Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: nth66W8Mb5FpciIG4KU9ot1KCJ8gMZRHQJSTNbqad7I=
Subject key identifier: 7B:1E:66:95:F9:30:8D:00:D4:D2:6D:67:7E:BF:16:8B:EF:09:42:4C
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 01A0D3B85B9BC8901DBD81C266075840450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 14:01:09 +0000
Manifest this update: Thu 24 Sep 2026 14:01:09 +0000
Manifest next update: Fri 25 Sep 2026 14:01:09 +0000
Files and hashes: 1: 7Z6ojelPseFZngCaUR_CY78Fb5I.roa (hash: HGlBrDAdLj79PeTsI9ZoARQIK801VBLKm1hbPGS+ChQ=)
2: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: hysf+R5zBfh9mt4D9kCHFu/ZA9XehDdTDLqnLtuAa5I=)
3: hE7_1eUP4ATkoyOOP-i0vzG4-1w.roa (hash: zBuduVQjj/QP+i0lFDnpUqeCE6ciPhxfEuFUyQ8aeOA=)
4: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (hash: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:5b:9b:c8:90:1d:bd:81:c2:66:07:58:40:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Sep 24 14:01:09 2026 GMT
Not After : Sep 25 14:01:09 2026 GMT
Subject: CN=7b1e6695f9308d00d4d26d677ebf168bef09424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:e6:31:51:34:a7:cb:f1:be:5f:a1:4a:de:
94:36:bc:28:4d:dd:55:f5:06:be:95:3f:2c:0a:51:
94:40:a8:2a:1d:bc:da:d2:00:86:e2:08:25:96:da:
4b:a7:ef:59:fb:00:59:6f:d2:13:32:50:0e:5a:90:
e2:eb:62:c6:b9:ae:3b:7d:e0:1d:04:c3:b1:71:34:
97:fc:5a:f8:a3:e0:6d:8c:02:bf:c2:ee:e0:71:02:
b9:c1:63:53:64:0f:c1:da:60:fc:25:af:40:e6:fd:
b1:4e:23:46:7f:46:30:3b:a6:51:52:81:65:da:de:
72:83:b6:6f:a0:63:0a:12:19:7a:a1:ab:ff:3a:8c:
87:78:20:b3:a5:84:97:99:6a:8f:87:dc:84:f2:d1:
7c:43:e5:1b:c1:75:8d:b6:7c:43:13:52:85:e9:0e:
92:27:34:9d:07:b7:47:27:06:e8:8c:86:22:80:ab:
f7:5a:84:1c:26:89:d1:5d:e1:39:e4:20:ce:0f:9b:
45:3c:65:b2:72:fd:95:c7:a9:ba:7f:8f:e0:5d:1c:
0f:56:11:82:1d:c8:07:80:3c:1b:9e:35:e6:9b:0b:
38:30:86:f0:c7:3a:dc:1d:8a:3f:ca:4b:34:de:74:
c9:97:a9:a3:c1:65:2d:43:61:2d:20:af:5b:e1:a4:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:66:95:F9:30:8D:00:D4:D2:6D:67:7E:BF:16:8B:EF:09:42:4C
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:e8:44:50:d5:f5:30:61:54:6f:67:59:13:65:0e:2a:81:
5f:82:63:07:b4:66:8c:f9:6b:2c:ad:d6:8c:e8:48:98:dd:fc:
60:40:34:13:27:ac:10:e9:05:02:e7:33:bc:ed:90:ac:4d:f8:
26:b3:52:8a:38:36:3b:3e:31:7d:2a:aa:0a:fd:cd:92:b3:22:
36:ec:f8:56:ea:58:47:64:80:92:d4:ca:6e:0c:16:b7:33:42:
3a:1b:09:dc:0f:23:28:3d:65:62:b2:5b:1e:ae:ad:f9:26:24:
e7:9d:2f:bc:ff:40:f4:02:0e:7a:d5:1f:8f:70:33:cc:c4:b0:
c0:cf:05:df:ee:34:3e:ec:11:15:1c:d7:38:3e:75:3e:57:e8:
88:e7:b5:2f:03:83:63:0d:0d:e2:bf:13:06:ac:6f:4d:70:2c:
a0:a6:18:80:05:9c:31:16:1d:05:cf:7f:9c:5c:43:60:43:02:
26:c4:0a:e0:f3:f4:15:c0:c1:6d:bf:18:4e:0b:a1:59:e0:ca:
da:fa:ee:53:20:d1:6e:a0:2a:b3:42:05:b8:d0:9e:31:8f:83:
b6:90:ef:bb:da:3f:35:2f:88:64:8e:81:f0:4e:3b:6e:f0:dc:
d7:81:3c:1e:38:41:8a:6b:ff:4a:39:92:27:6f:8f:64:76:f7:
1e:d4:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:44 2026 by rpki-client