Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: U/5ryoDQlDwJ7TqowDQqQsBCZTdFtDKu0SweEz7sK4I=
Subject key identifier: 1A:53:24:31:5C:C0:52:C5:CA:7D:E7:2C:6E:1F:47:EA:E3:56:58:C5
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 01A0C09FDB199C75D827662DECD9CF94E2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 21:01:36 +0000
Manifest this update: Sun 20 Sep 2026 21:01:36 +0000
Manifest next update: Mon 21 Sep 2026 21:01:36 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: ZcDcKJFazkWWvdV3pLeAmaIK9Wsy9uyc5++J2lfPj5I=)
2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:db:19:9c:75:d8:27:66:2d:ec:d9:cf:94:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Sep 20 21:01:36 2026 GMT
Not After : Sep 21 21:01:36 2026 GMT
Subject: CN=1a5324315cc052c5ca7de72c6e1f47eae35658c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:49:97:d6:d2:87:98:32:6f:b3:f9:31:83:
ec:fd:e8:ed:01:d3:78:67:65:44:73:7b:5e:7f:7e:
50:04:91:89:cf:61:22:a7:f8:b1:42:5d:2a:90:b0:
06:31:d8:82:2a:ed:6e:23:e8:15:ac:d6:d8:b8:c6:
68:16:a5:e1:01:ae:ab:ad:17:a4:80:1a:b1:66:2f:
8d:d1:da:77:ef:c7:41:4d:0d:46:9f:1e:7b:23:24:
fd:49:92:50:85:bb:50:cc:17:3e:dd:8b:79:cc:ea:
18:d2:36:74:ef:86:4a:07:fb:c0:be:61:04:fc:1f:
60:5b:98:8a:18:d2:0d:dd:57:bc:cf:5a:5c:57:1c:
4c:26:7e:16:ee:55:a4:81:88:7e:55:17:47:fe:54:
e5:b2:c1:63:44:c1:2f:26:09:43:0d:7a:2a:25:6a:
9c:e0:a2:40:87:34:3c:81:46:e3:cc:03:a4:44:b7:
3e:c9:33:9b:a5:bc:c6:f8:05:9b:b1:d6:2d:d7:49:
9d:7f:3d:05:1a:22:ef:10:18:fe:38:1f:22:c9:f8:
9f:e4:4d:6d:b8:c3:2f:d1:38:2c:54:05:79:de:25:
87:33:82:23:7b:43:99:d3:47:e3:94:a8:25:07:69:
0e:56:c0:70:21:12:dc:8a:72:ee:a3:ac:9e:06:aa:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:24:31:5C:C0:52:C5:CA:7D:E7:2C:6E:1F:47:EA:E3:56:58:C5
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:38:c7:c0:40:06:21:46:8c:65:85:61:1f:3e:e9:d4:f8:
70:d2:93:c6:d0:1e:6a:2e:3f:81:fe:18:1b:85:e6:d3:7d:34:
ce:56:b5:b7:c2:c2:b3:da:57:d9:6e:05:50:83:1e:0e:57:6c:
ad:9d:9c:dd:54:6e:03:70:58:97:9c:a0:1b:cc:c8:22:3f:1b:
99:31:31:72:7e:c8:59:f8:f0:43:3c:35:13:ca:ee:d9:55:92:
bb:d5:a2:11:25:40:7f:cb:7e:bb:ba:c0:80:e8:6b:2c:58:f0:
59:6c:a2:fe:f5:76:a6:24:a1:9f:70:f5:f0:c9:02:32:b4:ef:
4b:f3:cc:ba:15:2a:5d:d0:c2:9c:bf:b0:f7:74:26:a2:3a:ee:
8b:f5:ad:9f:6d:10:a0:8c:e5:22:c4:fd:30:98:5f:8d:56:67:
d7:14:04:05:9c:35:9d:53:a5:46:9c:40:b7:ab:2f:8c:49:25:
0b:55:70:df:5a:88:96:36:d6:8e:2e:0e:95:52:49:96:7a:3e:
8b:1d:a3:18:c7:dd:a6:e6:dc:d9:6a:f1:1e:f3:ae:f3:63:f7:
5c:4a:a3:41:43:bc:1a:58:80:c2:29:c7:93:89:cd:e3:c3:7a:
cb:3f:68:0b:3b:bf:e8:6b:09:82:bd:4d:67:ab:19:3d:48:f9:
33:01:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:14:38 2026 by rpki-client