Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: crMo65ZQ6zt1WxsKfux222z6l2JJpXlHmUlMXc1V+ss=
Subject key identifier: 8A:D2:50:3B:7E:1F:60:1C:87:A9:30:DB:98:5B:57:B9:BC:6D:E9:75
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01A0BE79C69BEE8C58E9A399B41C04F1AF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 11:00:46 +0000
Manifest this update: Sun 20 Sep 2026 11:00:46 +0000
Manifest next update: Mon 21 Sep 2026 11:00:46 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: hrySqu9cYcIi/0yhJbHM2ALAqswY4aUGzCu0QG0nbxA=)
4: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (hash: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=)
5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:c6:9b:ee:8c:58:e9:a3:99:b4:1c:04:f1:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Sep 20 11:00:46 2026 GMT
Not After : Sep 21 11:00:46 2026 GMT
Subject: CN=8ad2503b7e1f601c87a930db985b57b9bc6de975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:ab:be:88:9d:36:0a:81:16:01:ae:80:85:
46:5a:5f:61:25:47:70:c0:8c:e8:f5:c5:0f:56:5d:
a4:ed:13:43:ca:1d:ee:05:eb:96:d2:75:05:2a:35:
0f:98:43:8c:98:7e:4e:e9:4e:d7:3f:4c:c7:d4:8f:
71:a7:ef:52:7e:d3:8d:ab:2f:fc:6b:4d:a5:a5:aa:
49:2a:12:07:dc:f9:b6:b6:e8:95:32:bd:1b:1a:18:
7f:45:02:74:c4:13:18:40:77:c3:79:f8:be:d4:6b:
7f:30:9c:e0:86:f8:86:e3:5d:c6:18:7d:67:31:5e:
0a:fb:6e:0e:04:a8:f6:12:f9:61:ca:f9:5f:19:d6:
3e:7f:22:82:06:fc:eb:60:2b:2c:f5:ce:af:be:f2:
b2:6c:d1:e9:96:e0:37:5b:e7:0c:f2:cc:d6:ed:ec:
89:1d:25:05:f6:93:c1:09:7d:26:9e:60:8f:e0:b1:
29:33:2c:b4:11:45:2f:be:3c:81:f4:1a:c1:c3:97:
79:19:69:24:8b:e6:75:36:ee:0e:44:33:f7:d4:5b:
ee:dc:28:56:04:b7:1f:02:d4:08:79:94:a7:7a:c7:
1e:d8:7d:f9:b0:11:ba:7c:d9:ea:1b:b8:d6:d0:89:
9f:a5:7c:b6:14:5c:c8:63:36:1f:45:39:a4:0e:ca:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:50:3B:7E:1F:60:1C:87:A9:30:DB:98:5B:57:B9:BC:6D:E9:75
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:7e:d8:a7:5b:e9:9e:60:19:bf:96:c5:90:3b:d6:33:e3:
86:0d:fc:42:d8:f0:99:73:61:1d:73:d0:c2:02:72:5f:7a:fc:
43:16:10:b9:9f:81:90:51:43:84:d9:00:2c:4c:17:f3:60:5f:
3c:e5:ba:76:b2:52:0d:4b:c6:3c:90:d7:cb:73:a3:d9:d6:49:
d5:0d:6c:51:5e:a1:32:4c:4d:de:e5:bb:e4:46:5e:d3:f0:aa:
b3:3d:8a:35:72:8e:c8:70:23:85:a0:12:e8:22:b4:72:fd:14:
4c:5a:a0:05:50:4a:58:2e:d3:4d:a4:e8:9b:5b:8a:23:46:0c:
4a:90:cf:27:72:e3:0a:3c:9b:f2:43:2e:40:be:f1:19:5f:10:
81:40:cb:91:1f:51:52:f0:71:ef:9f:e7:15:cf:9c:79:91:9f:
92:fe:6f:2f:9a:d7:f9:aa:37:92:dc:cd:fb:74:f3:7d:fc:3e:
fa:72:f6:0e:79:21:94:8b:4f:e5:91:e8:12:c5:77:28:28:a4:
19:a0:dc:94:da:06:9f:7f:1c:77:69:51:80:1e:f8:5f:e5:5a:
0a:7d:99:00:2e:ee:1f:a1:a6:fc:c3:31:47:99:cf:56:94:24:
47:28:50:7a:11:1c:08:c6:ff:72:8e:9e:9e:94:83:2d:9f:32:
ee:09:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:34:18 2026 by rpki-client