68:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Sep 25 17:01:05 2026 GMT
Not After : Sep 26 17:01:05 2026 GMT
Subject: CN=86de5b0e231db860f373cbd9841ce9e08c8fd526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:d1:62:cf:de:f1:81:5c:a1:b9:b1:69:c1:
12:be:e9:3e:e8:9e:95:ce:bb:1b:53:ed:0f:d3:c3:
af:56:b9:13:d2:b5:5f:a9:2f:c5:d4:c8:94:30:3b:
3c:3a:bc:1f:38:c7:63:b9:01:7a:af:46:32:48:78:
58:27:e1:59:42:c4:b8:ea:6b:d1:81:22:09:cc:bf:
b2:64:6e:89:43:89:3b:44:53:e1:8e:db:23:39:f8:
32:ae:01:92:f4:dd:af:8e:46:cb:b8:3c:69:28:cc:
35:b5:68:94:00:7e:e1:d5:af:43:94:04:74:83:7e:
75:20:00:49:2e:3c:ff:17:8c:a6:58:14:53:a5:8c:
f3:4c:1b:8f:bd:e7:4f:2f:71:96:c1:05:43:bc:53:
5e:d2:dd:42:5d:92:60:d2:48:20:95:13:63:b2:04:
e1:ad:c1:a0:23:d2:a0:54:70:46:4e:b1:9d:1d:ac:
8b:86:02:93:a4:d7:fa:71:36:8d:82:cf:a4:81:d7:
0d:9b:7e:28:15:4b:b8:f0:f7:a2:15:8b:08:c7:62:
4b:ae:d2:91:b2:c9:7e:2a:62:c1:65:4f:d1:55:6e:
e7:08:67:0b:bc:bd:5c:35:c5:de:fc:4c:c3:71:84:
de:0f:a6:ab:09:5d:b1:37:ef:16:3c:60:0e:22:a4:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:5B:0E:23:1D:B8:60:F3:73:CB:D9:84:1C:E9:E0:8C:8F:D5:26
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d4:7e:f9:b6:17:1d:ef:fd:ce:9e:fe:03:00:91:87:d0:1c:
1a:dc:0f:16:38:96:1b:b0:8c:be:61:59:e0:fc:98:0b:2b:6c:
30:32:3a:ec:aa:40:f6:c7:b8:fc:9e:3c:70:97:5a:58:d3:70:
ab:82:7c:1b:05:6a:cd:21:54:61:5f:4c:e8:26:7c:de:0c:42:
12:ab:06:b9:ea:8a:d7:3d:2e:5e:d1:bd:23:d0:0e:b7:35:f7:
02:d2:c4:de:f2:aa:86:27:72:84:7d:9d:08:0d:0c:ac:43:65:
d1:89:89:02:fc:04:b6:8f:9c:c5:c6:eb:b1:51:ea:8c:fc:f5:
f9:5c:95:d8:d5:9c:9e:7d:1c:f2:96:3c:0d:99:7d:2d:69:34:
62:f3:e7:f2:fd:5b:d9:11:ca:c3:36:2b:f9:9d:8d:63:3a:c3:
f4:d1:a4:5d:4c:53:02:a4:91:cf:e8:7c:c6:21:57:fa:40:4b:
62:b1:7e:34:19:ee:7a:f2:14:1d:2d:4a:a7:b0:42:ba:a5:5c:
b3:59:85:24:6f:22:16:48:48:a0:60:17:43:57:d3:a9:8b:2b:
df:41:bb:20:f4:ee:44:73:c5:6b:26:26:2f:bd:a6:6a:7c:20:
41:73:a9:f5:5e:69:e6:f7:a2:25:d6:de:1d:5d:2d:53:28:2b:
cc:1c:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:57:58 2026 by rpki-client