Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
File: L6amU3ABSNrWihlrQ2sLIAXM54k.mft (raw, json)
Hash identifier: +NjPXIbi9qksKucdsI1o0M7Qhlq76Gm5hdPuYZVQyQc=
Subject key identifier: E4:3D:E7:17:88:4E:F2:B1:9E:5B:3C:6F:74:FF:78:02:47:B5:F8:1A
Authority key identifier: 2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89
Certificate issuer: /CN=2fa6a653700148dad68a196b436b0b2005cce789
Certificate serial: 01A0BE0B6B384D2C3FCF630EEC1BCEAEE101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
Manifest number: 0F
Signing time: Sun 20 Sep 2026 09:00:14 +0000
Manifest this update: Sun 20 Sep 2026 09:00:14 +0000
Manifest next update: Mon 21 Sep 2026 09:00:14 +0000
Files and hashes: 1: L6amU3ABSNrWihlrQ2sLIAXM54k.crl (hash: iZxsKuskio/MG8tJ3SC389X2qAN90nBCiF296o6ThnU=)
2: UJZpG357k7EGbknZSHdOivaa5_0.asa (hash: JQnhb+8OI2Shir+TzUBTBrDHCyb9Kq2uxUwWX8hwOcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:6b:38:4d:2c:3f:cf:63:0e:ec:1b:ce:ae:e1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa6a653700148dad68a196b436b0b2005cce789
Validity
Not Before: Sep 20 09:00:14 2026 GMT
Not After : Sep 21 09:00:14 2026 GMT
Subject: CN=e43de717884ef2b19e5b3c6f74ff780247b5f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:a1:68:cd:aa:37:3b:9e:00:9b:45:c6:34:
d4:4f:65:08:27:89:f6:06:04:c2:a3:b5:d2:22:3d:
6c:9e:2e:07:f0:87:5f:eb:d2:cf:3e:b9:e2:82:1b:
6e:07:d1:ef:b5:1c:4e:2d:9f:e9:55:45:6c:10:23:
a5:f6:90:e5:c4:6e:74:e0:64:3c:9f:a6:20:4e:25:
46:00:28:19:9f:c4:1c:84:58:c4:2e:ba:ff:c8:9a:
55:3e:e1:f0:6c:58:5e:f4:28:9b:c8:d2:b0:3d:80:
32:7d:73:de:e4:b9:cd:61:67:d3:38:ac:82:07:b2:
79:9d:14:11:40:80:6c:2e:7c:86:48:47:7c:fb:d7:
4d:a4:46:13:d0:de:21:20:32:ec:b7:44:7a:55:49:
cd:e9:e5:c1:3d:a9:44:78:30:d2:59:87:29:06:fe:
da:ea:90:e1:f5:b7:bf:ba:66:b6:1a:2d:f9:95:a9:
75:d0:6c:10:1a:36:b3:1e:20:fd:00:00:ac:e3:da:
6a:d4:22:a6:9d:0e:4b:3c:d8:62:18:02:90:13:87:
ce:0c:4c:1f:81:53:4c:67:08:1a:a9:7a:d4:03:c0:
9b:ea:59:c1:56:31:f7:e6:7c:e3:7a:d8:fa:fd:4f:
83:1d:8e:94:06:91:2b:71:b8:f5:24:84:8a:59:08:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:E7:17:88:4E:F2:B1:9E:5B:3C:6F:74:FF:78:02:47:B5:F8:1A
X509v3 Authority Key Identifier:
keyid:2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1d:5c:61:23:2c:1f:19:a8:e6:3a:44:c3:d5:f7:cf:8f:17:
20:be:53:31:ba:5c:61:59:ef:53:d6:b9:d2:80:53:8c:ca:2a:
af:6a:85:4d:73:d1:28:23:19:2c:04:1a:43:78:7b:bd:76:ff:
95:e7:7d:fa:83:ef:31:bc:96:4e:b4:24:c8:be:d4:fc:81:5e:
6f:27:ba:f0:42:34:90:79:9f:e9:62:df:b5:a9:c7:81:9f:ca:
05:66:ce:ca:1e:f6:c3:62:30:c2:7a:31:9a:80:90:1d:5b:9b:
78:62:a0:c5:a3:b0:86:ca:55:67:20:ed:a9:2d:bd:26:6b:63:
e5:c8:c7:52:e3:39:bd:81:5c:c4:4d:b2:5e:80:0d:01:2d:d0:
4a:bd:42:fe:bd:23:32:be:16:9e:94:41:80:12:1a:3a:96:5e:
f7:e1:50:a4:b4:69:d1:61:b5:0a:04:57:97:24:38:11:0d:f2:
66:50:34:4f:f9:33:58:15:ad:19:85:b1:b9:6f:49:57:25:56:
5f:5c:ef:4f:c5:dc:4e:40:cb:4e:5a:6d:fa:1d:53:4a:74:e3:
21:cf:72:c5:30:92:1e:8f:b9:89:86:12:f4:5a:b0:bf:94:0a:
7d:72:37:22:a1:44:12:a4:a0:ba:e9:3d:f0:ba:95:42:4b:48:
0f:a1:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:58 2026 by rpki-client