Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: AE510CpehN6E/K8HUr3HxfIF4NdAbHOXEOH1NXoGqAk=
Subject key identifier: 36:16:EB:E0:66:B6:24:0A:6C:02:B4:F4:AD:D9:29:C0:F3:C1:BA:48
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 01A0D5DD78EDFABA2516B65E3C5EE9150D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1AAD
Signing time: Fri 25 Sep 2026 00:00:56 +0000
Manifest this update: Fri 25 Sep 2026 00:00:56 +0000
Manifest next update: Sat 26 Sep 2026 00:00:56 +0000
Files and hashes: 1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: nPx2H+UXg+IaiUos7npSj7JlFomUswjgsnCXyY2fLxs=)
3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:78:ed:fa:ba:25:16:b6:5e:3c:5e:e9:15:0d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Sep 25 00:00:56 2026 GMT
Not After : Sep 26 00:00:56 2026 GMT
Subject: CN=3616ebe066b6240a6c02b4f4add929c0f3c1ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:d7:3e:9a:e1:78:ab:12:d1:d5:0c:81:ce:
9e:eb:d4:2b:a2:92:3a:42:26:14:1a:22:82:8e:73:
00:36:88:05:5c:6a:eb:94:54:e0:7c:b1:f4:18:bc:
f3:df:23:91:99:36:a3:09:42:46:64:c0:1f:17:f7:
a2:e1:1b:69:2c:ac:0d:be:28:d4:60:a7:52:ea:3b:
52:c6:68:20:c4:3d:4f:54:90:52:37:4c:7f:8f:7a:
a6:6a:eb:85:72:a8:62:f1:d3:d4:ee:56:f4:4f:c2:
b2:30:5f:c2:e2:41:58:b9:de:db:4f:03:c1:ab:f4:
d6:a2:e4:1a:83:b1:cf:68:b3:c5:87:8e:cc:4d:da:
97:ff:47:4d:d5:4d:42:5c:21:b9:3a:c8:30:cf:66:
92:87:26:7a:25:87:cd:bb:73:0e:3a:89:dc:d1:8d:
fe:8b:cb:8b:31:da:6b:a4:a7:75:47:7b:9a:b6:d4:
7e:1f:74:33:3d:1b:5e:52:d2:38:cd:7c:79:ba:d3:
b4:f2:84:2f:29:72:5c:4f:bb:3e:df:ff:19:b7:3b:
fc:b5:4c:09:bb:33:4f:3d:67:f9:b0:34:dd:b4:29:
7c:5b:66:24:5d:14:b7:d0:77:59:7b:e3:2e:2e:0a:
79:d5:d3:a9:60:b5:b0:0a:7d:8b:45:dc:6d:cb:d0:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:EB:E0:66:B6:24:0A:6C:02:B4:F4:AD:D9:29:C0:F3:C1:BA:48
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:92:cf:ca:1e:09:58:0c:19:6f:95:dc:df:7b:4b:3a:0b:
7a:ee:ce:52:32:14:dc:7a:32:77:04:25:2a:70:df:63:13:34:
65:1b:16:25:10:a5:23:e2:b9:bc:2c:d7:93:c3:4c:66:09:a1:
ef:9d:68:e1:cd:fa:60:03:a0:90:9d:63:af:0e:0c:1a:e4:7c:
43:94:2b:0f:09:35:e0:92:62:ee:ac:e2:37:b7:7b:bf:b1:9d:
5d:53:b2:82:b0:17:2c:27:92:84:44:85:59:cd:a5:83:13:8b:
e2:5a:ee:60:2a:af:58:f2:eb:e7:58:be:c9:5f:91:eb:fb:0a:
51:b1:b7:8c:79:ee:ef:4f:ca:46:ea:86:c9:49:25:a2:ba:92:
b7:00:a2:9a:b9:5e:06:6e:76:db:9a:48:8f:2e:1e:cd:c8:78:
59:c5:d1:8d:73:00:31:cc:32:cd:0b:09:63:6f:08:06:b6:45:
6d:d9:e9:29:a5:a9:ad:35:1d:f6:13:ce:d9:df:96:0b:cf:e9:
54:54:6c:21:b9:1a:43:92:6f:11:37:78:0c:1f:5a:cf:4b:86:
af:5f:5b:a8:32:80:35:ef:81:31:16:b2:f8:b0:6f:17:44:c7:
4b:eb:24:96:2a:1e:c4:71:21:6d:83:6d:fc:12:4e:c5:39:82:
40:a6:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:16:43 2026 by rpki-client