Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: zUZPnM8sMFa3KE6SAmo8iyS6/thnG/h9k/ugfDLgYj4=
Subject key identifier: 4E:B2:8A:18:86:D0:F6:F0:20:85:1D:03:86:BA:F8:EA:0A:FD:92:E1
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 019D2960C4D3C113F1F2FA2F3A372B897206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 13A5
Signing time: Thu 26 Mar 2026 09:01:40 +0000
Manifest this update: Thu 26 Mar 2026 09:01:40 +0000
Manifest next update: Fri 27 Mar 2026 09:01:40 +0000
Files and hashes: 1: JNmXvrsL4QUvDHkICJz6m5Up78E.roa (hash: BLhtsTAWR9XcWaxVCBS42M+LRcERJIfM10IC2M3COIA=)
2: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: MYRPW2fXHCHWqxf4HsVaqmjTP8at1jJ8eWMu1S9Qmzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c4:d3:c1:13:f1:f2:fa:2f:3a:37:2b:89:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Mar 26 09:01:40 2026 GMT
Not After : Mar 27 09:01:40 2026 GMT
Subject: CN=4eb28a1886d0f6f020851d0386baf8ea0afd92e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:b8:14:a9:3f:48:f9:44:40:ac:32:bf:8c:
75:2b:9d:a8:a6:1a:57:5c:0d:3a:5b:25:4a:ce:d7:
e6:ad:6f:37:16:03:44:2f:8e:31:77:8e:9a:b2:a4:
5d:22:36:23:02:c1:f0:e4:71:3c:45:d9:c4:1f:79:
4e:2e:10:38:06:6a:a4:1c:c7:51:83:23:09:5d:b6:
c3:fe:29:83:5a:8b:92:af:7b:0b:11:d3:10:e4:00:
1d:01:1a:fb:e0:e6:00:5b:99:4a:52:5a:91:8b:41:
fa:b8:c9:0f:6f:df:d4:9a:15:21:dc:65:16:8f:bb:
49:fa:f4:e0:ce:51:f9:98:f9:50:49:67:ad:08:14:
57:82:d0:16:a3:01:73:21:bc:8c:8d:c7:c9:4e:c2:
1e:57:b0:83:91:68:ec:3e:43:98:52:f2:71:a2:78:
28:33:7f:cc:e8:26:ac:33:2d:d3:4b:f0:0f:16:2f:
bb:f7:02:82:dd:fd:96:d8:e3:9b:b3:94:8c:cc:1d:
68:e4:ea:ee:aa:dd:ff:01:2a:c7:e7:08:3e:35:c0:
8e:d1:12:d1:0e:62:96:c7:35:bb:3b:b4:dd:7d:51:
16:4c:ad:91:19:fa:d2:34:e3:6b:05:4e:99:b9:07:
2b:52:5f:2f:86:46:30:e8:b7:8c:31:67:47:e6:14:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B2:8A:18:86:D0:F6:F0:20:85:1D:03:86:BA:F8:EA:0A:FD:92:E1
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:63:53:3c:0d:d2:ad:57:30:b5:4c:fe:4d:81:e4:47:5a:
7c:a3:96:38:83:26:5f:59:a6:fe:1f:11:69:eb:db:1f:1f:0a:
09:c3:bf:79:eb:7e:a6:42:09:35:e1:f5:7a:c3:68:42:87:bd:
5f:23:68:0c:80:e8:9b:1f:6e:20:d5:81:57:42:72:49:73:f3:
a6:3a:77:91:16:4f:45:7e:29:4e:cf:2c:1f:6f:54:91:c6:fc:
8a:cc:cd:ea:ed:74:47:7a:7d:d0:dd:8c:2c:d9:a7:68:49:d3:
59:01:99:e8:80:c7:da:c2:59:33:80:bf:e5:a3:f3:be:eb:1d:
b8:84:fc:3d:da:e2:af:93:20:3a:f2:ce:33:05:f5:e8:23:51:
43:4c:ce:cc:91:13:e0:bb:ff:f0:aa:8d:83:5c:72:e7:d6:97:
90:7e:0b:99:2e:a1:6e:1f:3b:ff:de:5c:2a:58:4b:73:5a:30:
33:e6:85:7a:29:51:d4:54:54:80:0e:ed:1c:0b:6e:aa:c7:e6:
70:2a:5c:0e:4c:d6:60:bf:63:35:75:bd:a7:e8:4c:5c:ad:7d:
e7:e0:18:64:5c:99:01:2b:a8:87:ef:07:70:96:b7:3d:3c:1d:
f3:99:d6:fa:01:f9:44:6d:9d:13:fa:60:dc:9d:42:08:5a:da:
f2:d0:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:31 2026 by rpki-client