Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
File: L-AKZEtkBmYThodpOCvZdWJUt0w.mft (raw, json)
Hash identifier: 5MIV3sRu0avie8Gb2nwXo6gsMi/ts2XyLnEiPCXH3u0=
Subject key identifier: 39:34:D6:44:CD:43:87:F6:FD:7E:DC:99:4F:37:79:F9:74:6E:6A:43
Authority key identifier: 2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
Certificate issuer: /CN=2fe00a644b64066613868769382bd9756254b74c
Certificate serial: 01A1DE029BA989509EB7CAD67406E789BE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
Manifest number: 96
Signing time: Sun 15 Nov 2026 07:01:15 +0000
Manifest this update: Sun 15 Nov 2026 07:01:15 +0000
Manifest next update: Mon 16 Nov 2026 07:01:15 +0000
Files and hashes: 1: Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa (hash: ZZqXUKHYxTr9MHDKXflyXYtvngRtOV46eqRt3MsLLZ8=)
2: L-AKZEtkBmYThodpOCvZdWJUt0w.crl (hash: jamNCouY4M43tYGvOpFmgOfUiZi85uE5M1SEjdL5egY=)
3: jgOL2tJQLrYm30Lq61CCvxxKTLU.roa (hash: eBcqqbVvXfc7hYjWR9k75RZaMKi04DdasRprdoGGtDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:9b:a9:89:50:9e:b7:ca:d6:74:06:e7:89:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe00a644b64066613868769382bd9756254b74c
Validity
Not Before: Nov 15 07:01:15 2026 GMT
Not After : Nov 16 07:01:15 2026 GMT
Subject: CN=3934d644cd4387f6fd7edc994f3779f9746e6a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:db:c6:1f:51:c2:c1:a9:d9:c4:32:60:00:
fd:96:2e:a4:7f:0a:27:03:db:b3:40:eb:9f:30:88:
15:5d:48:69:6c:b2:df:67:fb:30:49:8a:b2:ef:4f:
49:0c:c5:14:5d:fd:0f:38:49:98:31:13:80:01:f8:
c9:aa:e6:34:b5:49:ac:17:3a:8e:1a:50:1e:17:15:
6c:a2:0b:9b:36:43:ad:ae:52:57:0e:2e:07:59:66:
dc:f9:47:f1:39:d7:9c:19:68:b0:04:b5:b9:04:06:
0d:58:09:6b:0b:81:c2:de:b1:b8:0f:1c:b9:1e:d3:
cc:d3:11:7a:80:4a:53:b4:98:c6:fd:a4:49:fd:72:
b0:53:18:77:41:9a:1a:1f:1c:c4:57:70:19:80:c6:
c0:36:3a:45:6c:95:ae:82:40:18:de:0f:28:4b:ad:
eb:9c:41:ac:d4:51:60:1c:70:55:ae:ab:c5:94:ce:
e3:77:fb:7b:17:b2:68:e6:29:6e:96:37:5c:18:ed:
5a:68:ae:1f:58:7e:ad:77:6c:62:c1:66:f0:56:c4:
fe:07:46:e3:2c:6a:7f:1b:ed:d1:2b:73:18:ae:76:
61:8c:3d:de:5a:d7:8b:2b:b5:2d:17:cc:b2:99:c3:
1a:73:bb:ff:85:fb:61:a2:e9:fb:e1:96:da:ef:0d:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:D6:44:CD:43:87:F6:FD:7E:DC:99:4F:37:79:F9:74:6E:6A:43
X509v3 Authority Key Identifier:
keyid:2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:94:f4:b2:b2:cc:e8:b6:e5:7c:27:c0:8a:fe:0f:11:87:
de:62:0d:a6:1a:a9:f0:76:45:8e:dc:4d:7c:29:ee:db:3d:b9:
35:00:80:68:ad:3b:6d:ab:8e:b0:12:ba:72:a5:22:c8:9a:ea:
65:17:bc:7d:14:27:15:37:7c:b1:55:65:01:9d:33:f5:80:9e:
b4:b7:e3:27:ca:4e:65:e5:49:3b:76:f5:79:39:ba:16:a5:3e:
c1:ca:89:6c:b6:d0:ef:a4:7e:c7:ba:a5:40:c9:b6:68:66:c7:
a7:61:e4:8a:26:54:ae:9d:ef:da:d8:05:aa:24:dc:93:a0:7a:
ee:7d:ca:9f:13:f6:57:c9:60:c4:b7:1b:80:80:67:8a:c3:87:
00:7d:93:2f:5f:5e:df:62:71:0e:02:18:53:fb:a0:29:1d:cf:
4b:d7:1f:51:a1:0b:63:d2:0f:54:3f:f9:b8:85:4f:64:85:61:
02:b9:c9:71:2e:29:fa:25:d4:5f:3a:92:01:a5:65:ed:ea:42:
1e:48:55:f5:fd:45:09:44:75:66:9d:8a:4e:6d:4f:61:cf:c1:
d3:27:78:f0:80:91:5c:21:b2:cf:b5:23:fa:0e:e8:a1:75:39:
d3:41:e6:e1:df:a7:87:67:a4:24:00:b5:42:90:99:27:b8:11:
16:80:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:15:53 2026 by rpki-client