Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: VKcbp8v06nN2hOq4OvWq5q6SnI8j/irHMDrg0djOta4=
Subject key identifier: 40:9D:69:2F:CF:C9:DD:26:6C:8D:27:22:D9:D9:2B:C8:FB:39:77:FE
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 01A0DA96E37E82800866D0EB46F854E97863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 22:01:56 +0000
Manifest this update: Fri 25 Sep 2026 22:01:56 +0000
Manifest next update: Sat 26 Sep 2026 22:01:56 +0000
Files and hashes: 1: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: evFsx1WXGozMS91Yx1ZCqUggceKk26NR5bECHYPq7pY=)
2: rQp0KtrZ2vEnGo7a2SDmUAvFVx4.roa (hash: uy4FLHEMk8dBagqU7F42mpSaD+FcR8r9kkARIXcPG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:e3:7e:82:80:08:66:d0:eb:46:f8:54:e9:78:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Sep 25 22:01:56 2026 GMT
Not After : Sep 26 22:01:56 2026 GMT
Subject: CN=409d692fcfc9dd266c8d2722d9d92bc8fb3977fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:f1:76:5d:a6:ae:40:6f:7c:9a:c7:85:2f:
d5:de:1a:00:f8:ec:5c:18:99:d8:7d:96:3d:7d:a5:
00:ab:c2:44:53:f3:c5:84:8f:94:37:5b:e6:6b:c1:
17:1b:c2:ce:d5:cf:f4:24:07:c8:6d:c6:63:e0:5a:
45:4c:ee:f0:4b:e0:95:c6:94:a3:4f:55:5b:3a:84:
39:d8:b2:28:63:1b:03:7e:83:c5:8e:95:0f:b2:68:
f4:1e:7b:53:af:be:0e:7a:27:07:24:aa:20:a8:45:
1d:86:3a:33:00:98:7e:ba:2e:e6:39:d4:54:19:38:
f1:11:1b:ce:e8:67:8f:58:c6:5a:e8:fc:9f:a2:11:
3e:ba:37:e9:77:5e:b9:a0:15:37:77:cc:ba:1f:86:
88:cb:fd:aa:28:64:16:6a:60:26:30:33:12:1b:5d:
89:bb:6b:62:5c:fd:d4:32:13:99:e8:30:84:88:a3:
01:72:e7:66:28:e9:81:4f:0c:81:59:97:12:2c:09:
12:aa:d0:40:b7:e5:92:35:c0:01:16:c0:05:5e:94:
5f:a8:93:35:a2:da:07:f7:e8:8a:a3:cc:41:e3:9c:
0c:1e:d8:3b:a9:d1:5b:4c:a6:32:9b:16:34:b7:83:
13:db:d1:26:c3:03:6f:df:de:82:a1:c3:14:3b:7e:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:69:2F:CF:C9:DD:26:6C:8D:27:22:D9:D9:2B:C8:FB:39:77:FE
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:61:dc:64:2b:fc:de:01:6f:bf:1d:5f:80:bc:2b:2c:80:
6a:f4:47:4b:a8:94:6a:84:f8:d3:b0:fa:45:25:74:6a:b9:dd:
20:ff:7c:8f:70:62:da:a2:11:02:1e:a9:3b:fd:e4:5b:96:10:
1b:00:b9:e4:9e:70:49:5a:01:94:18:c2:97:c7:90:66:9e:15:
00:68:48:f1:9b:32:2e:31:86:c9:91:80:86:f4:63:3b:ad:2d:
7f:f4:1b:73:9c:b2:ec:ba:81:61:61:42:3c:c9:1a:8c:c3:5d:
54:39:c8:d6:49:91:8f:45:19:05:03:be:88:05:39:90:d5:cc:
a1:bd:0c:a6:c6:88:7d:65:8d:68:4f:b8:a8:7c:3f:20:0b:7c:
59:36:34:8e:94:62:48:1c:36:da:25:e5:ff:96:0e:94:be:8e:
be:9b:27:6e:a6:91:da:53:c5:c9:c7:50:43:9d:c5:34:0a:80:
ff:1b:d9:f1:7f:ad:2d:bf:b1:c9:82:b7:ee:18:ab:6d:04:c0:
23:63:2c:c6:fb:0a:f0:f6:8d:bf:9e:b2:ab:00:91:ff:e8:22:
4a:0f:67:31:b1:91:1a:1a:b1:bd:80:77:11:63:a6:a7:af:c2:
52:6f:01:e5:43:9a:32:17:cd:7f:b5:27:4c:07:bb:54:51:05:
0a:8e:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:11:45 2026 by rpki-client