Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: MVdaPhbl72a7+rRsSdQ5rphqNUlUNlwrZlsiKh88nOY=
Subject key identifier: 7D:E1:E7:25:DB:4C:C4:DA:38:29:66:04:E7:AD:E0:10:8D:AF:FA:E0
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 01A0D9BB1C5AFC09892C35EADF4C1B32FE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 158E
Signing time: Fri 25 Sep 2026 18:01:53 +0000
Manifest this update: Fri 25 Sep 2026 18:01:53 +0000
Manifest next update: Sat 26 Sep 2026 18:01:53 +0000
Files and hashes: 1: JNmXvrsL4QUvDHkICJz6m5Up78E.roa (hash: BLhtsTAWR9XcWaxVCBS42M+LRcERJIfM10IC2M3COIA=)
2: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: jxdidmPE85enqQ+rv7eOluJYPvZPEBAu/fCh4D2LE3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:1c:5a:fc:09:89:2c:35:ea:df:4c:1b:32:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Sep 25 18:01:53 2026 GMT
Not After : Sep 26 18:01:53 2026 GMT
Subject: CN=7de1e725db4cc4da38296604e7ade0108daffae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:6e:92:04:c4:be:72:69:a9:ff:f5:e6:51:
a2:ee:10:bc:7f:aa:e2:d8:df:52:58:ab:92:79:96:
19:09:97:8d:52:95:72:f4:21:b4:c0:c4:a0:c3:6d:
29:3f:e5:d8:b0:86:35:5a:de:26:17:38:cf:82:01:
9d:5a:41:d7:c9:04:5c:12:cd:8e:4f:e9:14:e4:0b:
ed:f9:16:d1:d9:ce:1d:7a:fa:10:0c:c1:fd:4c:92:
ed:e1:43:8e:f1:a6:a8:3c:2c:b2:d6:48:bb:4b:43:
8b:50:07:78:88:06:61:a6:1d:e1:60:f4:63:b1:07:
6a:60:e3:14:8c:e6:26:93:e8:cf:e0:60:e5:46:9f:
38:67:99:e5:d5:32:1c:6b:1c:75:81:39:9f:3c:cc:
f7:16:5c:92:36:cb:16:1a:22:cc:0a:da:bc:c8:5f:
d1:a7:68:a4:ec:4f:59:e8:92:1b:1c:ae:ff:03:6f:
4c:55:8f:37:87:f7:58:55:b0:45:e5:e1:e5:7c:f7:
1e:81:e3:03:95:14:3a:41:73:47:fd:49:3c:1c:cc:
d3:6a:89:56:9f:fb:3a:de:6f:ee:ee:e8:c2:fb:c5:
38:94:15:72:e1:f0:ee:11:a8:21:03:21:a3:eb:e8:
72:ff:8f:cd:c7:b7:66:96:0d:84:c2:5b:72:bf:2a:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:E7:25:DB:4C:C4:DA:38:29:66:04:E7:AD:E0:10:8D:AF:FA:E0
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:d7:7a:4d:2f:ee:e4:14:05:6b:92:7e:28:5c:ff:e6:5f:
c1:4e:8e:18:01:28:d8:b9:d4:4f:26:38:26:1d:f8:e6:de:df:
9a:60:ca:22:cf:6a:25:d0:c5:c4:9a:30:45:01:d5:67:8c:db:
b4:60:f1:16:bb:ba:93:1e:89:25:8c:98:43:b7:57:57:67:18:
b0:f7:c6:65:c5:a3:f3:39:db:e9:84:4c:b1:c8:97:6a:c9:1e:
50:39:e7:4c:f1:a4:3b:ef:a8:d5:7a:9d:de:ec:9a:84:5b:3f:
08:fa:a1:f3:45:9d:92:16:02:66:5f:f1:46:82:6c:70:b0:39:
04:a6:12:0f:48:1d:3f:25:2b:95:34:c7:69:ea:80:4e:60:13:
f2:05:df:a5:0a:08:18:27:3b:f1:70:aa:cb:1a:36:db:9e:a0:
e9:cd:46:2a:bb:13:91:05:a4:0c:dd:56:78:57:10:c0:e6:ad:
48:e8:39:2f:22:5b:dc:41:d0:b1:65:3d:43:54:ce:2b:74:10:
3f:75:a8:36:d1:0d:46:06:52:2e:bd:2d:c1:18:9f:c9:ec:e9:
86:fe:b9:32:f3:24:ec:a0:ac:4b:cf:24:46:91:8a:a1:94:4c:
a0:c7:e8:f6:a0:02:f6:bc:56:40:90:e1:b4:5e:22:b7:0b:30:
a0:5a:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:13:44 2026 by rpki-client