Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.mft
File: L_k7hIGM0lWBih7pBZ8QLX8B99s.mft (raw, json)
Hash identifier: FWtyJS5q+880LX/bB6Rl7ARTPvQf8g2K+JsZA96uNEY=
Subject key identifier: 1B:F8:29:B2:72:FF:48:E6:1D:89:7A:78:98:76:97:12:55:3B:76:CB
Authority key identifier: 2F:F9:3B:84:81:8C:D2:55:81:8A:1E:E9:05:9F:10:2D:7F:01:F7:DB
Certificate issuer: /CN=2ff93b84818cd255818a1ee9059f102d7f01f7db
Certificate serial: 01A1DDCC1FB1BEC6B2681F03F62B33A7C700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.mft
Manifest number: 21
Signing time: Sun 15 Nov 2026 06:01:44 +0000
Manifest this update: Sun 15 Nov 2026 06:01:44 +0000
Manifest next update: Mon 16 Nov 2026 06:01:44 +0000
Files and hashes: 1: 6Knyv_aZPSpzV0y4pAOgwSnT504.asa (hash: Xmc6kkx/Dd66Fa+jLP3+SD3yOmeeWtNJD9sDb/VMiBs=)
2: L_k7hIGM0lWBih7pBZ8QLX8B99s.crl (hash: UU6qpoauGuZDTH6ry9yvKiPthDBlQ3KH3LD9BmGuQmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:1f:b1:be:c6:b2:68:1f:03:f6:2b:33:a7:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff93b84818cd255818a1ee9059f102d7f01f7db
Validity
Not Before: Nov 15 06:01:44 2026 GMT
Not After : Nov 16 06:01:44 2026 GMT
Subject: CN=1bf829b272ff48e61d897a7898769712553b76cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:d0:89:34:6c:e2:ba:f6:fa:36:91:98:02:
15:74:64:3f:59:b5:b4:6b:9c:64:3c:f9:cd:a4:71:
4b:c5:d8:a9:0e:0d:43:28:2d:61:54:ec:6b:9c:5d:
61:d6:50:e1:af:d3:ec:a1:6a:9e:c6:5e:06:32:5f:
8e:22:f0:f6:5f:9b:a6:0a:af:2c:9f:dd:09:55:2b:
f1:1f:6a:5e:69:06:3d:8d:c6:55:65:15:d9:8c:11:
cb:db:1b:93:75:cc:02:14:a3:8e:1e:db:c0:38:97:
95:05:05:14:18:50:be:5e:f0:29:ed:7c:01:75:ce:
9f:94:67:35:96:45:6b:a3:98:e4:78:a6:7d:d3:10:
83:4b:a8:2e:dd:8e:b0:35:1f:5b:53:6a:2e:ea:5e:
4a:5d:09:4b:53:cd:ca:e8:86:91:19:ac:94:53:cc:
db:83:10:8c:83:db:0f:0e:67:36:6e:80:c6:8a:79:
2e:8b:51:cd:6b:84:a8:4f:16:69:f8:25:ef:0b:ca:
cd:3f:5e:50:b2:38:86:c7:b5:59:fe:0a:2c:d3:f8:
c8:a5:47:69:aa:36:c1:b9:d6:4b:ac:4f:4c:45:fc:
b7:43:de:67:81:e9:86:09:d0:d3:43:f1:41:71:6e:
0f:5b:f7:28:25:5d:98:c0:aa:ee:91:44:0b:4e:c2:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:29:B2:72:FF:48:E6:1D:89:7A:78:98:76:97:12:55:3B:76:CB
X509v3 Authority Key Identifier:
keyid:2F:F9:3B:84:81:8C:D2:55:81:8A:1E:E9:05:9F:10:2D:7F:01:F7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3c:a1:92:f7:37:2f:59:c6:ab:c6:e6:0e:17:8f:de:4b:60:
88:34:4a:23:ac:4d:3d:24:72:90:fe:72:e7:ae:15:1c:1f:74:
03:16:cd:34:d1:94:8c:d9:5a:5b:70:db:93:17:15:ee:6b:e5:
06:34:d9:38:d0:62:c6:e3:0a:f1:2a:c8:1f:6c:fc:99:b7:21:
57:b7:85:01:99:77:8c:51:62:12:c2:11:02:d7:2f:03:e1:4e:
27:98:5a:ea:eb:a6:6f:d6:60:c2:f1:fb:f0:84:c3:b9:3b:3e:
42:da:8c:b6:98:77:78:4d:87:ae:a5:dc:15:25:82:98:fa:39:
46:6a:7d:86:b4:38:e4:51:14:66:8b:69:72:3a:bc:71:d9:06:
ee:ff:24:c1:3a:85:4b:b8:80:86:d4:fa:74:07:b9:79:88:da:
1c:5c:b0:1f:af:11:f6:8e:12:be:9e:d5:c0:d3:50:10:1f:04:
81:39:8e:8e:3b:c2:8f:0e:03:84:b2:1a:19:13:d5:59:8f:d8:
04:13:fe:8f:2b:88:13:5f:f5:31:cc:e2:f2:37:c4:70:0a:f3:
54:7c:ab:e7:21:32:05:f2:d0:de:54:51:b7:f7:41:94:74:5e:
e4:33:02:31:cd:d2:b3:66:5d:4b:67:46:72:38:3f:b7:46:f4:
f7:88:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:22:45 2026 by rpki-client