Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: aqP80hqqyOOiwOoFUq02PS/7W2QsgCABTmEEazhDMkg=
Subject key identifier: ED:CC:A3:D1:46:62:71:A2:74:D3:7B:BC:7D:E3:09:BC:71:47:D2:9E
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 01A0D5A69E8151E31E6BCE49DBEFF0C8705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 23:01:01 +0000
Manifest this update: Thu 24 Sep 2026 23:01:01 +0000
Manifest next update: Fri 25 Sep 2026 23:01:01 +0000
Files and hashes: 1: 7Z6ojelPseFZngCaUR_CY78Fb5I.roa (hash: HGlBrDAdLj79PeTsI9ZoARQIK801VBLKm1hbPGS+ChQ=)
2: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: vKdn3GYSMT1UGGpfS4Kc0RqJcvOIZ+HV41VsMah8sNA=)
3: hE7_1eUP4ATkoyOOP-i0vzG4-1w.roa (hash: zBuduVQjj/QP+i0lFDnpUqeCE6ciPhxfEuFUyQ8aeOA=)
4: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (hash: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:9e:81:51:e3:1e:6b:ce:49:db:ef:f0:c8:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Sep 24 23:01:01 2026 GMT
Not After : Sep 25 23:01:01 2026 GMT
Subject: CN=edcca3d1466271a274d37bbc7de309bc7147d29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:e9:db:e7:f5:e2:58:f3:f6:f7:d2:1c:d5:
cc:7f:16:48:c8:0a:c7:d5:fa:8c:6c:f5:2c:28:be:
6c:e1:5b:0f:7e:8a:f7:1f:0f:60:8c:16:ee:de:b2:
81:48:98:f6:a9:23:9d:e4:e4:6a:e4:68:69:e0:c4:
52:ac:65:44:a7:f9:70:fa:c6:10:69:24:f2:8e:ac:
d6:2e:0d:13:42:c6:bb:e5:52:66:75:8e:5b:c7:6d:
08:97:7b:0d:ff:5f:98:7a:39:37:20:64:91:d2:f6:
dd:b8:5f:e6:27:f2:92:54:67:a5:2e:f7:28:4b:8a:
9d:54:22:5e:1a:ce:42:a2:1e:f2:7e:6f:2f:d4:0d:
06:aa:9e:5b:00:60:5d:3b:7b:4a:82:96:fe:ee:97:
53:50:98:67:70:2c:7f:de:f3:73:14:27:1c:66:3f:
31:40:cb:98:4a:3b:87:f4:f6:d4:a3:5e:60:c9:43:
3c:55:33:f2:87:5d:60:55:01:cf:0e:a1:55:06:08:
b0:55:29:53:ff:e8:29:81:d0:d4:87:6d:02:1b:6b:
2a:ea:75:27:0b:35:da:88:22:09:24:a5:bb:a0:20:
06:ee:f2:e3:0f:d6:67:d3:6f:22:fc:de:fa:8a:de:
a6:83:fb:07:08:5b:93:6a:38:c8:0e:7b:23:ff:27:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:A3:D1:46:62:71:A2:74:D3:7B:BC:7D:E3:09:BC:71:47:D2:9E
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:29:7b:68:d3:8c:ca:a1:99:dd:96:c3:8f:85:25:a4:05:
92:83:28:bb:10:75:11:2a:f5:64:40:9f:08:4d:9f:f5:21:20:
39:2d:a7:e0:18:c2:1f:21:6f:d9:2b:e7:79:97:6a:0e:bf:1b:
09:a4:b3:b4:02:3b:9c:63:78:2d:94:d9:8a:52:8a:67:bf:dc:
7a:ce:f0:74:2f:b7:5c:1c:3f:36:2c:55:9c:5a:b0:2f:f6:51:
13:dd:83:33:63:b8:22:e6:b4:c3:90:77:c4:03:df:b6:57:34:
70:44:7d:bb:a9:41:21:26:09:b7:41:68:14:0b:32:25:b9:15:
3c:e8:77:ff:6e:f0:c8:24:f3:13:0e:f2:25:7b:6a:d8:11:6d:
c0:67:df:31:b5:7c:e0:80:06:80:89:3b:7b:d3:d6:d5:b5:0e:
6e:7e:3c:39:aa:07:8f:ed:fa:6c:d5:90:6b:2a:60:7f:63:ea:
67:e8:f4:29:4f:9a:e0:8f:d7:c3:86:53:25:f9:4b:82:3a:03:
30:7b:96:99:28:62:d2:c0:5d:94:38:53:0b:9b:71:cc:14:46:
99:b8:81:a0:85:68:e3:89:ec:da:b9:64:fe:13:63:0b:74:bd:
8a:f0:57:71:e2:30:29:35:31:68:03:5a:dd:5a:52:aa:85:b1:
33:45:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:16 2026 by rpki-client